$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: nmgSvQxo5XP9G2FAonwzRRZ9GvM408UtIckRvV+YOtI= Subject key identifier: 20:06:5F:7C:0A:90:C0:F9:FE:9E:CF:C1:5B:2D:2B:31:50:EF:40:0C Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 7B18BCB85840F8CCBC8BBF6A96B94359C27DE230 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 041E Signing time: Sat 05 Apr 2025 00:00:03 +0000 Manifest this update: Sat 05 Apr 2025 00:00:03 +0000 Manifest next update: Wed 09 Apr 2025 00:00:03 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: qP9MQBbjyyhipmXMyyFrCidGihcQG5k37eJ4xO4wo2g=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: Y8oQnOQ1I43jo4Kk9/RYVXtO3Kh6LYfq8C/szkyd+Hc=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: j/4WjlQinhUUmOm/ukBqpfPcM+hHnnFzWxAEvB09rSA=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: gDpri7o3GtihaZkI5VLp5AnjmyW8MdA3MHTwUmrNM1Q=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: Pibeg5rPToorZqOocOzTLDBzROBUdaMr9+uprk5L5eg=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: db3CyR59Niih+WGgIJIhmfB81vUULob+ee+Zp6CPc5w=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 4smSLmnpQJb5ncuerdOosdrVMAgMhBVDwRgLWYMrQQk=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: S36YiYmI5eUM0T09dUVT97eg6W9XRWJ58EGb0eig47c=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: jtad+L4eCzd1mpbW0cksLK8Iki+O6R5EgA6qMADzL9k=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: HfKkcAuJzfx+dRasoF+byufeTFMGw7FK1f/i1MEFXV8=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: H0eraEBku9jJ3cEbqPBYC0Yo9nXLAHvdyUkonjSW370=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: gr+0/7HS2eaD55EeR4HVl043TnkXyThi46EHvMtILfc=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: RsrgL5xltAMCcLRgxoKOpDHT/+q3NWNks8K62UOnLc8=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: kSmDqqQV2V4lDFMeoWkK5cfIVoAv5b4i9i9RDFEJRjU=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: TM8EDr6RdiNMS9DhiJ0NaSr6wqW0tI1u61NIg14iRw8=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: F0K3r/mYGiPklg8J2t9Uqj8mqxga/TNyqBBnOeRcro0=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 3p9SMj6HqOg2tRHc6wE/ToWCo/C6aysljs5YWDx8w9Q=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Nq+0Bo8Z+u78r9iGgofp8lE33S//35JWtZhdc+5Nuyk=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: Tu9EKCCvsSxodY6qi0HqOnrYwwpneGnOpWx8+fwDRTM=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: xPnsrm0Lqa2jGiTEvvm8Oyay4TeL2+fGo4FQ6pOhc9k=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 6tqB0O+C6bqQLhBA8PheKesjhoFQpvvd4OhIV4tAmM8=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: unJs7L9jBiYMzZ+XInHg3FoXSgS2BNdE+L1XxwQkdRU=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 00:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:18:bc:b8:58:40:f8:cc:bc:8b:bf:6a:96:b9:43:59:c2:7d:e2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001 Validity Not Before: Apr 5 00:00:03 2025 GMT Not After : Apr 9 00:00:03 2025 GMT Subject: CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:90:18:f2:4f:18:94:f8:59:11:4f:24:2a: 09:d4:7a:b6:dc:00:54:ae:3c:89:4a:6d:70:ec:b1: c1:f5:ee:06:37:19:50:40:dc:6d:fe:00:35:6e:9e: c6:69:10:0f:db:2e:8c:7d:05:55:8a:11:fe:80:c6: f5:20:bf:7f:53:9d:af:30:3d:e5:14:59:7d:d5:26: 9b:e1:30:0e:19:b4:5b:c6:1e:33:60:1b:dd:b6:f3: 0c:fa:2c:86:4d:f8:da:5e:e7:de:6d:dc:21:72:00: 75:28:84:b6:3d:78:c3:5c:2c:71:4f:4e:ef:1d:87: 89:22:e8:02:08:d0:5c:29:1e:ba:f9:69:d3:23:4f: 63:44:e8:ba:da:11:cd:f4:0a:b9:7d:6a:15:58:f6: 5c:32:12:80:89:03:92:e2:0a:5a:b8:17:9f:be:88: d0:34:45:20:fd:2d:28:7c:5d:6b:e0:58:11:dd:72: 35:16:51:8a:7b:dc:e9:d3:7b:66:eb:5f:e6:04:8a: 07:16:e7:7a:4d:03:c6:86:fe:fb:51:98:bc:59:96: b7:3b:36:d5:38:9e:5d:47:37:a3:99:21:de:2b:9d: ac:47:42:ee:fe:b4:12:6e:42:b1:13:a4:9f:d6:0a: 5a:03:33:75:e2:aa:93:c9:ae:63:74:74:11:8a:44: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:06:5F:7C:0A:90:C0:F9:FE:9E:CF:C1:5B:2D:2B:31:50:EF:40:0C X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b3:b1:70:ef:23:2a:b7:33:09:a9:e8:d9:f1:83:b7:46:9a: 05:91:9d:28:bc:b8:b6:67:59:0a:ef:61:d5:29:9d:74:0a:2e: c9:39:c5:f4:ee:42:64:ae:79:37:13:d3:66:fd:0c:3d:fb:da: a3:06:3c:bc:36:05:28:1b:18:01:5d:fa:60:e1:8c:9f:2a:5d: 5d:80:5b:ff:15:6d:ef:69:aa:8c:55:9d:74:a8:95:b2:f5:3f: 95:96:75:e3:e8:fd:80:57:a9:f6:3f:20:79:1e:79:90:dd:db: 23:6d:b1:f7:d4:2e:4e:75:e8:04:7e:47:66:91:ce:ba:e9:72: 5a:9e:4e:c7:bc:a9:bd:78:e1:aa:6a:c4:99:c6:5a:4d:9e:fb: 29:2e:45:b0:6a:81:00:93:f0:f0:eb:a6:f4:ce:a8:d2:78:96: 67:b4:e9:b1:04:b8:af:66:3d:47:02:08:5b:28:16:79:bb:2e: 9c:b5:79:80:9a:f1:0c:de:f8:21:e6:54:04:cf:c8:3c:a0:2d: e8:56:fc:69:09:b6:a8:2b:5c:36:f2:8c:4d:5c:9c:d9:0f:ec: 47:3c:31:5c:95:92:99:6e:0c:2c:43:08:0f:04:9d:13:f4:a7: d6:04:2c:86:f9:29:b9:32:09:3d:bd:76:95:0b:44:38:6a:c1: ef:3f:1d:08 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUexi8uFhA+My8i79qlrlDWcJ94jAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDQwNTAwMDAwM1oX DTI1MDQwOTAwMDAwM1owejFJMEcGA1UEBRNAMzY3ZDBlODljMDJkNTRlOWIyMjZh Y2VhZWNkNWQ0OTRmMDJkNzBhNTQ2ZGZlY2ZmMTgyOTkyMGY2MjgwMGM3YTEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34WQGPJPGJT4WRFPJCoJ1Hq23ABU rjyJSm1w7LHB9e4GNxlQQNxt/gA1bp7GaRAP2y6MfQVVihH+gMb1IL9/U52vMD3l FFl91Sab4TAOGbRbxh4zYBvdtvMM+iyGTfjaXufebdwhcgB1KIS2PXjDXCxxT07v HYeJIugCCNBcKR66+WnTI09jROi62hHN9Aq5fWoVWPZcMhKAiQOS4gpauBefvojQ NEUg/S0ofF1r4FgR3XI1FlGKe9zp03tm61/mBIoHFud6TQPGhv77UZi8WZa3OzbV OJ5dRzejmSHeK52sR0Lu/rQSbkKxE6Sf1gpaAzN14qqTya5jdHQRikR01wIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCAGX3wKkMD5/p7PwVstKzFQ70AMMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAMKzsXDvIyq3Mwmp6Nnxg7dGmgWRnSi8 uLZnWQrvYdUpnXQKLsk5xfTuQmSueTcT02b9DD372qMGPLw2BSgbGAFd+mDhjJ8q XV2AW/8Vbe9pqoxVnXSolbL1P5WWdePo/YBXqfY/IHkeeZDd2yNtsffULk516AR+ R2aRzrrpclqeTse8qb144apqxJnGWk2e+ykuRbBqgQCT8PDrpvTOqNJ4lme06bEE uK9mPUcCCFsoFnm7Lpy1eYCa8Qze+CHmVATPyDygLehW/GkJtqgrXDbyjE1cnNkP 7Ec8MVyVkpluDCxDCA8EnRP0p9YELIb5KbkyCT29dpULRDhqwe8/HQg= -----END CERTIFICATE-----Generated at Sat Apr 5 12:13:13 2025 by rpki-client