$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft File: manifest.mft (raw, json) Hash identifier: KDV8aw3UfAwb8QuE15HrPhbo2ZNTPwMoWV/CWyAK58c= Subject key identifier: 62:E9:B4:E9:F5:1C:6D:F0:54:40:BE:3B:DD:6D:A1:C8:CB:EC:73:0B Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Certificate serial: 6DC5B9C5949E9745E3BD4C941A7ABD635A67895E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft Manifest number: 0624 Signing time: Wed 23 Sep 2026 00:10:10 +0000 Manifest this update: Wed 23 Sep 2026 00:10:10 +0000 Manifest next update: Sun 27 Sep 2026 00:10:10 +0000 Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: lY4T+SAC/eq1lqcLwr6+duWXCWoI/25yj9GloUcLqnc=) 2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: pAUau9W2Q1n8bkWgMJqn69Gjg4QnMvogj11ziiAugt0=) 3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: Nti5XZ3SZ/5X5vml90GJptxj5wU4R5TflY4EtGcxI/E=) 4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: mGCP92ndXqtbWgc35vK8fF+nQmakA/RqaYIANAYMDts=) 5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=) 6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: 7DQ1BBqI+YGQodqSp/9cow4A6cRx6MURcx/z2L1uszc=) 7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 08q2O5O5oVmNxk4BNjhuMscxxtdmm3vZP0iC3ZndTbU=) 8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: NV3yneSLI5yJGt7cnV3Ta6BrskfYvxCuGX94eQwyA2M=) 9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: D9xiPJKltLi1oo6sb2TxxXvpuzEBQxWHQbF9EnhGI8E=) 10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: EYImvr29ra2F/O4KTQhRVqHeXq3TuWtI5rObt3hFbnA=) 11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: SmhnWkJlgRO1ZNn792ZwOUn8Tem6AvtEchsHWxmpNlg=) 12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: Q826nO8V91uH1JkWDv8cfHhS+jZDK8fx34H9LEGu0ug=) 13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: QhnxFBgjUxHiRKLTJPQ2sIaTKqb14Jbu69kbxZumNEw=) 14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=) 15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: yLQ60Vu1aG8yLvN50aTCpkr3v59yQOtQsDjF9xdyhPU=) 16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: Mf2NIJH9IfPzZ7oAHeUn9AKZQZwtos7P5QRYym1AnzM=) 17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: 33hPW4gI2TGJ5byNnROxUh04t/0LZvEPOiok6H/PYmk=) 18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 00:10:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c5:b9:c5:94:9e:97:45:e3:bd:4c:94:1a:7a:bd:63:5a:67:89:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC Validity Not Before: Sep 23 00:10:10 2026 GMT Not After : Sep 27 00:10:10 2026 GMT Subject: serialNumber=aad7aba02a908fbb1c017ee7782af820b1bf06b6bb073f8f4ccb2518e4f763f7, CN=58810403-9ba0-403a-809b-c78252ab7f5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ac:4c:58:e3:58:c3:14:a4:cb:bd:66:db:dc: 12:14:95:4d:46:79:e5:b9:50:b8:25:af:6f:69:24: 09:b4:78:25:86:56:ff:28:0e:bf:5a:57:cc:ea:24: f2:a2:cb:9c:de:e6:a2:fa:e4:a4:0b:00:d5:89:cc: e7:1f:fe:7e:b6:2b:df:9c:e1:db:e9:d6:b2:43:d7: 7d:04:6e:84:57:44:a7:56:bc:e2:d5:66:0b:21:bb: 81:c7:11:42:cb:0f:f7:90:3e:99:4f:4e:05:20:38: f4:d5:bf:d4:b2:a2:44:c1:34:ec:dd:18:ee:6a:9c: 6e:31:86:1e:5b:88:8c:49:8a:51:e5:28:3f:90:24: ee:d8:cb:bc:79:4d:d0:46:a4:58:e4:e5:0d:bd:bf: 01:4e:a7:b8:5a:cb:ee:e1:31:cc:85:c7:37:bd:99: de:7a:d9:4b:52:42:69:28:55:e3:2b:e2:f2:dc:f1: 6c:f7:d7:f6:b8:e5:f4:9b:51:ac:54:57:31:bc:82: 6e:26:3f:a1:a9:e3:77:30:f8:d8:08:e5:0d:ca:53: 1d:18:eb:cc:84:96:72:95:83:d7:4d:6e:68:2b:cd: 28:4b:83:4e:e1:b7:34:0f:cf:1e:68:79:2d:ac:23: df:ac:84:55:e0:7c:14:9e:15:92:7b:10:9a:9b:de: 48:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E9:B4:E9:F5:1C:6D:F0:54:40:BE:3B:DD:6D:A1:C8:CB:EC:73:0B X509v3 Authority Key Identifier: keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f7:b8:30:b8:7c:18:f8:63:e2:ca:25:5a:5f:c2:b4:94:a6: e6:60:ac:b3:f7:69:2a:78:55:60:2e:be:99:0e:d6:11:56:fd: 9e:68:01:e1:79:3c:4d:60:7c:f4:16:be:98:5e:b4:8e:f1:9c: 12:22:5e:be:7b:40:77:c7:31:9c:92:f2:10:dd:9e:82:ef:41: 9d:b6:f0:0e:29:69:b0:5c:75:38:d8:2d:eb:19:f7:0e:d6:37: 96:70:57:7a:38:6e:c6:12:52:d5:5a:0f:0d:64:21:a7:58:ee: 67:68:f3:cc:75:10:86:f3:f3:d1:63:ac:85:b7:cc:4f:4e:46: b8:d9:db:f0:1f:79:82:bd:eb:c2:80:6b:1c:b9:79:ee:dc:5e: f7:64:2e:a4:ef:a5:e0:bb:8e:3b:3d:36:36:b7:d4:95:4a:d4: 66:87:59:a1:56:4e:4f:8f:2f:67:72:a6:43:ec:c2:29:2c:3a: 45:12:5e:83:74:44:37:af:18:02:2e:d6:b4:2c:f5:12:86:09: b8:07:9a:40:26:f7:6a:28:29:48:12:79:a4:e4:92:af:d9:01: 1c:1b:b5:87:c0:93:3c:e4:ec:56:84:42:41:a1:b9:79:12:2f: 19:28:9a:fa:59:70:b9:88:9e:44:79:58:41:3f:6c:45:26:9b: de:46:a9:97 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUbcW5xZSel0XjvUyUGnq9Y1pniV4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDkyMzAwMTAxMFoX DTI2MDkyNzAwMTAxMFowejFJMEcGA1UEBRNAYWFkN2FiYTAyYTkwOGZiYjFjMDE3 ZWU3NzgyYWY4MjBiMWJmMDZiNmJiMDczZjhmNGNjYjI1MThlNGY3NjNmNzEtMCsG A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqxMWONYwxSky71m29wSFJVNRnnl uVC4Ja9vaSQJtHglhlb/KA6/WlfM6iTyosuc3uai+uSkCwDVicznH/5+tivfnOHb 6dayQ9d9BG6EV0SnVrzi1WYLIbuBxxFCyw/3kD6ZT04FIDj01b/UsqJEwTTs3Rju apxuMYYeW4iMSYpR5Sg/kCTu2Mu8eU3QRqRY5OUNvb8BTqe4Wsvu4THMhcc3vZne etlLUkJpKFXjK+Ly3PFs99f2uOX0m1GsVFcxvIJuJj+hqeN3MPjYCOUNylMdGOvM hJZylYPXTW5oK80oS4NO4bc0D88eaHktrCPfrIRV4HwUnhWSexCam95IXwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGLptOn1HG3wVEC+O91tocjL7HMLMB8GA1UdIwQY MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKX3uDC4fBj4Y+LKJVpfwrSUpuZgrLP3 aSp4VWAuvpkO1hFW/Z5oAeF5PE1gfPQWvphetI7xnBIiXr57QHfHMZyS8hDdnoLv QZ228A4pabBcdTjYLesZ9w7WN5ZwV3o4bsYSUtVaDw1kIadY7mdo88x1EIbz89Fj rIW3zE9ORrjZ2/AfeYK968KAaxy5ee7cXvdkLqTvpeC7jjs9Nja31JVK1GaHWaFW Tk+PL2dypkPswiksOkUSXoN0RDevGAIu1rQs9RKGCbgHmkAm92ooKUgSeaTkkq/Z ARwbtYfAkzzk7FaEQkGhuXkSLxkomvpZcLmInkR5WEE/bEUmm95GqZc= -----END CERTIFICATE-----Generated at Wed Sep 23 11:21:23 2026 by rpki-client