Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          MHL10rvgZCUiBZ2W+WC4VlhAYp/VovZlz1Ffau2VZQk=
Subject key identifier:   EC:79:AF:64:70:60:EA:3D:2C:97:7F:4C:5A:2F:65:7F:B8:EA:C3:58
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       3C3B34CB7BC2066813F521F1DA0556A9CEE8981F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          05B9
Signing time:             Mon 11 May 2026 00:03:31 +0000
Manifest this update:     Mon 11 May 2026 00:03:31 +0000
Manifest next update:     Fri 15 May 2026 00:03:31 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: xePKJzzj2RVuTvuRru73H8EQntn1YAAUiRVjkjqSTDA=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 15 May 2026 00:03:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:3b:34:cb:7b:c2:06:68:13:f5:21:f1:da:05:56:a9:ce:e8:98:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: May 11 00:03:31 2026 GMT
            Not After : May 15 00:03:31 2026 GMT
        Subject: serialNumber=d5883dcec46f7b0b986b5ab43f97ad23b683253cfdee1dcbe68c58ca776a2548, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:8b:b8:18:b3:20:cf:18:3f:6c:52:73:d0:
                    c4:a7:1c:a6:f6:94:66:11:1a:dc:17:3b:98:e8:43:
                    07:cf:7f:f8:92:39:f5:85:bb:72:43:de:39:d9:a2:
                    50:ae:79:74:5b:36:d9:9e:83:f1:7c:4c:23:43:34:
                    95:5b:3f:03:0b:44:d9:0d:e1:1f:d1:14:de:e5:5a:
                    e6:9a:6a:46:72:fc:6f:5e:46:60:e4:d9:87:ca:33:
                    ef:88:48:2b:fd:1c:73:0b:1f:04:3e:8e:1c:9f:51:
                    ef:a0:6e:9e:1c:8d:d9:e6:74:a3:50:d1:e9:84:f3:
                    97:29:87:32:98:4e:6c:ca:c8:7b:af:c2:ca:c7:e7:
                    19:d2:24:8b:85:49:61:c2:fd:6b:b4:74:e5:0f:8d:
                    d9:7b:f4:9a:fb:14:fd:8f:de:26:95:9b:ba:ba:58:
                    8f:b3:26:bb:cb:a5:e4:49:2c:82:2d:b5:56:cc:ed:
                    83:cc:33:e6:b5:d5:44:8f:2a:19:35:d5:91:d2:13:
                    d9:49:ab:a4:45:b3:ee:af:f0:36:c5:a3:33:f0:f3:
                    b8:a8:c5:11:54:d0:06:0e:7d:1e:90:0e:a1:79:64:
                    dc:49:9c:b0:bb:d8:6d:7a:82:d7:09:0b:bf:1b:29:
                    03:6f:d5:2c:76:68:7d:36:85:41:64:20:75:54:b0:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:79:AF:64:70:60:EA:3D:2C:97:7F:4C:5A:2F:65:7F:B8:EA:C3:58
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:29:5e:d8:71:08:a3:38:35:a1:4f:28:54:6c:2c:d9:7f:
         ad:b1:ba:11:f5:8a:b0:98:7f:29:73:48:fd:78:4e:37:29:a5:
         ab:02:44:1e:84:ce:58:66:86:f5:88:ea:c1:f6:15:fc:c9:bd:
         3f:7e:7a:90:c9:8c:d3:f3:48:3f:e8:9d:b5:eb:e9:c3:5b:79:
         06:d2:d0:3a:d5:d9:b9:ff:e6:d3:04:ad:ee:38:fb:1d:96:f6:
         d0:40:3e:b1:ce:7c:f9:01:7b:63:e7:31:f8:66:4f:36:44:d5:
         3d:fe:d7:76:2b:25:2d:4a:e9:74:33:7f:2d:7c:f8:8e:83:c6:
         ac:77:f3:f1:bc:04:c8:7b:90:8e:c5:c6:da:b9:2f:75:dd:42:
         4d:22:5f:8d:46:7e:61:d2:17:34:d7:a8:f2:8f:3c:2f:e8:4f:
         4a:18:1a:2f:e6:98:e7:5a:ad:ad:d1:88:91:64:96:4e:22:cc:
         0a:14:66:4c:98:89:12:2f:2f:67:c7:f7:37:ab:59:6c:78:a5:
         13:60:aa:b7:cf:db:b7:9b:bd:1b:15:c9:e2:65:43:58:7a:9a:
         12:4c:3d:60:bb:9a:cb:ea:ee:f7:3d:91:2b:ec:a4:95:ed:b7:
         c1:81:01:e6:5a:e4:e9:9f:a9:13:96:86:87:df:20:78:91:17:
         a7:3a:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 02:22:13 2026 by rpki-client