$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: f/6ZJSD8qJBVl3RSIbvvZf5t6g/nOG6YlvfsX+FdBRE= Subject key identifier: 3E:1B:1F:CB:BA:3D:C3:89:00:F7:A1:E2:12:3A:17:DF:80:8B:7A:FF Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 7CD5E77B14EDB45E9ED72E099E98F30E5FABB6B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0656 Signing time: Wed 11 Nov 2026 00:06:11 +0000 Manifest this update: Wed 11 Nov 2026 00:06:11 +0000 Manifest next update: Sun 15 Nov 2026 00:06:11 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: GzrrAfumHEMPi4ACEsRqcf2EBNjWevtrlZjHnMAFDks=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: 6ESbmpYd7H+0YV5LqCGCwBRmIUQlbPsgFEVkrcgvI6A=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: tt4cYUE6Kg8jt0O69Zb567gWFoo5rjLLM97F4/aSiTA=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: +a466zVwESTdjxfgtVGtNTJoIjBPUJ9uv2Bs/ijyO9Y=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: ctv+s5liGUupTIOcwnKFBRlwhuBF5BgXDx/DcStRkH4=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: U7qwuCrz1VnCc4jL9xa+4gQpFF8nN1gLyrdZ/L63EFo=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: AuAujhXdgm5mBGRTRbp9PUBSto8ttdqG3SjYXkZJhNU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: k7pzzb7UOogLzyI+ALFcZaO4Qks0yCOFh766YQdmoGM=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: yd19C6h/RNw72xUQbi1RiJ0NpwfFebSRtzXl8mlaNHw=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: e1DBvmMaPGpJSh8i8g0PuQJn1YYGKeTyLpjn4SuF59M=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: yynW230gtjoHe64VdAtkS5LYRTOFwLp0sflgw8zSW1g=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: b3WbF1oNV58mWBREtuTQNy22jE820qPWck/kuIxmC1c=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: ebFkf49zM5vj6p8bvgwDY4iblS2Eu/OC9RTEbXIZXLY=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: wjxc0bk+R6A/Qa3pHhsyRWed5/iyieBQym3MXX6RyzY=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: 7/m/Cx18xbuwPUSrgdH7o86spQdYaPb/GIoOb3+ub70=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: ej5Jl8WN8vpG/jtiHBYWjgJxmlZgso4oyf4xH338b+c=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: c3ibl3WQRyfORjyV2jtV99MlRLv/+v4zO7ir01Gms8M=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: bCxmHdL+unu38R9ml+09zoVGrJd1Ey3pw4pz0o5BVp0=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 00:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d5:e7:7b:14:ed:b4:5e:9e:d7:2e:09:9e:98:f3:0e:5f:ab:b6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Nov 11 00:06:11 2026 GMT Not After : Nov 15 00:06:11 2026 GMT Subject: serialNumber=3ee3841d3059bf6584e459e5ca29f075d429394060ffacbe20bb7b8811796d9a, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:59:58:ab:97:6a:0f:04:41:84:e5:04:aa: 9a:90:5e:06:fa:e2:b2:73:cc:5c:1d:88:50:6e:fa: e6:e2:6e:3f:7e:63:63:03:dd:66:c5:78:90:14:c8: ce:71:53:26:96:a4:83:95:9b:07:78:28:57:d5:15: 5f:0f:a8:77:8d:76:9c:7e:0e:60:ab:f7:ad:15:6f: 79:58:ed:1b:8c:af:37:78:dc:82:a0:ec:75:14:cd: 9d:ea:64:58:f8:85:4c:bf:0b:2e:d4:19:4c:74:2a: 4d:1e:5f:91:04:ea:10:a8:28:59:97:d4:0b:c0:63: 9f:b1:4b:50:6a:4e:e6:09:dc:f0:1f:0e:6f:b7:e0: 21:5f:80:93:87:ca:c1:3d:3a:af:59:c7:a6:77:53: 69:ac:10:c8:f7:67:53:a8:5a:65:8f:41:f3:0f:b2: 51:a6:3e:54:51:84:72:0d:61:a2:9f:49:93:17:3f: 74:cb:c2:ea:27:39:63:2e:2b:43:86:67:9f:24:cb: 06:e9:3d:1c:02:59:8a:d6:64:d8:fc:06:f8:de:84: 90:b5:d5:a9:02:05:5a:18:3d:ff:d8:34:2b:d8:25: 8d:a5:59:41:8e:50:dc:98:71:a6:33:bf:f8:a2:da: 65:1b:18:ed:45:de:8c:2e:c2:27:a6:5b:ab:d5:58: 6f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1B:1F:CB:BA:3D:C3:89:00:F7:A1:E2:12:3A:17:DF:80:8B:7A:FF X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:72:7a:1f:da:ae:89:d0:ac:fc:6a:8b:78:31:4d:55:8f:3e: d2:1c:3f:c6:a7:d1:5f:3e:86:86:b5:b3:31:7a:53:8b:06:8f: 5e:b9:a5:83:a2:a0:fb:6c:eb:4b:e8:05:c7:25:d2:84:a8:e7: 7a:19:97:4a:79:0c:77:0d:b9:48:e6:da:2b:18:c9:c7:b5:af: 61:aa:bb:78:68:48:a7:9c:7a:43:a5:f3:38:31:1b:c2:79:e0: f0:f2:dc:3d:c6:f0:13:27:05:83:9b:a8:58:aa:0e:25:ce:98: e6:67:fd:ab:bb:22:c5:c1:e8:f3:57:4a:7d:4a:77:fc:45:27: 22:2b:02:a9:09:72:28:b3:0f:82:7c:55:de:f2:6c:4e:c0:c6: fd:66:4c:39:5e:d7:98:b2:9b:98:c6:28:08:8f:d6:69:c1:03: dc:e9:9b:e3:be:2d:12:6b:4e:5e:c1:36:62:b4:f5:83:be:61: b4:4f:b7:4b:07:57:81:16:54:c2:cc:49:0c:d3:c9:6f:da:fe: 11:a0:c1:e0:f3:ec:f0:38:4f:e0:1c:6e:3c:9b:fa:72:22:5a: 02:67:53:01:20:8a:f1:9a:b9:2c:d7:18:d5:ab:3b:d0:76:d5: 61:9d:58:c2:2e:40:ec:30:03:6b:d2:a2:78:9b:33:2b:82:75: 6f:2d:7f:dd -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUfNXnexTttF6e1y4JnpjzDl+rtrgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MTExMTAwMDYxMVoX DTI2MTExNTAwMDYxMVowejFJMEcGA1UEBRNAM2VlMzg0MWQzMDU5YmY2NTg0ZTQ1 OWU1Y2EyOWYwNzVkNDI5Mzk0MDYwZmZhY2JlMjBiYjdiODgxMTc5NmQ5YTEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX1ZWKuXag8EQYTlBKqakF4G+uKy c8xcHYhQbvrm4m4/fmNjA91mxXiQFMjOcVMmlqSDlZsHeChX1RVfD6h3jXacfg5g q/etFW95WO0bjK83eNyCoOx1FM2d6mRY+IVMvwsu1BlMdCpNHl+RBOoQqChZl9QL wGOfsUtQak7mCdzwHw5vt+AhX4CTh8rBPTqvWcemd1NprBDI92dTqFplj0HzD7JR pj5UUYRyDWGin0mTFz90y8LqJzljLitDhmefJMsG6T0cAlmK1mTY/Ab43oSQtdWp AgVaGD3/2DQr2CWNpVlBjlDcmHGmM7/4otplGxjtRd6MLsInplur1Vhv5QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFD4bH8u6PcOJAPeh4hI6F9+Ai3r/MB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAINyeh/aronQrPxqi3gxTVWPPtIcP8an 0V8+hoa1szF6U4sGj165pYOioPts60voBccl0oSo53oZl0p5DHcNuUjm2isYyce1 r2Gqu3hoSKecekOl8zgxG8J54PDy3D3G8BMnBYObqFiqDiXOmOZn/au7IsXB6PNX Sn1Kd/xFJyIrAqkJciizD4J8Vd7ybE7Axv1mTDle15iym5jGKAiP1mnBA9zpm+O+ LRJrTl7BNmK09YO+YbRPt0sHV4EWVMLMSQzTyW/a/hGgweDz7PA4T+Acbjyb+nIi WgJnUwEgivGauSzXGNWrO9B21WGdWMIuQOwwA2vSonibMyuCdW8tf90= -----END CERTIFICATE-----Generated at Wed Nov 11 14:15:17 2026 by rpki-client