$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: VxzSqBmak0Qb6x/RmIQ+EQ3pl6mwbbYGWeyNmIceTT8= Subject key identifier: 91:B6:85:D9:FA:52:06:23:56:CE:94:E8:24:DC:5C:EF:09:C8:47:4D Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 3DFE2E23DCDC67E11CD694C66A51C9F872D00AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 05EA Signing time: Tue 28 Jul 2026 00:02:47 +0000 Manifest this update: Tue 28 Jul 2026 00:02:47 +0000 Manifest next update: Sat 01 Aug 2026 00:02:47 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: Tq3fF/a7OvBkU3g4aoOjzGeIopJptNOAvtshIuCffME=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: IybdQRuGKUz+LbkBrptFU/9JKaJTr8Dn8X3VCAKzJNE=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: 5JBx3U3yROg9e1Wa4wZ6pBktVXmoZ2pDGJ03dT+dcwg=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: sweULcZjHPT8IwxPRaLVa8xz7kL7MLaA+OqEV/RFsD8=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: gvyzuHo1Rq2CUm3xPRJ3/SMJriiWd/xSrtjuBGswy9A=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: QG3zvrKKXmxLv+GVXi5B7E0Z2ufvNvdW7NKfX0GmA4U=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: fYYnNyZky/qrlLWP5S8zSm2v17ULDsXYq5Y9Nh1hza0=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: jD96HDgEn/zWsiTq/SWr7fYH0XYVMse/ftRmFQ24FaM=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 4UuC+OYJXwgl+ZOhdImkz2/tYQnFq/fxM6y2ExbbwJc=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: t5iHZ0YZekzmfq0y+PhVUngf/qO+t6VtPofs+84y//8=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: uA3ZeD81Ey+SQMUY6max8Ur1zQBSW7JWHCluKDYrMdY=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: 8rTp6mbrD5rf+jzY3ic4O1UnEJSQtRUpgFi5WUndeBY=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: Gc4Egy67JM0d/HEcfrgEvgnyi7RS8L58SIDhvgQi9/c=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: 8rR2NDI380wGgc15cYW7w6lGnHDb3tV92XlKn9SGrDM=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: boMsB6m0tXlf5cEYATl81Y1PhDlDlwgP1NKoYJsEPT0=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Aug 2026 00:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fe:2e:23:dc:dc:67:e1:1c:d6:94:c6:6a:51:c9:f8:72:d0:0a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jul 28 00:02:47 2026 GMT Not After : Aug 1 00:02:47 2026 GMT Subject: serialNumber=0c0aa0e6bafe82e82775448fc4338d6af9048edb71047222ef8a0d8c7bcf7c17, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9d:01:76:25:38:ac:16:6f:b2:2a:d5:1d:4d: 83:73:41:c0:f7:6a:c8:51:bb:ff:06:a4:4a:a7:1c: ec:cf:34:b3:8a:d5:33:69:1e:a8:9c:8c:de:15:45: a8:5d:75:94:6d:59:2d:53:16:cf:06:ad:0e:cb:32: c5:1b:67:93:0b:f8:73:d1:6b:70:b7:46:45:64:15: 23:5b:a2:cb:53:b0:72:13:d9:1c:b3:95:fc:00:ff: a9:65:10:00:27:12:b7:ee:9d:30:d9:d4:37:64:b7: e7:b5:48:4d:fc:73:2a:a1:04:ec:ab:b3:c8:41:a8: 6f:c8:cd:5d:69:67:86:9f:47:f6:58:ef:0d:b3:3a: 97:41:bf:b8:89:25:6d:2b:35:cb:54:ee:bd:4e:8b: 46:50:dc:83:73:bf:6a:85:e5:cf:f4:43:03:42:9a: bf:b0:36:7d:b0:25:b7:a2:44:9b:69:e9:9e:61:c8: 1c:24:b6:a4:5a:eb:4f:8d:74:b7:ad:af:5a:2f:0e: f1:7a:46:34:29:98:b0:23:7c:bd:8e:2b:db:d9:17: 95:54:82:81:bb:bb:f3:5e:cc:a4:00:d9:3f:f4:03: 59:e2:b5:3a:74:7c:02:e7:ae:d5:56:f1:ab:a0:f4: a7:a7:d9:56:93:a7:f2:d7:c1:ba:d6:29:5e:84:81: 2a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B6:85:D9:FA:52:06:23:56:CE:94:E8:24:DC:5C:EF:09:C8:47:4D X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:6a:80:50:2f:b8:9a:92:0b:a4:ff:d9:9c:d8:81:4d:e5:f7: 25:a0:12:3a:ca:29:5e:5b:62:8b:a0:7c:9b:25:2c:a0:f1:bf: d1:54:29:90:96:c9:c9:b9:5f:77:90:06:08:43:a8:32:38:9f: 1b:4f:f7:0b:09:0a:c0:2a:e1:3b:5e:f4:21:2c:89:d1:49:ba: dd:67:ee:d9:3b:88:ed:a7:c9:2f:ef:85:4c:68:e6:f1:af:03: 46:ae:5f:8e:70:f4:5c:73:9d:c9:e2:80:37:1a:5a:86:7c:12: f0:f8:3a:42:28:2f:52:19:6c:c8:53:c3:4e:8e:0e:a6:60:45: fc:f0:d8:96:73:cb:07:6c:6b:2b:cd:3c:5c:76:e1:5b:e6:55: 21:51:b2:45:cd:a5:31:a7:88:11:ee:68:32:3c:df:05:a5:4a: 87:4b:c1:29:3b:89:d2:7c:26:c5:7c:41:53:14:9e:ec:d0:30: ed:93:6f:8a:d9:58:2f:16:6f:66:0a:7c:4b:1d:8e:d7:51:a2: b4:ef:9b:11:c9:bd:1b:16:77:00:7e:35:61:70:d9:44:7e:42: e9:2e:71:e3:ab:0c:61:d9:5c:12:7c:09:02:8b:c9:c3:95:a2: e0:94:6b:90:89:57:50:70:42:19:e4:79:57:6f:ff:0b:5b:f8: 16:6e:c6:79 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUPf4uI9zcZ+Ec1pTGalHJ+HLQCv8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDcyODAwMDI0N1oX DTI2MDgwMTAwMDI0N1owejFJMEcGA1UEBRNAMGMwYWEwZTZiYWZlODJlODI3NzU0 NDhmYzQzMzhkNmFmOTA0OGVkYjcxMDQ3MjIyZWY4YTBkOGM3YmNmN2MxNzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9J0BdiU4rBZvsirVHU2Dc0HA92rI Ubv/BqRKpxzszzSzitUzaR6onIzeFUWoXXWUbVktUxbPBq0OyzLFG2eTC/hz0Wtw t0ZFZBUjW6LLU7ByE9kcs5X8AP+pZRAAJxK37p0w2dQ3ZLfntUhN/HMqoQTsq7PI QahvyM1daWeGn0f2WO8NszqXQb+4iSVtKzXLVO69TotGUNyDc79qheXP9EMDQpq/ sDZ9sCW3okSbaemeYcgcJLakWutPjXS3ra9aLw7xekY0KZiwI3y9jivb2ReVVIKB u7vzXsykANk/9ANZ4rU6dHwC567VVvGroPSnp9lWk6fy18G61ilehIEqGQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJG2hdn6UgYjVs6U6CTcXO8JyEdNMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIZqgFAvuJqSC6T/2ZzYgU3l9yWgEjrK KV5bYougfJslLKDxv9FUKZCWycm5X3eQBghDqDI4nxtP9wsJCsAq4Tte9CEsidFJ ut1n7tk7iO2nyS/vhUxo5vGvA0auX45w9FxzncnigDcaWoZ8EvD4OkIoL1IZbMhT w06ODqZgRfzw2JZzywdsayvNPFx24VvmVSFRskXNpTGniBHuaDI83wWlSodLwSk7 idJ8JsV8QVMUnuzQMO2Tb4rZWC8Wb2YKfEsdjtdRorTvmxHJvRsWdwB+NWFw2UR+ QukuceOrDGHZXBJ8CQKLycOVouCUa5CJV1BwQhnkeVdv/wtb+BZuxnk= -----END CERTIFICATE-----Generated at Tue Jul 28 20:54:31 2026 by rpki-client