
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: yMySGU7iuLxAiY7/bqv6faXD3aXEy8zmm4P7t5uGOww=
Subject key identifier: FF:D4:F7:AE:DC:62:E1:B2:51:DD:5D:79:E9:3B:F0:E0:91:50:7D:43
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 67547DEB5F14E4A5344C776CFA190B14DB1457F3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number: 0610
Signing time: Thu 23 Jul 2026 00:10:38 +0000
Manifest this update: Thu 23 Jul 2026 00:10:38 +0000
Manifest next update: Mon 27 Jul 2026 00:10:38 +0000
Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: Grb3erG38UbpyYsT3rOw4xl8udj5pUp3uk3wNuteHbg=)
2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: R/QKXPq5qLhFIabDpt7jqk1FIjprU0/TFPidwEL+QgA=)
3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: 4ERa0OLBAsTdhNR7PKjNbLOEoi7QlFl+HL77jxvD1Y0=)
4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: SMLBbDSomO7mEapTkw4/On1vpbT/Fseuwss9zz9v5cQ=)
5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: e73sGTbu5FZ2lz0mPWzoXcq+IxeUu4jdraf1fBClxjY=)
6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: cN5Dt6FayyiAKQcY6Lfn/GGbMLbZidxIe56c5AQO0tk=)
7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: 8UX4MeSRd7upoffLe62HCmWqH9tHPe92Ibwf6x5JZ+A=)
8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: sjhedanhIT69u3QGXMV3XtJ1G9qRnmR8tianfLbCBKc=)
9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: b6lxpApzbPaXHwHPMyIksTA3oWbV6R4fe7b432nIkQg=)
10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: 5MDlGu3GRi6oA3CVqqCU79t2Bn0udJla1Ad5oQeQB1o=)
11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: O8R9fDsm2qIOaEx3u8c5fKh+n/zWMwHcNzLgCHsKkGw=)
12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: ttj+xFM+LnTZib2Qm1IdvDV7beTbrXhca9IDFXw6y4k=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 00:10:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:54:7d:eb:5f:14:e4:a5:34:4c:77:6c:fa:19:0b:14:db:14:57:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Jul 23 00:10:38 2026 GMT
Not After : Jul 27 00:10:38 2026 GMT
Subject: serialNumber=76ae1b22edc8802f244e6f0a3a12e4fd794b82aeff52e13f9e9f55aadf7f64ed, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:15:e2:e7:f3:17:96:33:d1:34:c1:85:fe:
1d:10:af:40:f5:12:cb:9c:b3:13:fd:84:af:a0:07:
f9:8f:6d:90:54:11:08:93:5a:66:97:80:37:1d:c6:
5e:c8:1d:aa:82:da:02:2f:08:85:ad:5a:27:c3:01:
19:b2:32:e6:8e:de:c3:be:a1:bc:9b:b3:2d:8d:3b:
39:7e:64:9e:91:8a:45:ed:6c:7e:09:94:bb:f4:ac:
99:20:71:5f:ec:54:e2:e8:01:de:de:12:0d:d9:46:
a3:c8:e7:49:d5:c9:a1:77:66:d4:f6:7b:f0:96:36:
34:33:53:6c:5d:a6:7a:37:4b:c7:62:83:fb:b4:9a:
42:ad:3b:80:ea:83:f2:27:ab:8f:45:52:b5:c8:5d:
25:aa:5b:1b:76:6b:63:fd:bd:53:60:10:2a:b1:49:
7c:d6:35:0d:34:25:2c:ae:bb:77:42:6f:42:e5:d6:
43:31:f8:b6:6d:5b:63:1d:42:1d:42:52:b5:70:bd:
f9:79:a7:a2:fb:f6:85:f4:3f:46:a9:26:18:6a:c1:
44:44:43:01:95:63:05:80:a1:ec:94:00:c0:72:c7:
de:c9:13:83:da:7c:f3:6b:9c:dd:c1:5f:cd:af:e1:
f2:f9:d7:b1:b6:cc:af:2e:60:2c:f5:47:3e:cf:19:
52:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D4:F7:AE:DC:62:E1:B2:51:DD:5D:79:E9:3B:F0:E0:91:50:7D:43
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d3:6d:13:c9:42:c2:5a:59:43:11:ed:c1:af:de:a0:c2:9f:
42:69:df:7d:c9:c2:32:ef:a7:75:bc:b3:9c:67:08:50:27:0e:
e8:b6:62:c5:35:fc:99:55:90:a0:e1:e3:10:92:c1:36:88:9c:
df:b1:1b:77:47:36:38:7e:6e:a8:0e:32:f3:a7:28:e7:a2:c0:
2c:dc:39:ce:43:aa:c3:f3:27:c3:c8:8f:0f:a5:ed:aa:27:0b:
42:d4:89:af:5c:03:b6:9b:f9:16:6c:30:65:0a:8e:73:d7:6c:
4b:a5:5d:6b:00:df:8d:01:cb:43:63:33:4e:b0:62:22:88:05:
64:80:ed:5d:3a:12:09:a2:98:83:05:dd:49:39:aa:39:eb:be:
5b:5a:46:3a:47:ae:18:0d:f2:25:63:fa:bb:f2:88:b5:f9:14:
bb:9c:67:50:51:af:91:54:53:15:67:dc:69:66:24:f4:06:8e:
bc:c0:b1:31:95:1b:be:96:f8:41:7c:16:33:67:e0:95:16:f7:
37:7a:ed:5d:25:9d:36:21:ea:c0:6a:9c:a1:e3:13:8d:10:05:
c2:df:de:c3:0e:ea:df:19:de:3d:17:84:6f:36:d1:cf:fd:dc:
a2:b0:a5:67:18:dc:6c:2c:61:fa:07:e7:97:89:d1:50:02:02:
1f:20:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:08:48 2026 by rpki-client