$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft File: manifest.mft (raw, json) Hash identifier: hAQImb9r5VuDo0uMXwlahhXaIpAxteAp6Jte+NSfRZE= Subject key identifier: 5D:FB:1C:CC:04:0A:F9:8E:BA:B8:A9:B2:DF:85:22:FD:94:7B:53:CD Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 0F35AE1A9DE90E2259CED7557C960582596010BA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft Manifest number: 05C8 Signing time: Wed 13 May 2026 00:21:58 +0000 Manifest this update: Wed 13 May 2026 00:21:58 +0000 Manifest next update: Sun 17 May 2026 00:21:58 +0000 Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: HifPHeBwsO/AlIR45rsqvzHRP4MIeEvu4rBsdIj34M0=) 2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: R/QKXPq5qLhFIabDpt7jqk1FIjprU0/TFPidwEL+QgA=) 3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: dXBg2t9Rc27bMuDurzNxUcsK/TwKsHlPOvFnpp5aTVE=) 4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: AgmdN3qsU2yrUPs1RIDpHG3eyZeN4lzX4GL8YuDvcs0=) 5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: xsaM36rzv8Uw5QN5dHxdEYXHzAwA5KNUnJAuj5qn0Dw=) 6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: J9RI4VJSTxgaFW+3QF3NgsoWAna5ZD6zPEc51yMjTfg=) 7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: RBUJ8ShSm5Anvido6XPzsBu4tV+RRenjv9jc903Ikwg=) 8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: sjhedanhIT69u3QGXMV3XtJ1G9qRnmR8tianfLbCBKc=) 9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: PoCAedf0Q/TyjOGNnbjt2YupOEQdojKb5uDBbaPXZ50=) 10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: 5MDlGu3GRi6oA3CVqqCU79t2Bn0udJla1Ad5oQeQB1o=) 11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: RzCD7581ODd0G/PaE75k0bTCDiHj2ugi5EIEr8jr/z0=) 12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: ttj+xFM+LnTZib2Qm1IdvDV7beTbrXhca9IDFXw6y4k=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 00:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:35:ae:1a:9d:e9:0e:22:59:ce:d7:55:7c:96:05:82:59:60:10:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: May 13 00:21:58 2026 GMT Not After : May 17 00:21:58 2026 GMT Subject: serialNumber=9e8b591855a47702735aea957e28d3a1430deb1b72ee8e1e3ec0e2ed230752a0, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7b:72:33:79:aa:98:3f:3c:ca:76:e7:a0:a5: 97:ca:6b:71:ec:ec:71:d5:59:d2:3a:8d:8a:60:10: 89:cd:04:8f:5c:53:fa:f8:bd:55:5a:65:70:a6:25: 50:21:01:86:f6:0d:e0:dd:4e:85:b5:4e:45:a1:61: ed:8e:88:2f:81:73:61:1f:97:f0:2c:23:18:92:64: f8:67:b1:46:75:28:df:73:9b:a8:81:1e:60:1a:d5: 85:59:d3:6e:4a:ae:c9:ce:63:bf:1e:14:31:17:c2: f7:c7:89:96:51:a6:72:3a:92:78:80:ca:54:d9:11: 4a:72:8c:d0:14:79:29:cd:47:68:6d:1f:51:da:62: ed:6d:b1:74:14:0e:bb:a3:fb:b5:ec:64:b8:cb:c4: 99:1b:0f:77:67:0f:15:9c:18:d4:51:9e:d6:c3:7e: 6a:33:eb:fb:cd:a5:f6:46:ac:28:10:0a:ac:e8:fa: 05:e1:db:d1:a9:f2:28:d1:74:b2:8c:90:47:e6:66: ed:5c:a1:1a:a6:f8:e5:8c:3e:d5:dd:87:d3:c9:d1: 77:dd:89:a1:86:4c:6d:f3:96:3e:2d:ac:35:d2:89: d4:da:64:da:41:83:40:07:c6:9f:4a:88:51:08:ee: 27:84:7d:23:3d:91:9c:58:09:c9:b5:8a:4d:2b:4b: 40:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FB:1C:CC:04:0A:F9:8E:BA:B8:A9:B2:DF:85:22:FD:94:7B:53:CD X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ff:7e:74:2a:38:4e:d1:1e:e0:cc:7a:b0:ae:2c:90:dd:8f: 15:5a:e1:a5:6c:2c:2e:8e:70:2e:ad:34:4f:b3:32:b5:f3:32: 0c:84:76:01:a5:c6:17:3d:00:98:9e:23:5a:94:2f:d3:f7:36: 72:ee:5a:9d:7d:cf:91:38:15:2d:29:72:6b:31:f2:95:1e:e6: a4:0c:19:74:36:53:1e:68:c2:6f:80:4d:86:3f:a5:a5:45:96: 86:a5:85:a8:fb:d9:ab:c2:a6:f4:16:26:0c:ca:e3:30:63:9b: 67:12:f3:1a:02:68:b9:ce:00:56:52:15:4d:bd:b0:75:99:75: b1:65:6f:19:7d:99:5f:27:24:37:54:8d:db:fc:81:e6:e5:a9: 80:75:cf:06:6b:68:f2:9d:1f:a1:33:3b:a6:ae:85:0f:a7:aa: cc:a9:a4:2f:80:4e:62:28:67:f0:89:48:39:a7:6d:1d:f5:44: 6f:aa:0e:2a:60:54:ef:1e:6e:e0:f0:c1:cf:3e:a2:31:6c:33: 94:57:86:37:83:c1:cd:a6:70:b9:71:d1:c0:c3:6d:67:23:0c: 4e:ed:47:2c:b2:1c:97:d2:62:ed:4d:8d:1c:1d:12:5b:42:55: c2:a4:b1:4e:45:87:c2:02:69:2e:0d:7b:0d:88:ad:5a:cc:97: fb:74:26:81 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUDzWuGp3pDiJZztdVfJYFgllgELowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDUxMzAwMjE1OFoX DTI2MDUxNzAwMjE1OFowejFJMEcGA1UEBRNAOWU4YjU5MTg1NWE0NzcwMjczNWFl YTk1N2UyOGQzYTE0MzBkZWIxYjcyZWU4ZTFlM2VjMGUyZWQyMzA3NTJhMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13tyM3mqmD88ynbnoKWXymtx7Oxx 1VnSOo2KYBCJzQSPXFP6+L1VWmVwpiVQIQGG9g3g3U6FtU5FoWHtjogvgXNhH5fw LCMYkmT4Z7FGdSjfc5uogR5gGtWFWdNuSq7JzmO/HhQxF8L3x4mWUaZyOpJ4gMpU 2RFKcozQFHkpzUdobR9R2mLtbbF0FA67o/u17GS4y8SZGw93Zw8VnBjUUZ7Ww35q M+v7zaX2RqwoEAqs6PoF4dvRqfIo0XSyjJBH5mbtXKEapvjljD7V3YfTydF33Ymh hkxt85Y+Law10onU2mTaQYNAB8afSohRCO4nhH0jPZGcWAnJtYpNK0tAAwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFF37HMwECvmOuripst+FIv2Ue1PNMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAJX/fnQqOE7RHuDMerCuLJDdjxVa4aVs LC6OcC6tNE+zMrXzMgyEdgGlxhc9AJieI1qUL9P3NnLuWp19z5E4FS0pcmsx8pUe 5qQMGXQ2Ux5owm+ATYY/paVFloalhaj72avCpvQWJgzK4zBjm2cS8xoCaLnOAFZS FU29sHWZdbFlbxl9mV8nJDdUjdv8geblqYB1zwZraPKdH6EzO6auhQ+nqsyppC+A TmIoZ/CJSDmnbR31RG+qDipgVO8ebuDwwc8+ojFsM5RXhjeDwc2mcLlx0cDDbWcj DE7tRyyyHJfSYu1NjRwdEltCVcKksU5Fh8ICaS4New2IrVrMl/t0JoE= -----END CERTIFICATE-----Generated at Wed May 13 04:42:32 2026 by rpki-client