
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: ch7PTbPW+T/xeuBNCWe2es7sgnr4R0JZUt+ybMNx7RM=
Subject key identifier: C7:49:22:C2:4D:EF:44:AF:98:9A:A0:78:BF:7F:33:73:FA:53:F9:D0
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 6254EF089ABF3FEC714BCD7846B21AF13FCB06E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number: 0674
Signing time: Tue 18 Aug 2026 00:02:55 +0000
Manifest this update: Tue 18 Aug 2026 00:02:55 +0000
Manifest next update: Sat 22 Aug 2026 00:02:55 +0000
Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: sgiJ7OTyjnsP9CE7zsHqOtRJtdqWw+YX2fJB14eaePU=)
2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: 8QqQOxAj3sRai6/BzOB2kV66/okkk7p8TzKsBaSwcWA=)
3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: 0OedyNMwjL1I1p7rzryfdYD0nslES0i+43AbthFPFmE=)
4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: aoaRIM84eruV/ISWBs3PJCPQb0sEmsLtTOcu1EdbsFA=)
5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: vbtxuyfgx9e6lLFR0CnUGCC1kgCTySw+Ljt4yM1fDb4=)
6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: q5bh3h1LHQcXwRDCiiiYn6TP5+N60E0SyV4QnQBQL8c=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 00:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:54:ef:08:9a:bf:3f:ec:71:4b:cd:78:46:b2:1a:f1:3f:cb:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Aug 18 00:02:55 2026 GMT
Not After : Aug 22 00:02:55 2026 GMT
Subject: serialNumber=e9249f09fd9dd1ac16182663c89d5f08ac200a3371b8f0475a160bb4b78ffac9, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:96:df:9c:39:b9:55:4c:da:49:ec:ff:4f:
df:79:87:ed:0a:22:eb:54:6e:7b:26:37:43:b8:19:
a5:a3:52:cb:0a:04:a0:fd:4a:3f:11:26:22:ee:ac:
8d:c4:05:62:7b:dd:e7:99:eb:b2:e8:13:97:a8:fe:
72:78:46:0c:42:6b:72:f4:d7:a3:de:b8:d2:72:8b:
6d:cb:e5:9d:48:63:99:1c:70:02:01:c8:7b:df:aa:
19:1e:be:1d:f7:5f:14:cb:54:0e:88:d6:4e:57:d4:
aa:39:58:6d:59:6b:aa:1a:fa:d9:1e:4b:ad:d8:c8:
f5:6e:ab:54:95:56:c0:35:9c:b4:67:0c:ae:6e:46:
5c:32:5c:a3:5c:6a:6f:ab:e4:b6:50:13:b1:86:70:
6c:0b:5b:b1:61:5b:e2:5c:5f:6e:b1:08:a1:7d:e2:
ab:f7:3a:d4:00:86:d0:9d:b3:63:1c:4c:85:00:d8:
56:84:ab:47:d2:2c:9b:18:40:60:ca:58:2f:d3:0f:
f1:21:9d:28:c6:dd:25:b5:f7:66:5e:82:f2:d5:13:
8c:4e:4e:a4:f3:c3:d6:d5:60:e1:1f:3c:e0:0f:d8:
78:15:36:63:56:5d:fb:8a:d1:9d:a5:81:cf:e3:a8:
af:37:a0:d7:54:94:c5:e2:4c:f7:d2:2a:59:58:c8:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:49:22:C2:4D:EF:44:AF:98:9A:A0:78:BF:7F:33:73:FA:53:F9:D0
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e2:19:ff:a0:97:2a:70:b6:bb:9c:e7:cf:aa:f0:f6:f9:da:
9f:dd:fd:e3:df:7e:f2:b9:0b:36:d3:23:31:10:c2:da:42:ba:
52:24:75:85:c6:87:f2:03:f1:ef:83:1d:e4:46:8d:46:11:32:
5c:2b:17:fa:7d:9d:16:79:d2:79:04:c8:55:d2:b7:53:a8:3d:
78:a9:38:1c:b3:34:9b:54:6c:42:35:6c:f4:5d:92:2e:0a:76:
51:2c:81:3f:f1:a2:4b:ce:99:88:90:fa:42:5a:75:d2:74:97:
55:8d:79:3d:2f:9b:5c:95:df:4f:8d:30:f4:08:71:c5:2b:2a:
f9:3a:6c:37:85:a2:09:39:14:fe:8d:f7:b3:1f:97:ee:a3:e6:
77:02:24:04:b7:04:45:f9:12:be:d6:d7:33:bf:a1:85:eb:c9:
d9:87:97:91:b6:3f:e6:4a:74:c4:f1:8a:ee:65:3d:2c:12:75:
3b:8f:25:d3:3a:75:0f:b5:fe:71:0c:8d:90:f3:e4:4b:37:94:
21:d4:02:70:14:83:4c:e7:b2:2a:0c:bd:4a:b3:c2:ed:a7:56:
50:4b:ed:b2:d7:dc:b3:df:9e:a7:88:f8:45:fa:33:86:82:4d:
df:37:b6:f2:fb:95:32:59:6e:ff:c3:36:4d:65:59:94:36:5b:
8d:d9:2d:7c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUYlTvCJq/P+xxS814RrIa8T/LBucwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4
ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDgxODAwMDI1NVoX
DTI2MDgyMjAwMDI1NVowejFJMEcGA1UEBRNAZTkyNDlmMDlmZDlkZDFhYzE2MTgy
NjYzYzg5ZDVmMDhhYzIwMGEzMzcxYjhmMDQ3NWExNjBiYjRiNzhmZmFjOTEtMCsG
A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rOW35w5uVVM2kns/0/feYftCiLr
VG57JjdDuBmlo1LLCgSg/Uo/ESYi7qyNxAVie93nmeuy6BOXqP5yeEYMQmty9Nej
3rjScotty+WdSGOZHHACAch736oZHr4d918Uy1QOiNZOV9SqOVhtWWuqGvrZHkut
2Mj1bqtUlVbANZy0ZwyubkZcMlyjXGpvq+S2UBOxhnBsC1uxYVviXF9usQihfeKr
9zrUAIbQnbNjHEyFANhWhKtH0iybGEBgylgv0w/xIZ0oxt0ltfdmXoLy1ROMTk6k
88PW1WDhHzzgD9h4FTZjVl37itGdpYHP46ivN6DXVJTF4kz30ipZWMh2gQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFMdJIsJN70SvmJqgeL9/M3P6U/nQMB8GA1UdIwQY
MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp
QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi
NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm
LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHXiGf+glypwtruc58+q8Pb52p/d/ePf
fvK5CzbTIzEQwtpCulIkdYXGh/ID8e+DHeRGjUYRMlwrF/p9nRZ50nkEyFXSt1Oo
PXipOByzNJtUbEI1bPRdki4KdlEsgT/xokvOmYiQ+kJaddJ0l1WNeT0vm1yV30+N
MPQIccUrKvk6bDeFogk5FP6N97Mfl+6j5ncCJAS3BEX5Er7W1zO/oYXrydmHl5G2
P+ZKdMTxiu5lPSwSdTuPJdM6dQ+1/nEMjZDz5Es3lCHUAnAUg0znsioMvUqzwu2n
VlBL7bLX3LPfnqeI+EX6M4aCTd83tvL7lTJZbv/DNk1lWZQ2W43ZLXw=
-----END CERTIFICATE-----
Generated at Tue Aug 18 08:32:14 2026 by rpki-client