
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 5P6jShFJAeg9UHCym5jb2NXv4BUuNUMaHSd9JvzAikQ=
Subject key identifier: FC:EB:46:81:09:9C:FA:D9:57:9B:F2:A8:AD:B6:50:9E:4D:4B:E9:35
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 54BB9B6A8CA41B300902B69F574102AF95E1AAD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05EB
Signing time: Mon 29 Jun 2026 00:09:34 +0000
Manifest this update: Mon 29 Jun 2026 00:09:34 +0000
Manifest next update: Fri 03 Jul 2026 00:09:34 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 9noVsp+SlXMaVtRYLZ2UsgHXOR8yBZrfK7uKc6w2RU0=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: LWW7G4vSgrTVoC49iuj/jpZ5T5IkSgMBRFaAY/6AWUQ=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: GnAkqdjJG2exzUEjm7SBUQ/G2cr3kP4Js1O39cvN2dA=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: 8F7U3HuBEHAbZxeotbZdxHhB0w+z61KRGEVZWZ1NOPA=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Wr+c6Q1I10v8ZDHa1kskBEdqqsWESS2cYOTf7oQrhuo=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 1t03EChjZYkK077vk6ZH3a5qPnl5WndlNpd+mVGJaPM=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: SekGmHDfoGXj5vE4Zm57ePrlctkbgwVHEgjShmndD3o=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: NMamOf9rJQLEFcxePu5jji6CzEB+kU961XK/hVBXFrA=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: 56ohyAlTtw3nDjDnI6PeLZ9qx5aGxhIqza4yGFF5fkk=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: sgve8SNnpJRICXi56BMuftrBFNrW8ZCffoMP5NfnWZg=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: e7DgUMtp6AoSqdNYLBl9ON3HVwaVdFMx/vALGOr1yFY=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: MUN3E1NLiG+U9TN+LvMQxVmbYWbeCf+Yz3FFqM07XUk=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: aWTrNq1G+utWB6tkA4hz4DH0ZMMJfiIsmt+vshKxw30=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: mmDjTVF7uC6IcLTQiEaOr33xzbFkcnbXUdIc6xa3iKs=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: NBLGSURJiomLlOLBraVQVdoTSr6bS+7HxfARclWtYgE=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: KpdoMD0r6LzGsIFEnqxHdIGwAQfhLRI49qdtI7ZZKXk=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: eemEEY86nS8bPyiVDFi6ZCQhg151yZIJ5Mn0I+PMcdc=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: Hi54Gbhw3DEMbkLoHk2FXWg76N5z+6Fx0yPf7AZ7FXk=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 03 Jul 2026 00:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:bb:9b:6a:8c:a4:1b:30:09:02:b6:9f:57:41:02:af:95:e1:aa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Jun 29 00:09:34 2026 GMT
Not After : Jul 3 00:09:34 2026 GMT
Subject: serialNumber=00b924ff25a8716cf2a06d01a2b8c0c5fc847663d58b4a2a8543ded4cd819334, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:a1:48:51:ef:05:d4:8e:4e:fc:30:4e:b2:
10:c5:dd:3e:e1:4c:3e:a3:cf:d6:ee:45:68:5c:a5:
86:53:a6:19:e7:d7:9e:1f:73:5c:2d:6d:ff:fa:54:
a5:3e:6c:8a:da:9d:de:92:10:e0:19:1b:6b:20:67:
f0:0a:1c:28:4f:64:ad:ef:9e:a6:ff:7d:d4:08:37:
f0:48:dd:14:88:4a:ec:b8:a6:d5:5d:54:88:bf:1c:
ee:30:50:8e:e3:18:36:47:fb:04:d0:04:0d:8c:ea:
b8:03:25:fa:17:2a:2b:e6:40:2a:00:aa:47:2a:ff:
e5:01:b7:bd:70:44:49:96:99:f1:47:6b:df:86:71:
7c:36:8e:4c:2f:c2:c6:b6:e0:d9:d5:ef:db:06:c0:
6d:9b:a8:8e:da:08:25:83:0e:a3:a6:05:8d:70:1c:
aa:e3:6a:9f:d4:97:84:76:13:17:13:cd:c3:28:d2:
03:fb:c4:e3:8b:a3:ab:e3:99:15:8d:8d:0c:cc:4f:
f7:5f:49:39:8d:3e:ac:c3:6e:49:9b:7f:a6:df:29:
2d:53:03:de:84:5e:4d:94:0f:32:58:b3:68:fb:76:
87:a8:d3:05:1f:f5:77:f5:2b:8c:4f:41:dd:8f:5b:
54:81:a9:ec:5e:18:e7:b4:6c:41:03:04:f7:13:a4:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EB:46:81:09:9C:FA:D9:57:9B:F2:A8:AD:B6:50:9E:4D:4B:E9:35
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:59:7d:5c:d8:55:6b:67:27:ad:80:ad:f4:ef:32:34:15:a4:
6b:0b:35:2c:c5:64:cb:4b:ca:c6:41:e0:28:3c:f8:15:9b:ae:
40:43:9f:5c:1f:2f:04:21:20:29:1d:06:bc:5d:fe:f0:a4:60:
f8:04:03:9d:12:19:e7:41:e7:10:94:5d:e3:d0:32:26:19:93:
7d:e0:fb:1a:6f:fb:85:e5:71:25:04:96:0f:16:4d:07:2e:d1:
9a:e0:f2:47:61:32:60:dd:eb:c4:42:eb:04:30:a6:63:0a:eb:
1e:e0:30:ed:08:f8:42:33:7e:88:7a:59:6e:e9:18:f2:1c:53:
5d:cd:f0:35:ca:5f:b3:47:6d:62:dd:76:9b:de:e9:f2:f7:e9:
0c:4d:99:d1:72:06:df:d4:11:c0:3c:26:c6:d5:c2:a4:ed:03:
df:8b:7c:4d:36:a7:01:54:27:34:08:c0:ed:a1:62:40:93:6a:
45:56:2b:b8:91:58:74:7a:ad:f6:e2:e8:2a:fd:03:73:ac:ed:
8f:1d:24:02:b1:c8:b4:f5:f8:e7:84:30:85:93:69:c9:c2:be:
1e:93:42:a9:40:9f:1e:b6:0e:32:d4:c2:4e:8c:4e:02:09:8c:
a3:dc:64:02:a8:91:3c:6c:37:b1:54:ee:33:9a:70:4e:4e:90:
c4:f6:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:57:18 2026 by rpki-client