
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: gRgYi917E+8VHyZcZfLl9MfNk6H10mJrIwuJZ4wAbnc=
Subject key identifier: E8:9C:7B:1B:68:23:EE:19:B7:0F:14:55:E7:5F:F7:60:2C:98:FF:7D
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 7A034DD79E2DF96352B92D287AC01B7A8F423BE2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05BB
Signing time: Wed 13 May 2026 00:03:56 +0000
Manifest this update: Wed 13 May 2026 00:03:56 +0000
Manifest next update: Sun 17 May 2026 00:03:56 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 4yYVnCc8jbTv2nJdh483O8XaK9RLGIrSG3nO0snYHVw=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 17 May 2026 00:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:03:4d:d7:9e:2d:f9:63:52:b9:2d:28:7a:c0:1b:7a:8f:42:3b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: May 13 00:03:56 2026 GMT
Not After : May 17 00:03:56 2026 GMT
Subject: serialNumber=b3f65aad4c9d5cbfe71fec388a24da8561e189610159b3aaf4fc00969ee7cf5a, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:c8:72:f1:d2:24:56:2f:bd:00:19:2c:6b:
90:92:d3:43:55:fb:85:54:ab:51:35:c4:8f:0d:73:
66:b8:c7:18:62:1e:0c:02:7a:d3:2d:36:15:89:ab:
da:9e:19:5e:81:e7:e3:f1:7f:3d:aa:80:40:14:08:
2d:00:ef:4a:6f:fc:1b:2d:00:ef:3c:55:1b:bd:50:
6c:b3:a7:e4:91:1a:b0:17:5c:8c:e4:9c:09:e5:93:
be:6b:ef:e7:0e:ad:2b:06:07:2f:6f:a3:c7:b3:a2:
a2:57:c1:dd:b8:3e:78:5b:c1:f7:70:9f:25:e4:36:
63:3a:a9:05:e9:5f:54:58:89:30:87:8e:14:58:58:
5c:36:88:1e:10:e4:0a:5a:99:34:df:59:51:e1:fe:
32:13:f6:00:2c:51:07:fd:69:82:69:07:de:c0:52:
8e:c9:ab:64:76:87:62:1c:7a:1e:f9:5f:3e:13:80:
50:9c:e0:90:38:e1:0c:80:f9:67:4c:23:c3:13:5e:
06:2c:2a:2e:28:68:da:69:c1:28:6b:ef:41:f2:bd:
ba:9c:34:5b:c7:3d:57:77:04:41:87:2e:c5:7c:78:
e7:f8:7e:68:5c:42:23:d9:5e:b1:26:d2:d0:29:fd:
5a:d0:59:23:a5:60:c7:d0:25:6b:14:3a:73:fd:b0:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9C:7B:1B:68:23:EE:19:B7:0F:14:55:E7:5F:F7:60:2C:98:FF:7D
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:cf:9d:25:72:02:23:86:6e:0d:8b:28:d3:1d:32:9b:38:57:
ae:21:30:c5:92:39:2a:50:80:3d:c3:54:2e:f7:31:8f:72:02:
3a:fb:70:61:32:ce:8e:2d:90:be:4b:3e:6d:00:4a:8b:73:5c:
3e:bc:a8:9c:06:3b:45:73:37:1b:93:7d:18:84:68:b5:c8:ff:
36:a5:1a:e5:e9:7d:5f:04:2c:66:b0:89:a5:6d:bd:aa:7b:c1:
63:d1:54:0c:e7:96:90:20:72:04:f0:c3:76:5a:c7:74:98:18:
73:07:62:b0:9b:99:fd:6a:66:0e:54:3d:4e:b2:77:7d:03:1a:
69:b3:c6:a8:f6:39:82:52:b7:63:5e:e9:29:50:45:76:78:c3:
d4:50:b6:28:20:94:92:67:ae:26:55:e1:df:de:92:1b:89:d3:
ef:79:3f:c1:7a:44:a5:6e:ce:6a:70:eb:5c:9f:bb:34:d9:3b:
d5:f9:e0:27:05:47:01:fb:85:a1:fc:a7:7d:47:a1:08:cc:73:
c6:06:6a:50:ba:05:25:8e:b6:1f:72:ed:64:3e:31:9d:8b:11:
f2:2f:88:27:df:3b:5b:2c:bb:c2:e1:8b:24:40:36:84:ec:6d:
6e:6d:41:dd:c2:31:68:15:41:14:05:5d:23:f5:00:6f:7c:fa:
4a:f1:1f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:42 2026 by rpki-client