$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: c8lVeEHfhw7/QJm6aM8lCpNS9pgG/UfP5EpLIvOBMHM= Subject key identifier: 1C:DF:C0:FE:67:72:D7:9E:94:59:09:EE:29:65:6E:12:03:75:17:6B Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 39425B5C3B8BAFABA90C12E40A92C8C12841937C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 045B Signing time: Sun 29 Jun 2025 00:02:49 +0000 Manifest this update: Sun 29 Jun 2025 00:02:49 +0000 Manifest next update: Thu 03 Jul 2025 00:02:49 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: YTDq95/cD2y6kgjonoqKu3d/UvPX3mpCjEjBur8UT4w=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: ItV2Ew2DrFxoyp4E0Qwk+uH0GZYGeKzn4prU+kPwQ9g=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: siRpFZYlY5ztHIO6yNyZnoOzY7IkuS6L7DUVBd9glOU=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: mnnnpJEsNrVVCR/e4A00POwOphO03bJXxM9TTLVPThg=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: +dzONGNai6iYaWAA/mZLCMKzE3BXs0Z2YT+0LpelQQk=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: rghJU+YKLi/mV7ogFzSiXEu02Z3GSUk2wY3EizWWe0Y=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: TmvV23v8BfdrADDunzEgadF+v1dR5s9dUQIw7sTW4eg=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: YsaQmRR0OZX3lkKY1eSw8k7P3bmzmAhW4tRpyyhC8Kw=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: evARivfctCJzVmwpDh/B0ReIJ+nqm9vhxEOixclkJio=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: u8aIaGtw3jMPJcvm1XgdR3LHZDNbHs8Fv2uUu6apQ9g=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: udflOAg44OF06j5ZszzbuoT5Wk4PtlFoCDNMazt8qWM=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: mK8nw5ocdT7prVXzrYFbPG/w4yNEaOUN+kseA5GuO0c=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: C2MB5GzqK5lKaiTOBmrwnH5PvdTI75G6WtHcMPJ5vW8=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: IYHRgJxoeEsXLVEiHIFbV73CkeECzOHou2wNUc0dx3s=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: lwvpz+kYIji9OEHpIjk95BefY0WqjiTE6p1lPxDNxuY=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: YfdhokvQFhPeWiDHOz7EEfcnP0J6uRoN9JNUru0ShSs=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: MDz5QyWJgPD5YovlmkSTMLBsWYLrrpw3wE0mAJ6O9dM=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: btx/opP9Qtsy/2G/bpONUhHndKqqH++egKns+RlBMcE=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 00:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:42:5b:5c:3b:8b:af:ab:a9:0c:12:e4:0a:92:c8:c1:28:41:93:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Jun 29 00:02:49 2025 GMT Not After : Jul 3 00:02:49 2025 GMT Subject: serialNumber=8415b575fca7a69937bb146290a3c43a6e6dea1ea1eae405a89d9a873a197737, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:e5:94:81:ce:ee:14:80:00:aa:d4:7c:0c: 8d:61:e5:2b:68:1b:84:b9:c7:b7:40:45:48:ac:32: 27:1f:3e:66:cf:6f:73:84:8a:4d:e1:b2:b8:57:09: 34:48:86:cb:71:a3:93:ea:8e:96:9f:8f:ac:ae:17: c1:75:60:7b:8a:cf:57:23:93:71:05:69:7c:42:5e: 77:85:ef:5b:69:1a:f8:5f:72:a3:cb:d8:65:97:71: 81:ef:9f:9b:c1:c6:f6:f7:bf:c3:de:4f:09:e6:ac: b8:ce:58:9a:20:22:28:a9:13:e5:10:be:e4:64:63: 31:ce:e4:4c:0c:ba:24:45:18:c1:2f:94:a1:7f:1d: e2:36:af:c9:59:14:34:e4:67:d9:e0:17:73:26:4a: af:ba:63:a7:9b:d7:a0:1e:e1:ed:7f:7d:e9:e7:78: 18:a9:90:ca:57:41:ff:e9:3d:12:e7:3c:57:98:61: 8c:98:ec:6a:4b:92:9f:2d:29:ba:cb:8f:e6:b3:52: 41:4e:4b:bd:e4:45:68:4e:87:0b:e4:bb:ed:24:28: 16:35:7d:d8:2c:60:2f:d8:40:f9:ee:a8:5d:28:60: a8:00:17:00:8d:5c:ff:64:11:f5:d8:96:3c:9d:8a: 3e:bb:d3:7e:00:cb:e2:0a:f8:e2:c6:7a:8e:c8:da: 5e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DF:C0:FE:67:72:D7:9E:94:59:09:EE:29:65:6E:12:03:75:17:6B X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:af:69:52:66:97:42:70:58:f1:f0:5b:b4:47:59:68:c2:30: 2f:79:5c:0d:91:fc:68:c6:e5:62:a3:e2:56:5c:f2:01:6a:bb: 5d:2d:89:83:24:32:3c:a4:94:32:a8:d0:01:30:5c:ac:dd:d1: 04:94:38:6e:d1:70:c3:9b:18:e0:10:e6:9c:3c:ec:85:a4:1c: 18:bb:b9:34:31:b7:2a:04:56:c7:14:9e:85:0d:6d:24:86:05: d8:94:e7:50:1d:5c:01:35:1a:29:21:1d:2c:5e:66:b7:82:e0: fe:61:20:e7:3c:4f:71:e5:32:2e:5a:41:d1:a3:d7:de:32:fa: 25:7b:27:94:6d:4e:2b:86:87:cc:29:a6:01:cc:76:58:8c:03: 2f:65:0f:ac:9a:60:03:38:f8:68:13:11:3d:43:e2:9a:71:6f: 59:4d:c0:99:f4:cd:26:3b:6f:ab:58:c1:81:c0:d5:d4:bf:69: 30:5b:11:7d:1b:76:cb:53:3a:a6:fb:54:03:1a:55:84:0c:48: f7:b5:78:5c:c6:09:a3:0b:cc:a2:54:ce:62:83:3d:60:39:c2: 47:76:cf:95:61:d4:83:cc:b9:70:7b:d7:1f:47:a0:48:96:95: 0f:e0:f3:7b:74:1d:20:6e:59:3d:e4:82:56:c0:05:a8:b5:90: b9:c2:21:ac -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUOUJbXDuLr6upDBLkCpLIwShBk3wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MDYyOTAwMDI0OVoX DTI1MDcwMzAwMDI0OVowejFJMEcGA1UEBRNAODQxNWI1NzVmY2E3YTY5OTM3YmIx NDYyOTBhM2M0M2E2ZTZkZWExZWExZWFlNDA1YTg5ZDlhODczYTE5NzczNzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7zllIHO7hSAAKrUfAyNYeUraBuE uce3QEVIrDInHz5mz29zhIpN4bK4Vwk0SIbLcaOT6o6Wn4+srhfBdWB7is9XI5Nx BWl8Ql53he9baRr4X3Kjy9hll3GB75+bwcb297/D3k8J5qy4zliaICIoqRPlEL7k ZGMxzuRMDLokRRjBL5Shfx3iNq/JWRQ05GfZ4BdzJkqvumOnm9egHuHtf33p53gY qZDKV0H/6T0S5zxXmGGMmOxqS5KfLSm6y4/ms1JBTku95EVoTocL5LvtJCgWNX3Y LGAv2ED57qhdKGCoABcAjVz/ZBH12JY8nYo+u9N+AMviCvjixnqOyNpeJQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBzfwP5ncteelFkJ7illbhIDdRdrMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBABOvaVJml0JwWPHwW7RHWWjCMC95XA2R /GjG5WKj4lZc8gFqu10tiYMkMjyklDKo0AEwXKzd0QSUOG7RcMObGOAQ5pw87IWk HBi7uTQxtyoEVscUnoUNbSSGBdiU51AdXAE1GikhHSxeZreC4P5hIOc8T3HlMi5a QdGj194y+iV7J5RtTiuGh8wppgHMdliMAy9lD6yaYAM4+GgTET1D4ppxb1lNwJn0 zSY7b6tYwYHA1dS/aTBbEX0bdstTOqb7VAMaVYQMSPe1eFzGCaMLzKJUzmKDPWA5 wkd2z5Vh1IPMuXB71x9HoEiWlQ/g83t0HSBuWT3kglbABai1kLnCIaw= -----END CERTIFICATE-----Generated at Sun Jun 29 07:13:49 2025 by rpki-client