
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: FXHg52Hkb6cTe0JaZZF8Z46YbcV86Q/HMW0uMaQoJRM=
Subject key identifier: 32:42:B0:0F:1F:F4:61:A9:47:9C:C3:AC:8C:C9:3B:06:49:B1:AC:7C
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 56981E201D62104C7ED75C1C921DF2D50E44965E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number: 0629
Signing time: Sat 15 Aug 2026 00:02:57 +0000
Manifest this update: Sat 15 Aug 2026 00:02:57 +0000
Manifest next update: Wed 19 Aug 2026 00:02:57 +0000
Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: lRaza4oTSv80s0nRvQVFd1GE4T+uuqE3c/56F8PmYq0=)
2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: iIHDM3/+WXNJbvnwGQBXplujxAFsKTRIJshTaDQ2+P0=)
3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: pFH0mX/mS/sgsJHsPD8qn/rMn+DTJ3ZqeRaeUX7Sd/o=)
4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: OamEyNs9Hu0JtYjz/T3HrIq6+zrYFAoh1XdRlDH9dpc=)
5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: LIfhw9Wha8vnR9Jm+6F9NuPWFr6q9jWgQ0Fsm+plzso=)
6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: 4pmbz7g4O/Ukb8CdhdoUCeEMb4qdXTEeuhLOtcehxcA=)
7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: jOuib/rqNEB+QR2F/5ggYq891QHKCJh1yIuNR/CNTJo=)
8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: mmNX17+NtJIJh0zbb/SQtHaGLzPUHV1+X/OLX4I1Wzk=)
9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: PCxnSqlDqYPoY+AC5ix7mEcwPFpg3IVophcXbO5GhQc=)
10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: qPzKMLETddB1HMtrfs0e/EyZsPUwi+5CNvlo+jknupQ=)
11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: O8R9fDsm2qIOaEx3u8c5fKh+n/zWMwHcNzLgCHsKkGw=)
12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: rNf1YrXcxiwazHFFa/XOYIwqL9UKy6EAFGqESc8O0Oo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 19 Aug 2026 00:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:98:1e:20:1d:62:10:4c:7e:d7:5c:1c:92:1d:f2:d5:0e:44:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Aug 15 00:02:57 2026 GMT
Not After : Aug 19 00:02:57 2026 GMT
Subject: serialNumber=e2836f563440af792716ed98b56750a75859f92d6a70440093179c886eef23d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:b5:bc:a9:ad:c3:e7:53:6d:c7:4c:08:85:
67:53:90:44:3e:e0:74:13:47:58:f4:98:3f:0b:e6:
a0:9f:d7:35:62:2b:a5:d9:75:d9:83:6c:fb:7f:38:
4e:01:95:f7:d9:e0:a9:21:9c:0a:20:44:6e:5c:c0:
9a:80:df:b4:a5:2d:86:4d:d1:f4:9b:d0:5a:bf:c7:
80:f2:a4:3e:97:fd:55:80:1a:33:1e:a0:27:bd:66:
35:ef:bf:35:b2:49:1b:82:1d:64:6a:f6:0c:58:8e:
af:e0:af:b5:9d:13:b3:0e:55:ad:a0:c4:bc:96:3d:
40:bf:67:ad:6b:7b:f7:cb:34:a4:b9:2e:6f:f0:02:
f6:5c:0f:b0:a3:c0:5b:9a:75:0b:5a:40:9a:a8:8d:
81:2e:16:df:0a:e3:3d:05:f5:70:c0:a1:87:07:e0:
d5:e3:3c:15:c9:d1:bc:2b:71:45:bb:2a:fd:63:79:
bb:7a:7f:16:b8:20:d7:65:b7:16:02:b6:cf:e7:aa:
60:0a:24:3c:14:4f:5c:d8:f1:c1:dd:78:da:0c:da:
e9:34:0a:dd:ec:b9:a8:81:14:a5:d6:80:3a:b8:4d:
90:d3:0c:ac:16:a9:16:e2:c0:bd:de:65:1b:c1:3c:
6a:c3:47:a3:30:8e:ac:41:50:67:fc:28:c2:f3:28:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:42:B0:0F:1F:F4:61:A9:47:9C:C3:AC:8C:C9:3B:06:49:B1:AC:7C
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d5:0a:1a:84:61:ac:ce:89:f9:90:4a:03:63:8a:e2:bc:40:
1f:21:ec:7d:33:1b:75:fc:0e:12:b1:1f:34:f7:b1:8b:b1:34:
92:33:ff:9b:4f:e0:32:e2:d4:72:c0:4b:57:0d:b8:16:53:2c:
ac:87:df:ef:a2:88:a1:18:35:ac:3d:1a:67:39:03:01:7b:57:
7c:de:35:e3:15:c5:7b:55:cb:a6:9a:09:f7:02:b1:64:4e:f4:
4c:38:d4:43:98:77:25:47:d2:a4:0f:df:c1:2e:53:24:38:20:
54:08:7d:6c:25:e0:10:0f:17:b9:c9:92:68:2a:29:e9:06:8e:
a7:33:74:df:46:53:35:04:54:59:b0:17:a0:b3:7c:9a:16:77:
df:44:69:51:8b:46:4d:e9:f7:b7:82:62:e1:36:d2:ae:e7:35:
83:18:23:b3:5b:39:8f:d7:8b:dc:a0:34:30:d3:3c:bd:31:e5:
34:c6:69:54:95:b1:99:5b:72:89:e8:df:8b:a3:cb:92:cd:d2:
64:d9:df:ba:27:7d:81:53:ce:0f:52:3a:89:b5:82:c1:aa:8a:
c0:ad:5d:3d:15:18:a1:1d:cc:50:4b:a6:6b:fc:c4:47:48:b5:
04:8d:7d:12:bd:f6:e6:b2:0b:81:81:db:e8:db:32:b0:dc:a5:
83:4d:ee:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:27:34 2026 by rpki-client