
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: Nk3wYveOTj1WbHiZ4Q72tlaGaLMyV5LDiCOvMO/RNlo=
Subject key identifier: 75:F8:AF:1B:FA:A4:D4:A8:E7:EB:38:90:A6:DE:8F:B2:2C:51:9C:FF
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 5C9D087F5C9ACA0D4D64D61C6681B85CDC3B47EB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number: 05F1
Signing time: Mon 22 Jun 2026 00:08:18 +0000
Manifest this update: Mon 22 Jun 2026 00:08:18 +0000
Manifest next update: Fri 26 Jun 2026 00:08:18 +0000
Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: Grb3erG38UbpyYsT3rOw4xl8udj5pUp3uk3wNuteHbg=)
2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: R/QKXPq5qLhFIabDpt7jqk1FIjprU0/TFPidwEL+QgA=)
3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: 4ERa0OLBAsTdhNR7PKjNbLOEoi7QlFl+HL77jxvD1Y0=)
4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: SMLBbDSomO7mEapTkw4/On1vpbT/Fseuwss9zz9v5cQ=)
5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: e73sGTbu5FZ2lz0mPWzoXcq+IxeUu4jdraf1fBClxjY=)
6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: cN5Dt6FayyiAKQcY6Lfn/GGbMLbZidxIe56c5AQO0tk=)
7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: 8UX4MeSRd7upoffLe62HCmWqH9tHPe92Ibwf6x5JZ+A=)
8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: sjhedanhIT69u3QGXMV3XtJ1G9qRnmR8tianfLbCBKc=)
9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: 14MO5pJ+OHs+SEb4Q2CmTHwSxy69dBxmrH3Tvp6PtLg=)
10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: 5MDlGu3GRi6oA3CVqqCU79t2Bn0udJla1Ad5oQeQB1o=)
11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: RzCD7581ODd0G/PaE75k0bTCDiHj2ugi5EIEr8jr/z0=)
12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: ttj+xFM+LnTZib2Qm1IdvDV7beTbrXhca9IDFXw6y4k=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Jun 2026 00:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9d:08:7f:5c:9a:ca:0d:4d:64:d6:1c:66:81:b8:5c:dc:3b:47:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Jun 22 00:08:18 2026 GMT
Not After : Jun 26 00:08:18 2026 GMT
Subject: serialNumber=ac1459817c7ec999f63d4032a521e8cd64025692dcf8ee0c18404d281eddec9c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f0:24:7b:cb:92:0d:32:8c:95:53:6d:94:d6:
22:a0:97:b9:f9:73:ec:3d:24:b1:7e:d0:d7:d9:3f:
14:60:8b:d7:d4:46:d5:90:44:90:bf:c6:11:58:b8:
fb:b4:17:b2:1c:42:d2:d9:d8:c1:ba:31:75:9b:6d:
9b:b9:6b:15:a7:5c:cb:19:f9:71:32:c1:7e:e0:50:
76:17:21:9d:80:6e:18:72:a6:f8:fe:34:f3:5c:97:
85:ee:e7:ed:37:58:a8:b0:1d:d7:88:b7:b7:5e:ed:
21:bd:6a:6c:18:fc:b3:d2:44:a3:b6:bd:04:f1:23:
88:48:eb:a6:ae:8d:f5:f6:44:66:01:b7:11:22:09:
fc:ae:b4:fa:f3:01:ea:4f:2c:65:10:01:c7:f4:eb:
c5:90:5f:03:bc:a9:40:15:40:0b:28:53:28:60:f1:
e9:ea:92:82:d8:d4:8f:84:65:65:53:6a:65:6b:5b:
42:fe:17:54:a0:c0:ac:f4:dc:2c:e5:c9:dc:9a:ee:
72:7f:3e:b7:75:90:86:82:fd:4b:87:ab:61:8a:87:
5a:b3:b7:5c:6c:74:52:a0:c4:ab:53:55:74:44:dd:
db:52:ad:44:cf:85:4c:89:98:a8:47:c9:4b:aa:32:
f6:f0:8e:88:ed:3c:f7:b1:65:d8:a1:1b:ef:ce:b1:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:AF:1B:FA:A4:D4:A8:E7:EB:38:90:A6:DE:8F:B2:2C:51:9C:FF
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:88:73:66:41:da:13:d0:bb:ab:67:93:4f:f4:e4:6f:ea:
e4:60:d8:3a:f2:e2:8f:7c:16:bd:45:ad:7c:41:3c:55:21:89:
36:ab:76:d7:fb:4d:f6:83:8f:7b:63:a2:13:31:8e:99:6c:60:
b5:aa:da:ef:ec:18:47:e0:83:2f:b8:1e:f8:6f:16:26:85:21:
b1:e0:b0:08:04:41:35:ec:45:2c:3d:d1:a7:65:10:99:da:64:
2f:d0:00:d6:3f:59:ea:46:9b:31:99:e9:bb:39:f1:72:86:88:
37:f4:0e:4f:03:10:ea:04:4c:de:8c:e7:ca:cf:ec:94:2d:5a:
1b:d3:eb:9a:8d:78:6b:c6:58:6b:d1:e8:f3:ad:f4:c2:16:d5:
2f:b7:b4:36:79:99:be:84:73:e3:f4:c0:9d:bb:b4:fd:e0:ed:
c7:b8:45:1d:0d:46:3a:2e:02:2a:14:0b:73:85:1a:a8:ef:02:
81:12:ed:70:c6:84:49:70:2c:29:de:86:4e:e1:ee:b3:9d:d4:
ea:c8:f4:57:34:26:51:39:3b:a0:1b:91:e4:70:c0:ec:d6:39:
d4:83:b9:00:73:a5:4d:be:f3:c4:03:a1:0b:be:9b:4f:dd:ee:
45:b9:c7:03:62:73:9d:6d:36:14:3d:da:96:e8:51:f0:06:60:
0d:d9:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 07:05:33 2026 by rpki-client