
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: UiMhaQqkjW/PpnnwVPHRzlKvhnZHTEaJ70LPTmx4R9k=
Subject key identifier: 88:44:5F:98:0C:9E:98:F6:25:84:51:CB:96:DE:D4:D6:87:16:97:91
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 762EEE3546E39D7054FB5FB459A5D28BBC3A088D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 059A
Signing time: Fri 10 Apr 2026 00:10:51 +0000
Manifest this update: Fri 10 Apr 2026 00:10:51 +0000
Manifest next update: Tue 14 Apr 2026 00:10:51 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: v9XAgDwngB/REyZu8eWCIQSrlZJodK/iDHnwlcxvj9M=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 00:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:2e:ee:35:46:e3:9d:70:54:fb:5f:b4:59:a5:d2:8b:bc:3a:08:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Apr 10 00:10:51 2026 GMT
Not After : Apr 14 00:10:51 2026 GMT
Subject: serialNumber=9ebeda72366fc483aa5032dd3052fa4e1ffc457ac46373871e0e1cf8eef0b457, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c0:93:99:aa:e7:c0:7d:8f:3b:86:80:82:a1:
51:4f:39:a3:86:c3:c7:25:ca:58:94:ed:6b:a2:cc:
f0:f7:38:1f:3b:a3:00:91:c7:a6:6a:e9:a2:28:dd:
e8:91:12:42:0d:00:83:01:93:62:b5:52:5b:ee:ad:
0e:04:b3:71:93:2f:91:7e:6e:7e:d9:26:7c:0b:1c:
64:2b:64:60:b2:be:65:97:e1:9b:7a:49:fc:c2:0e:
9b:ac:db:c2:7d:a6:0a:c0:e2:1a:69:5f:aa:19:51:
67:a8:8a:c8:70:fc:82:57:a3:20:3d:bb:64:07:4c:
ab:82:ed:95:e5:94:f0:ea:af:3e:d8:ff:1e:5e:80:
ea:18:a1:b8:05:84:15:bd:7e:a8:36:09:76:4e:eb:
1b:de:13:14:02:d4:ea:14:f6:b7:9e:f4:57:bb:ad:
9c:f3:18:c3:7b:c3:c3:6f:ce:2d:5e:5c:d7:9a:69:
51:59:54:82:69:6b:a2:53:d0:2f:9c:1a:43:b7:db:
cb:7a:62:8b:af:dd:3d:07:3d:f1:74:5c:1c:e5:aa:
51:5e:74:75:85:21:36:d0:ce:a2:ec:a0:b1:ae:61:
c2:e7:b7:79:3f:b9:4b:88:ce:17:8c:ee:c0:66:09:
c9:72:ad:d7:69:d2:9c:a0:c6:5b:22:71:f5:69:b2:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:44:5F:98:0C:9E:98:F6:25:84:51:CB:96:DE:D4:D6:87:16:97:91
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:52:4f:0b:0e:a1:7e:b5:76:40:7c:a7:0a:16:14:84:9d:
06:26:f3:3d:79:67:3d:fa:5a:9b:ca:1c:f4:a2:7c:56:c2:d8:
27:69:1e:0b:73:47:7b:1b:67:4c:73:c3:2d:40:86:05:06:be:
58:d3:e4:45:a6:0d:fa:6b:37:5f:2d:b7:c2:bd:19:0b:ad:a5:
2e:73:3d:33:9f:81:58:f8:ef:11:bf:8e:38:62:07:24:e7:77:
f0:35:3a:b5:56:11:41:19:43:2e:25:da:4a:3c:66:fc:25:81:
3c:53:e7:83:bc:4b:c8:79:2d:cc:ee:15:45:89:db:45:c3:ce:
28:e6:d3:09:92:d8:42:90:08:1d:b9:fb:75:60:82:22:6d:84:
81:08:5a:52:6e:88:9c:4e:83:28:dd:d1:ba:dd:e0:1a:ba:c7:
10:71:9a:f6:a0:0f:5c:c1:3d:d7:98:fb:6b:dd:c3:8f:b1:67:
32:5c:ac:38:6d:1b:3b:30:a3:00:61:ef:1b:77:06:0e:b9:f9:
c6:d3:a1:ac:0e:0a:52:a9:1f:1d:af:e8:19:26:96:5b:8f:c0:
d0:93:db:7e:60:53:72:9b:04:4f:bf:c1:df:4a:27:08:32:95:
57:57:ef:6d:24:a5:b7:ea:cc:3b:44:49:4c:58:6f:88:f3:50:
f4:ff:be:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 02:41:48 2026 by rpki-client