
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 01TNwcQjQ9ovCoRrGEJPLtIzA/AQ8PwKHNEv23Kofzc=
Subject key identifier: 54:0B:5D:4D:E5:48:15:C5:97:74:58:3F:0A:08:3C:36:01:A1:9C:25
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 26AFF4F3974FAA318F82B2567B6D72BDB6B2E0A4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0572
Signing time: Sun 01 Mar 2026 00:01:26 +0000
Manifest this update: Sun 01 Mar 2026 00:01:26 +0000
Manifest next update: Thu 05 Mar 2026 00:01:26 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 74KrIc22YHwgKf34OaYjRXxxpFN93IwiJkr5dL69EH4=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:af:f4:f3:97:4f:aa:31:8f:82:b2:56:7b:6d:72:bd:b6:b2:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Mar 1 00:01:26 2026 GMT
Not After : Mar 5 00:01:26 2026 GMT
Subject: serialNumber=c939a0295738fc48c55669ca76c0cc37105f269ff118f8c57f32942a769521f4, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fd:1c:c6:d2:d0:07:50:18:3a:94:9c:b2:e7:
82:8b:39:4f:26:e4:70:88:2c:ab:27:99:92:63:f0:
6e:c7:25:21:f6:2c:a8:33:a2:cc:8f:60:5a:31:b3:
f8:60:44:7e:32:ee:38:25:54:7c:23:79:ec:90:1a:
f5:bb:ca:0d:4b:0c:7b:96:84:41:5f:c4:e7:a7:8d:
b5:2f:19:fc:60:7a:8d:ac:e9:81:b8:dd:3e:19:e1:
40:53:38:29:6e:08:86:00:18:69:ae:af:64:04:e5:
3d:d8:20:b9:46:df:f3:6b:01:f7:69:a5:3d:56:62:
aa:42:32:b4:d7:6b:84:b7:f5:ee:08:16:b6:1a:0f:
b0:ab:3e:50:1c:03:76:26:63:a2:6f:f4:f8:e1:55:
50:5f:9c:06:d5:1f:42:b1:e9:f0:7e:a1:14:31:b8:
b6:5d:2b:ba:b1:46:40:ab:2a:8d:aa:eb:64:69:15:
92:26:9a:45:c5:86:22:4e:d0:70:fe:03:37:21:0d:
26:9d:10:e8:1f:89:f2:96:28:a1:b6:d7:9a:33:af:
84:c2:0d:a3:93:e4:27:ed:6f:20:f2:89:9c:b2:c2:
31:de:12:07:9d:dd:df:a3:82:c0:43:6f:c2:65:e1:
7d:78:88:27:90:7b:42:c0:66:22:1a:e4:af:cb:b8:
59:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0B:5D:4D:E5:48:15:C5:97:74:58:3F:0A:08:3C:36:01:A1:9C:25
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:44:9d:fb:fd:8f:b2:45:7d:b1:8e:cb:f7:f6:bb:c7:60:71:
12:71:a3:4a:32:3d:79:3b:b5:8d:45:98:32:a5:50:01:90:86:
5d:da:55:77:85:4e:81:c2:97:d3:11:7f:08:e0:1b:dc:ff:87:
10:b6:2a:ac:fa:ca:5f:fa:8c:9d:4a:17:5c:7a:6c:4b:bb:49:
29:56:57:27:a1:b7:3d:6c:82:71:5b:07:8c:75:08:4d:54:f5:
0d:9a:a4:f4:5c:a8:04:88:87:7a:10:66:40:43:df:e5:24:8e:
d8:62:53:7c:82:df:35:6e:31:b6:2a:a1:96:16:06:8c:54:be:
a1:07:2c:d4:77:85:40:9f:5b:67:5f:ff:4c:e7:ca:81:6f:2b:
99:e5:d2:72:4d:05:e4:90:51:33:35:d9:ba:77:00:c4:15:22:
ff:ae:69:8b:e7:83:d2:02:b1:17:e1:51:2a:71:6d:04:aa:70:
7d:44:85:aa:ef:ee:5b:76:69:1c:de:11:2c:89:23:5a:12:32:
d5:7e:8b:5c:b3:17:e5:34:90:a8:e9:41:cc:b7:93:40:16:20:
b2:5b:63:17:76:9a:ba:b2:54:2f:79:39:57:eb:09:a5:fb:45:
95:2b:4d:69:31:04:69:d9:20:8c:32:ce:d8:fe:de:6c:a5:1a:
82:09:be:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:31:38 2026 by rpki-client