Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          Mq7miS0LIBXT8GrMznia4OXJpP7CoG8T+Qn7URFyYGM=
Subject key identifier:   5B:F5:CC:D9:9F:0C:FF:A4:9F:5B:B9:2B:9D:6E:55:24:6A:79:49:D3
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       0A505C0E07CD407B8C4A4D21E43E8B93AE98A1AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          0571
Signing time:             Sat 28 Feb 2026 00:01:14 +0000
Manifest this update:     Sat 28 Feb 2026 00:01:14 +0000
Manifest next update:     Wed 04 Mar 2026 00:01:14 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: +KryZ7RM1rVL5aGpS0Pv3OGw8rhmFvgm/5CvKrnxOaE=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Mar 2026 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:50:5c:0e:07:cd:40:7b:8c:4a:4d:21:e4:3e:8b:93:ae:98:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Feb 28 00:01:14 2026 GMT
            Not After : Mar  4 00:01:14 2026 GMT
        Subject: serialNumber=98da8fab2ea49fbfb84e1260b91558fc4d500a59cb8b91270cabfb2cd347f005, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:01:39:1e:08:f9:cd:a3:93:f1:fa:06:87:ae:
                    e1:5c:34:e0:9f:33:e3:c5:3a:d1:1b:3d:f6:74:a9:
                    e4:14:3d:bb:0d:95:3a:aa:75:33:e8:89:19:37:0f:
                    ac:61:0f:a8:1f:56:ac:8d:51:f1:4a:5a:1d:e5:b8:
                    16:92:d2:f6:8f:7e:5c:d4:fb:9a:16:27:58:86:96:
                    af:12:f2:00:d4:42:6d:71:8f:05:82:8b:21:d4:cf:
                    ca:52:2d:24:cb:a4:6f:66:56:e6:d1:83:05:18:de:
                    fa:57:a1:cb:9a:30:7b:fc:14:69:7e:87:bd:0c:b7:
                    9f:a8:0d:1c:e9:a3:fe:6e:6c:57:87:42:f8:0a:3a:
                    3f:77:38:15:6a:d5:1c:ef:7a:ce:90:50:6c:ef:29:
                    bd:5b:6d:99:1e:24:79:69:ce:8a:8f:39:0a:5b:d2:
                    c5:d7:bb:42:f1:01:c6:53:02:f5:5f:cb:d3:1c:c0:
                    56:8e:b8:f7:56:1b:96:80:a3:be:78:e8:dc:db:a0:
                    9b:86:a6:52:f2:b2:48:5e:10:fa:f8:17:c0:90:ed:
                    b5:3f:d7:22:8e:f7:2e:00:90:78:36:ee:b2:1c:8f:
                    e7:9e:2f:c7:63:72:dc:d0:98:29:a0:79:2c:31:71:
                    93:64:8d:e5:41:bb:de:b6:a1:98:f7:19:48:80:9b:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F5:CC:D9:9F:0C:FF:A4:9F:5B:B9:2B:9D:6E:55:24:6A:79:49:D3
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:63:4b:b0:0f:bb:81:1e:9a:bf:54:10:15:4f:28:81:fd:2b:
         bc:34:81:32:fa:46:4b:25:5d:7b:b2:36:ba:12:3d:96:89:7f:
         cd:02:50:00:62:8b:8c:ed:a4:d8:95:32:0c:17:7d:2b:f3:7d:
         7d:76:9c:51:6d:38:cd:10:c8:5e:23:a6:5b:31:d6:91:b5:e7:
         55:70:d9:c4:60:f5:b3:51:36:c3:73:fc:4d:50:bb:b2:ef:12:
         73:62:32:17:ed:5a:1d:3c:5a:cb:97:79:91:07:e3:8d:07:dd:
         2b:94:fa:25:0d:ca:ef:61:66:7a:5d:93:cf:8b:cd:f9:4a:05:
         20:12:43:3d:6a:eb:cf:6c:74:00:c7:48:7e:70:15:84:98:e1:
         1c:19:b6:43:57:6c:30:e4:fc:d0:01:b5:0b:b2:86:41:83:92:
         b9:3b:90:9e:e4:09:7a:94:2f:77:d4:4f:2d:71:80:bd:9a:42:
         d9:4a:76:73:3a:e8:42:93:04:1c:fb:36:cb:2f:ed:4e:76:9b:
         c1:82:c0:42:1b:2b:91:1e:eb:7d:5c:6a:1c:26:4d:70:b3:77:
         fb:14:57:a7:83:3f:9b:18:72:ad:e1:d9:95:5b:5e:ca:76:dd:
         4e:2e:a8:da:c0:89:da:49:a9:52:72:cf:e5:55:8b:13:e0:fc:
         a5:5b:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 14:14:27 2026 by rpki-client