$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft File: manifest.mft (raw, json) Hash identifier: 2V1P4KySidQA4WMHgNK6h2Z0OWRH+WB3CjjW/9qohxo= Subject key identifier: 56:4A:D0:67:EF:97:C5:48:E9:42:FA:43:2E:AF:82:5B:BD:AC:C1:F9 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 775570B9B934D3EAF44889B537CF947DC27A9A56 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft Manifest number: 0651 Signing time: Thu 24 Sep 2026 00:10:45 +0000 Manifest this update: Thu 24 Sep 2026 00:10:45 +0000 Manifest next update: Mon 28 Sep 2026 00:10:45 +0000 Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: lRaza4oTSv80s0nRvQVFd1GE4T+uuqE3c/56F8PmYq0=) 2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: iIHDM3/+WXNJbvnwGQBXplujxAFsKTRIJshTaDQ2+P0=) 3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: pFH0mX/mS/sgsJHsPD8qn/rMn+DTJ3ZqeRaeUX7Sd/o=) 4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: OamEyNs9Hu0JtYjz/T3HrIq6+zrYFAoh1XdRlDH9dpc=) 5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: LIfhw9Wha8vnR9Jm+6F9NuPWFr6q9jWgQ0Fsm+plzso=) 6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: 4pmbz7g4O/Ukb8CdhdoUCeEMb4qdXTEeuhLOtcehxcA=) 7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: jOuib/rqNEB+QR2F/5ggYq891QHKCJh1yIuNR/CNTJo=) 8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: mmNX17+NtJIJh0zbb/SQtHaGLzPUHV1+X/OLX4I1Wzk=) 9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: /3Ri8w20tbo1DQzYEvIlaye/PDPRpENcfDLVpuGOLkY=) 10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: qPzKMLETddB1HMtrfs0e/EyZsPUwi+5CNvlo+jknupQ=) 11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: O8R9fDsm2qIOaEx3u8c5fKh+n/zWMwHcNzLgCHsKkGw=) 12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: rNf1YrXcxiwazHFFa/XOYIwqL9UKy6EAFGqESc8O0Oo=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 00:10:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:55:70:b9:b9:34:d3:ea:f4:48:89:b5:37:cf:94:7d:c2:7a:9a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Sep 24 00:10:45 2026 GMT Not After : Sep 28 00:10:45 2026 GMT Subject: serialNumber=dee0c57f0993a192c27b78d04765b5ae0c6108c8bacb028a975b46f502dbfab9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:32:d7:4d:fe:42:bb:a0:50:77:51:8c:48: 54:31:6c:2b:9d:5b:48:af:0a:3b:1a:44:6a:66:14: bb:be:d6:3b:5a:3e:7d:50:fd:07:0b:2e:9b:aa:4f: dd:72:84:fc:d3:6e:81:f3:53:61:ab:89:96:f4:16: 8f:98:c2:b0:eb:26:c6:98:af:60:12:ad:6d:8d:ea: f1:0a:97:09:cd:15:7b:b2:50:ea:0a:db:8f:69:d4: 07:75:85:eb:8f:6b:75:86:3f:4e:3f:12:fd:a0:05: 6f:b9:73:7f:e0:22:26:fa:b4:70:c9:b6:85:02:52: a5:d2:44:20:50:73:f8:21:5b:73:8f:52:32:89:75: 91:5f:29:01:af:7a:f1:53:7c:01:a5:1f:19:61:99: 94:ea:5e:a3:6b:6d:b9:c4:ce:99:a1:55:4d:6b:df: 75:cd:84:af:bb:a4:5c:1c:76:f8:a8:4a:9a:92:c2: f1:c1:78:d4:8c:27:2a:f3:ee:2d:a0:4c:93:3d:06: 7e:c8:f0:90:72:78:2b:cb:89:ba:a6:b4:cb:26:3f: d8:17:60:eb:66:95:d1:e6:a6:ac:f0:8f:e9:74:fb: 25:67:b0:58:9e:d2:04:44:ea:7b:b9:d1:0b:37:06: e8:95:cf:58:1c:b6:08:4d:92:ee:36:50:a4:e3:bf: 78:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:4A:D0:67:EF:97:C5:48:E9:42:FA:43:2E:AF:82:5B:BD:AC:C1:F9 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f9:c6:70:06:2a:f6:d5:8a:c4:85:1a:b1:62:31:de:cc:ed: fc:c6:a3:8a:b7:1d:75:68:f7:7f:eb:25:93:7e:22:2d:d2:6e: 40:4e:24:39:e6:43:48:be:74:39:ff:fb:8a:8f:cb:ee:d5:fc: bd:da:49:f5:78:9d:33:33:45:ca:db:d2:42:45:9b:fd:ed:cf: d1:f7:83:51:03:9d:22:f3:4e:13:68:a5:e0:e5:b3:f5:2d:08: aa:b0:e4:3c:84:2a:b5:f3:99:b3:1f:9e:f0:1e:63:ca:cf:d2: cc:db:07:af:60:46:d6:6f:fc:b0:ea:7d:47:98:ca:d0:28:95: 06:84:ef:a8:70:48:5f:2c:0c:ca:64:71:c8:00:64:9f:3f:4c: 89:7f:bd:f9:40:9d:77:21:ec:0d:70:e2:54:89:cf:f1:eb:31: 96:be:07:1f:00:55:34:01:dd:34:22:c4:2c:26:11:ad:ed:c8: f8:e9:75:79:29:c2:29:f2:5d:38:a0:04:60:d6:fc:10:9d:de: d8:ed:99:d8:ce:58:c3:c1:4d:47:ce:3a:61:d1:14:36:4c:2e: b4:1e:74:71:6d:a6:b0:63:9d:d8:67:ee:07:94:95:e9:b1:81: 05:cf:4c:0b:39:75:19:2e:fb:15:b0:58:08:35:17:98:05:32: 72:67:a2:5d -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUd1Vwubk00+r0SIm1N8+UfcJ6mlYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDkyNDAwMTA0NVoX DTI2MDkyODAwMTA0NVowejFJMEcGA1UEBRNAZGVlMGM1N2YwOTkzYTE5MmMyN2I3 OGQwNDc2NWI1YWUwYzYxMDhjOGJhY2IwMjhhOTc1YjQ2ZjUwMmRiZmFiOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuycy103+QrugUHdRjEhUMWwrnVtI rwo7GkRqZhS7vtY7Wj59UP0HCy6bqk/dcoT8026B81Nhq4mW9BaPmMKw6ybGmK9g Eq1tjerxCpcJzRV7slDqCtuPadQHdYXrj2t1hj9OPxL9oAVvuXN/4CIm+rRwybaF AlKl0kQgUHP4IVtzj1IyiXWRXykBr3rxU3wBpR8ZYZmU6l6ja225xM6ZoVVNa991 zYSvu6RcHHb4qEqaksLxwXjUjCcq8+4toEyTPQZ+yPCQcngry4m6prTLJj/YF2Dr ZpXR5qas8I/pdPslZ7BYntIEROp7udELNwbolc9YHLYITZLuNlCk4794TQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFFZK0Gfvl8VI6UL6Qy6vglu9rMH5MB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGz5xnAGKvbVisSFGrFiMd7M7fzGo4q3 HXVo93/rJZN+Ii3SbkBOJDnmQ0i+dDn/+4qPy+7V/L3aSfV4nTMzRcrb0kJFm/3t z9H3g1EDnSLzThNopeDls/UtCKqw5DyEKrXzmbMfnvAeY8rP0szbB69gRtZv/LDq fUeYytAolQaE76hwSF8sDMpkccgAZJ8/TIl/vflAnXch7A1w4lSJz/HrMZa+Bx8A VTQB3TQixCwmEa3tyPjpdXkpwinyXTigBGDW/BCd3tjtmdjOWMPBTUfOOmHRFDZM LrQedHFtprBjndhn7geUlemxgQXPTAs5dRku+xWwWAg1F5gFMnJnol0= -----END CERTIFICATE-----Generated at Thu Sep 24 12:56:31 2026 by rpki-client