$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft File: manifest.mft (raw, json) Hash identifier: EmOxay1QzJc+l30yL4kuKnwg1OHQgMSJCYFWyaQhQ5A= Subject key identifier: 03:DB:C6:52:38:E0:B4:84:17:AE:CB:36:4D:EB:6D:F9:9B:2A:B5:C7 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 123D378C6713D41C7CD608349E41EC38CB22B05D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft Manifest number: 0650 Signing time: Wed 23 Sep 2026 00:10:36 +0000 Manifest this update: Wed 23 Sep 2026 00:10:36 +0000 Manifest next update: Sun 27 Sep 2026 00:10:36 +0000 Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: lRaza4oTSv80s0nRvQVFd1GE4T+uuqE3c/56F8PmYq0=) 2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: iIHDM3/+WXNJbvnwGQBXplujxAFsKTRIJshTaDQ2+P0=) 3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: pFH0mX/mS/sgsJHsPD8qn/rMn+DTJ3ZqeRaeUX7Sd/o=) 4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: OamEyNs9Hu0JtYjz/T3HrIq6+zrYFAoh1XdRlDH9dpc=) 5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: LIfhw9Wha8vnR9Jm+6F9NuPWFr6q9jWgQ0Fsm+plzso=) 6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: 4pmbz7g4O/Ukb8CdhdoUCeEMb4qdXTEeuhLOtcehxcA=) 7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: jOuib/rqNEB+QR2F/5ggYq891QHKCJh1yIuNR/CNTJo=) 8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: mmNX17+NtJIJh0zbb/SQtHaGLzPUHV1+X/OLX4I1Wzk=) 9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: VP7FIkYH9gl/Bu3dQ9aiPor/IpL0i0KdFD8dUMOak7o=) 10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: qPzKMLETddB1HMtrfs0e/EyZsPUwi+5CNvlo+jknupQ=) 11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: O8R9fDsm2qIOaEx3u8c5fKh+n/zWMwHcNzLgCHsKkGw=) 12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: rNf1YrXcxiwazHFFa/XOYIwqL9UKy6EAFGqESc8O0Oo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 00:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3d:37:8c:67:13:d4:1c:7c:d6:08:34:9e:41:ec:38:cb:22:b0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Sep 23 00:10:36 2026 GMT Not After : Sep 27 00:10:36 2026 GMT Subject: serialNumber=fe14c16c2a9c36420789c5028cad8069e3a50ada0042dd1fbbecbedb7de0c49d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:20:91:77:a0:fa:f1:b4:fd:44:13:a3:e2: d3:4d:68:ac:58:42:cb:42:85:66:db:80:49:79:d9: 01:b5:59:19:53:01:a7:c1:88:2d:4a:0f:25:80:a1: d9:16:8a:35:d1:3f:b8:5d:df:58:eb:5f:57:44:f7: e6:44:cd:92:5f:e3:87:2f:eb:c2:02:07:bc:30:e5: 54:e6:67:eb:56:b4:2a:d9:d6:63:5d:39:a4:9d:48: d9:d3:bb:dc:ea:f0:d8:c0:55:fb:4c:19:46:2a:93: 60:4a:79:02:7c:24:6c:73:a7:e2:6a:d1:99:d4:1b: 25:e9:ae:48:b6:16:1f:83:0b:33:48:d5:81:d5:fa: 36:dd:d6:7d:06:7f:6e:98:7a:df:85:91:a6:1e:12: 00:82:cb:4a:85:c1:7a:79:fd:54:2f:db:d8:e5:d1: 05:db:05:51:78:b6:34:f7:20:9c:d3:eb:6c:37:29: af:42:f5:15:a2:a2:8d:bc:2e:8a:cc:fb:d6:ea:5d: 26:32:d1:cc:f0:0b:a1:7b:13:84:c8:9f:29:11:e8: f4:95:00:71:11:a0:bd:95:e5:23:a5:d4:78:a1:e7: cb:b6:d4:3b:c6:76:a0:33:b7:68:6c:76:43:ca:83: b0:81:72:f7:5d:30:a2:52:e9:e7:ab:a8:41:d8:ad: ac:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DB:C6:52:38:E0:B4:84:17:AE:CB:36:4D:EB:6D:F9:9B:2A:B5:C7 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9a:5c:e5:1a:a5:b4:11:c4:dd:d8:46:37:26:38:34:6a:29: 32:ca:90:30:7d:9f:c2:6e:d9:eb:a0:6b:cb:a9:82:c7:97:32: 29:49:69:e4:66:9d:ed:37:f4:c3:f0:e4:70:b5:87:d0:5d:44: 46:13:aa:2d:7c:f0:d8:24:ec:00:01:f0:1f:50:36:e7:7a:74: 54:6a:a3:55:6a:68:fb:a1:be:cf:7e:ba:ab:2c:bf:c9:a5:21: a1:d4:e5:e5:87:9b:c0:47:94:50:bd:8d:d2:02:e2:6f:b8:03: ed:81:41:8c:85:87:80:8a:f8:46:82:71:19:41:6b:05:d6:ab: 3b:69:60:ff:7a:4d:35:0b:08:1d:6f:05:2f:5b:09:81:4a:40: 9e:3b:63:ce:c7:f7:4f:dc:c9:22:97:51:13:8c:06:70:e0:54: 0d:da:f6:5e:fd:70:60:94:4e:2a:98:77:06:76:47:73:5e:57: ee:2c:92:04:21:4e:ad:3e:e0:28:cd:f8:40:6a:60:ba:9e:cb: c8:79:63:f5:2a:6e:7c:af:c2:84:a3:18:a2:92:12:7f:e8:ab: 07:c6:92:b7:86:5c:22:91:0b:9c:1d:1d:6b:f0:01:26:ef:61: 14:d0:95:e3:c6:5a:03:bb:72:d2:2e:ec:c2:b0:79:81:ed:89: 05:9d:15:01 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUEj03jGcT1Bx81gg0nkHsOMsisF0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDkyMzAwMTAzNloX DTI2MDkyNzAwMTAzNlowejFJMEcGA1UEBRNAZmUxNGMxNmMyYTljMzY0MjA3ODlj NTAyOGNhZDgwNjllM2E1MGFkYTAwNDJkZDFmYmJlY2JlZGI3ZGUwYzQ5ZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfggkXeg+vG0/UQTo+LTTWisWELL QoVm24BJedkBtVkZUwGnwYgtSg8lgKHZFoo10T+4Xd9Y619XRPfmRM2SX+OHL+vC Age8MOVU5mfrVrQq2dZjXTmknUjZ07vc6vDYwFX7TBlGKpNgSnkCfCRsc6fiatGZ 1Bsl6a5IthYfgwszSNWB1fo23dZ9Bn9umHrfhZGmHhIAgstKhcF6ef1UL9vY5dEF 2wVReLY09yCc0+tsNymvQvUVoqKNvC6KzPvW6l0mMtHM8AuhexOEyJ8pEej0lQBx EaC9leUjpdR4oefLttQ7xnagM7dobHZDyoOwgXL3XTCiUunnq6hB2K2scQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFAPbxlI44LSEF67LNk3rbfmbKrXHMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAH6aXOUapbQRxN3YRjcmODRqKTLKkDB9 n8Ju2euga8upgseXMilJaeRmne039MPw5HC1h9BdREYTqi188Ngk7AAB8B9QNud6 dFRqo1VqaPuhvs9+uqssv8mlIaHU5eWHm8BHlFC9jdIC4m+4A+2BQYyFh4CK+EaC cRlBawXWqztpYP96TTULCB1vBS9bCYFKQJ47Y87H90/cySKXUROMBnDgVA3a9l79 cGCUTiqYdwZ2R3NeV+4skgQhTq0+4CjN+EBqYLqey8h5Y/UqbnyvwoSjGKKSEn/o qwfGkreGXCKRC5wdHWvwASbvYRTQlePGWgO7ctIu7MKweYHtiQWdFQE= -----END CERTIFICATE-----Generated at Wed Sep 23 22:20:42 2026 by rpki-client