Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          7NiAcEMfjBvqPNEgaRolllL27+NzZLnrzuL3cO3wLHc=
Subject key identifier:   88:B8:FD:85:11:DE:04:C2:31:1A:30:9A:CB:66:3C:0D:39:20:C1:8A
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer:       /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial:       63EE99ED613E091D7640C82BB8B2B332F9F1288B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number:          05E6
Signing time:             Fri 24 Jul 2026 00:02:11 +0000
Manifest this update:     Fri 24 Jul 2026 00:02:11 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:11 +0000
Files and hashes:         1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: Tq3fF/a7OvBkU3g4aoOjzGeIopJptNOAvtshIuCffME=)
                          2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: IybdQRuGKUz+LbkBrptFU/9JKaJTr8Dn8X3VCAKzJNE=)
                          3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: 5JBx3U3yROg9e1Wa4wZ6pBktVXmoZ2pDGJ03dT+dcwg=)
                          4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: sweULcZjHPT8IwxPRaLVa8xz7kL7MLaA+OqEV/RFsD8=)
                          5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=)
                          6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: gvyzuHo1Rq2CUm3xPRJ3/SMJriiWd/xSrtjuBGswy9A=)
                          7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: QG3zvrKKXmxLv+GVXi5B7E0Z2ufvNvdW7NKfX0GmA4U=)
                          8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: fYYnNyZky/qrlLWP5S8zSm2v17ULDsXYq5Y9Nh1hza0=)
                          9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: wFJxTlzkEb9MnlAzhCSUIxYixLPYgnP08iJ7ceWPh6s=)
                          10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 4UuC+OYJXwgl+ZOhdImkz2/tYQnFq/fxM6y2ExbbwJc=)
                          11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: t5iHZ0YZekzmfq0y+PhVUngf/qO+t6VtPofs+84y//8=)
                          12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: uA3ZeD81Ey+SQMUY6max8Ur1zQBSW7JWHCluKDYrMdY=)
                          13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: 8rTp6mbrD5rf+jzY3ic4O1UnEJSQtRUpgFi5WUndeBY=)
                          14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=)
                          15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: Gc4Egy67JM0d/HEcfrgEvgnyi7RS8L58SIDhvgQi9/c=)
                          16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: 8rR2NDI380wGgc15cYW7w6lGnHDb3tV92XlKn9SGrDM=)
                          17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: boMsB6m0tXlf5cEYATl81Y1PhDlDlwgP1NKoYJsEPT0=)
                          18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 00:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ee:99:ed:61:3e:09:1d:76:40:c8:2b:b8:b2:b3:32:f9:f1:28:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
        Validity
            Not Before: Jul 24 00:02:11 2026 GMT
            Not After : Jul 28 00:02:11 2026 GMT
        Subject: serialNumber=a83c43466353d92ee15066d0b61f65033bfc894d99ab2eb002c869c55633f2f0, CN=58810403-9ba0-403a-809b-c78252ab7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6a:2f:32:a4:d5:b5:84:2d:8d:36:19:5e:f1:
                    74:98:dd:39:00:25:64:b8:d7:87:1a:54:0b:0c:ea:
                    3a:da:44:4f:26:41:4d:58:8b:2c:fb:4a:a4:79:49:
                    8b:14:7a:87:44:83:3d:8e:ef:22:43:5b:84:85:87:
                    af:d4:9c:4c:94:49:6a:72:7b:3e:0f:42:cb:45:30:
                    82:98:f4:72:b9:7d:54:8c:c9:c8:5b:65:8d:e2:ae:
                    8b:24:b7:b2:92:aa:97:39:b9:6f:8d:b8:56:6b:c1:
                    0c:8b:50:45:f8:c7:fe:fb:25:dc:04:b4:96:a3:16:
                    2d:17:76:e2:dc:bc:bd:a2:21:96:a2:80:dd:a8:69:
                    f1:dd:f4:22:27:71:40:79:8c:9e:3e:e4:bf:4f:58:
                    f0:33:98:cf:4c:70:cf:f5:b2:e8:d7:dd:3a:29:25:
                    20:fb:5f:16:05:d3:80:6f:1a:31:80:fe:2c:89:80:
                    6e:23:2b:b6:b1:d5:74:c7:8e:07:36:5a:c9:27:38:
                    94:6b:4c:8d:94:8c:a9:f3:0e:f4:06:52:e5:69:00:
                    54:48:2c:14:f9:4c:02:36:81:65:10:cb:f7:1c:40:
                    df:ec:3f:53:8d:f7:d6:6d:13:34:69:d7:90:16:0a:
                    c0:05:1a:2c:4e:b5:f5:59:96:32:20:85:4d:63:ed:
                    44:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B8:FD:85:11:DE:04:C2:31:1A:30:9A:CB:66:3C:0D:39:20:C1:8A
            X509v3 Authority Key Identifier:
                keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:68:89:c5:cb:df:f7:a1:22:7c:e7:91:ea:32:97:a7:28:
         18:6d:49:e1:bd:b7:b0:7b:23:06:74:2f:85:d4:c2:52:4d:e3:
         4d:18:24:ce:2d:c9:41:87:07:fe:5a:7e:50:d3:aa:1b:af:63:
         c8:e7:81:55:ef:ad:85:e9:52:78:7d:26:a9:c9:ea:9d:e9:1e:
         cf:71:36:53:fe:d8:d4:77:b4:6c:fe:db:39:ae:e3:e3:c1:cd:
         72:b6:ca:c2:7d:7d:21:e1:42:ba:08:0b:ee:9e:3e:e8:2b:32:
         4d:6c:10:05:eb:ba:b4:3b:43:4e:86:03:e3:71:97:67:0b:ad:
         49:a2:ef:a2:c3:56:01:72:39:0f:5f:a7:84:e4:43:dc:c3:47:
         fe:6c:35:86:36:31:7a:be:69:6d:e1:c8:97:7e:13:74:6d:17:
         71:c1:6c:ab:72:8d:28:f8:23:0d:c8:12:f3:48:1c:06:3a:8d:
         ee:24:5f:1e:05:7a:28:ed:12:27:ec:44:86:b9:7a:c8:30:de:
         9a:4b:4b:3c:4d:e9:3c:34:cc:5c:2e:80:05:27:05:0e:c6:64:
         c5:47:fe:d0:cf:41:16:10:53:16:fa:8f:bb:51:69:45:14:93:
         e7:bc:89:7f:c2:0d:5e:ab:39:b2:e6:a2:b5:af:82:e7:f1:59:
         c0:a7:61:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:43:41 2026 by rpki-client