$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft File: manifest.mft (raw, json) Hash identifier: jm9gKZTNMCXIZTKefqzKu6sTbYsHmaK76rZdVQMb8IU= Subject key identifier: 3A:3B:B7:7A:27:34:E0:24:0D:65:24:B3:D0:13:C5:AD:AD:4F:D6:63 Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Certificate serial: 5AE69F2D10AEA88B83D683177FC588F400714937 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft Manifest number: 06C9 Signing time: Wed 11 Nov 2026 00:06:16 +0000 Manifest this update: Wed 11 Nov 2026 00:06:16 +0000 Manifest next update: Sun 15 Nov 2026 00:06:16 +0000 Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: MMTb8pq8AMWvbI/gwxGU26sHrFHl6uyVdZb2UlhIE4c=) 2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: hHS0xXZ6pvh/dRVL58ms/OoVMs9w1l+Mtrrj03/9Ibs=) 3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: vsd8H0ZXROgbcMd/yOBF4Rr2WxC8q8haStlcApwRNV0=) 4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: 3wN3pxcjzw7syiUxAt83nomcr89rOgXxIJI+jjtEZLw=) 5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: F1FArQzNTCGD4JZjh1LAuO6hCcCelvb9o6BkT+npT/g=) 6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: UeN2/2dzuqoJ5gtGFCaoPuzhuQrQVJtF3xacIIrOp3o=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:e6:9f:2d:10:ae:a8:8b:83:d6:83:17:7f:c5:88:f4:00:71:49:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08 Validity Not Before: Nov 11 00:06:16 2026 GMT Not After : Nov 15 00:06:16 2026 GMT Subject: serialNumber=11b942b4cd6582ef5009623aa0e96fc685b8cb8643404da7863951fa5a87d343, CN=bb9a9116-f615-462e-a680-5266b327e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:97:90:79:a2:e4:c7:9a:09:72:ad:7a:6c: dc:10:22:74:2c:01:8a:8a:40:5d:11:0b:8d:df:6d: e5:4c:23:3c:ff:70:c4:ca:0b:5b:5e:65:cd:aa:b9: f2:07:30:98:35:b0:bc:b9:7a:61:40:75:c7:a2:02: 13:fb:90:6c:92:c3:20:fc:b2:b8:7c:f8:b3:0a:e1: 05:27:e5:7f:25:b8:0f:7f:2b:10:61:0f:c9:e1:cc: 31:4a:d6:bb:b7:7b:fa:ca:06:97:81:5d:eb:69:fc: b5:2a:3c:89:5d:5c:e3:a2:e4:1c:c6:0f:c7:e9:e7: dd:7e:73:46:40:ef:16:d0:88:f0:a4:1e:4f:5e:55: 64:b3:dd:84:bb:a3:6d:4c:c8:0e:dd:18:e8:30:fa: 37:83:34:21:11:7e:b1:1f:02:8f:7c:c7:55:e9:b2: 40:f4:74:fa:57:cb:83:e5:a2:3e:d0:ea:fc:09:4b: 7a:48:63:ae:7d:fa:c2:c1:dc:0b:36:1e:f7:7f:d5: dd:91:68:24:73:3e:c8:29:ba:4d:3a:3e:f5:47:b2: 11:e8:06:c3:e7:c6:ee:98:5e:78:de:55:7f:4d:ca: 75:78:f0:8e:0a:11:9d:13:96:fc:f4:03:77:28:92: 3a:c8:0e:7f:8d:22:27:7e:82:c6:0b:65:b3:df:18: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:3B:B7:7A:27:34:E0:24:0D:65:24:B3:D0:13:C5:AD:AD:4F:D6:63 X509v3 Authority Key Identifier: keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:18:49:47:0d:7e:e6:16:b1:0f:56:67:9b:fc:aa:8e:79:c4: 84:64:fd:15:52:23:fe:ec:a6:33:2f:a8:b5:ad:05:7c:5b:fa: 63:b0:b5:50:e3:d0:43:ce:c5:42:47:43:c7:2d:71:8d:7a:20: 78:b8:48:d0:23:03:7d:71:e7:74:b6:b1:c1:c2:46:1e:bb:b2: d5:9b:dc:d7:79:d9:84:2a:df:fd:cb:a8:6b:46:65:9f:d7:f0: 5a:55:13:4a:d6:f0:38:98:24:1a:f8:0c:b0:aa:aa:fd:4b:e0: b3:3a:f3:7c:52:45:a4:6a:ab:b6:b9:a8:06:a8:9e:6c:5d:bc: 62:27:c4:ff:7d:80:7c:20:fc:a6:4d:2c:bb:85:1f:9b:0d:22: d4:b5:82:a3:6d:0d:4b:8e:14:d4:db:c7:bb:7c:85:1a:8d:9a: 91:7b:d0:60:1b:12:c6:53:91:a3:f5:83:6c:3a:54:d3:96:31: 77:96:15:3d:f0:c3:2b:67:c7:51:3d:fe:1d:e8:63:37:d8:71: aa:92:74:46:88:64:09:b3:f9:64:f6:4e:37:82:5a:1b:61:9c: 9f:ef:32:a6:9c:5d:81:a4:c9:66:7d:4f:1b:d2:77:c6:e0:ca: 3a:28:5e:5a:d8:c8:6e:ef:c8:c4:a1:94:3f:7d:1d:28:2c:8f: 7d:3d:ff:10 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUWuafLRCuqIuD1oMXf8WI9ABxSTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4 ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MTExMTAwMDYxNloX DTI2MTExNTAwMDYxNlowejFJMEcGA1UEBRNAMTFiOTQyYjRjZDY1ODJlZjUwMDk2 MjNhYTBlOTZmYzY4NWI4Y2I4NjQzNDA0ZGE3ODYzOTUxZmE1YTg3ZDM0MzEtMCsG A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgeXkHmi5MeaCXKtemzcECJ0LAGK ikBdEQuN323lTCM8/3DEygtbXmXNqrnyBzCYNbC8uXphQHXHogIT+5BsksMg/LK4 fPizCuEFJ+V/JbgPfysQYQ/J4cwxSta7t3v6ygaXgV3rafy1KjyJXVzjouQcxg/H 6efdfnNGQO8W0IjwpB5PXlVks92Eu6NtTMgO3RjoMPo3gzQhEX6xHwKPfMdV6bJA 9HT6V8uD5aI+0Or8CUt6SGOuffrCwdwLNh73f9XdkWgkcz7IKbpNOj71R7IR6AbD 58bumF543lV/Tcp1ePCOChGdE5b89AN3KJI6yA5/jSInfoLGC2Wz3xjlRQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFDo7t3onNOAkDWUks9ATxa2tT9ZjMB8GA1UdIwQY MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAFQYSUcNfuYWsQ9WZ5v8qo55xIRk/RVS I/7spjMvqLWtBXxb+mOwtVDj0EPOxUJHQ8ctcY16IHi4SNAjA31x53S2scHCRh67 stWb3Nd52YQq3/3LqGtGZZ/X8FpVE0rW8DiYJBr4DLCqqv1L4LM683xSRaRqq7a5 qAaonmxdvGInxP99gHwg/KZNLLuFH5sNItS1gqNtDUuOFNTbx7t8hRqNmpF70GAb EsZTkaP1g2w6VNOWMXeWFT3wwytnx1E9/h3oYzfYcaqSdEaIZAmz+WT2TjeCWhth nJ/vMqacXYGkyWZ9TxvSd8bgyjooXlrYyG7vyMShlD99HSgsj309/xA= -----END CERTIFICATE-----Generated at Wed Nov 11 13:38:59 2026 by rpki-client