Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          s+OmbLxH3nQw6SEkpt8+JZw6Stx3AAODiOwoMJ8xdwI=
Subject key identifier:   03:4B:07:28:1E:1F:1B:18:A0:D3:E8:27:24:F1:E8:4C:06:B3:61:E5
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       535010D644249A085665CA9214909EFE6FE252B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          056A
Signing time:             Sun 22 Feb 2026 00:03:41 +0000
Manifest this update:     Sun 22 Feb 2026 00:03:41 +0000
Manifest next update:     Thu 26 Feb 2026 00:03:41 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: MBCm/wpjWTCynLBAAXlhwqpHi+4pATpa9VJ7w3ENyd0=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: W5s2+KsThmK2t/kTEoDyc0qk5t8nWR8Vcr0OHIME7gY=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 5MxBFGEWslAIrsC/USm7otP6KNuGNoqoxsVs87BESbw=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: CNy33lvFVRD+mSD8JJeY7w+m3uy4j1Q7IRyDV4kVRuc=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 55JqWeNnPUgIMiCbIulJEhJREuoglf7zd0Hdhdnk7JI=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: nX53gsp63aFe1Zk0fvuz7gf9dNGw1Q0a6vNdlF04HMM=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: n1kg4tDD9KCpPUv6L5rqRkioae0zUB8A2YrnCFiHVJ0=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: rgmgKkFA/1ZuGJ4QRcU97a/WiPe2lq2P1GX24tqN91U=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: DuZi0/kBsFkmGULcNt4xmJZ4I8aFDcP0+xR9g1RHy40=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: N/cY7SofU7BQTjSpADixy6DLuAFs/nCWf8HWg3e5lnI=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: mnMvQYdAbSRRbDZHXyfM/f8XdM80z72GugupasAKoQg=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: iHgVMCQkVpqqh3egN8945TcYU7izcrnduLWWQD583q4=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 00:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:50:10:d6:44:24:9a:08:56:65:ca:92:14:90:9e:fe:6f:e2:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Feb 22 00:03:41 2026 GMT
            Not After : Feb 26 00:03:41 2026 GMT
        Subject: serialNumber=9b928b131cb3a571467410ea083ad42a107a47d78202ec9351ea06a8913faf72, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:4e:a0:c8:97:c1:0a:9d:91:24:5d:b7:51:
                    ea:9d:d9:45:09:b0:90:27:8c:3e:20:da:61:25:39:
                    6a:6c:5b:83:21:97:d9:57:cf:8d:87:39:f3:bf:37:
                    15:a9:a4:62:9c:3f:69:ab:2f:c9:1b:dd:5c:bc:db:
                    47:8f:d3:39:22:b2:ab:24:2f:9d:bf:78:0a:54:de:
                    98:e5:86:55:f5:08:49:91:2b:94:f7:48:a5:31:d0:
                    83:91:ad:05:bb:ce:f0:c6:ba:af:c4:87:03:8b:8b:
                    5d:9b:0d:80:35:24:37:24:45:35:bd:fc:6a:1b:df:
                    c6:5f:7f:82:c5:c5:62:67:38:4a:da:bc:fe:db:37:
                    3d:dd:64:2a:a8:a3:a0:64:4b:f0:c2:db:47:c4:19:
                    8c:b1:2f:0b:c4:5d:e2:5a:43:c2:cf:62:26:57:cd:
                    c1:cc:dc:de:c7:c1:5b:d0:4a:5e:56:b6:cd:a8:96:
                    07:21:7c:2b:b7:3d:2f:60:39:d9:82:2b:bb:77:c7:
                    f3:87:b4:cd:ff:a7:ee:8f:cd:6a:d3:0f:0d:0f:27:
                    17:1d:a3:83:20:88:62:b9:da:3d:1a:95:3d:40:49:
                    7f:d9:53:4c:7b:75:62:71:12:dd:2f:18:a6:99:bd:
                    c1:d7:78:a0:b7:b3:11:c8:63:3d:bc:0d:48:5e:ad:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4B:07:28:1E:1F:1B:18:A0:D3:E8:27:24:F1:E8:4C:06:B3:61:E5
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:0e:82:aa:de:19:0b:a5:01:f5:de:d0:c4:92:75:4c:b1:
         8a:c5:52:e0:db:78:3e:a8:26:d3:46:33:a0:c9:e1:93:11:32:
         96:57:aa:19:75:de:d9:c4:31:89:12:1c:0f:1a:37:a1:49:4e:
         59:d8:4c:2d:85:0a:42:13:8c:72:30:b9:e4:51:0a:9f:e5:d7:
         0e:89:4e:84:5b:9c:0a:b8:50:14:ad:13:fd:ed:69:81:9d:a7:
         92:19:cd:c7:43:2b:6e:2f:4a:9c:00:db:fd:56:7b:41:8e:0b:
         f6:6c:f7:52:6e:8b:3f:5d:2c:41:ee:db:b7:a4:00:06:4b:da:
         10:64:39:0a:da:1a:a6:bc:ad:68:3b:62:04:95:f0:20:cb:f4:
         93:6f:11:f0:16:79:6c:26:65:86:c5:2e:12:c4:12:0a:43:ef:
         36:c7:27:6f:aa:ea:b8:a9:5a:cf:06:80:46:e7:2a:26:88:4a:
         9e:48:db:f8:a0:ca:01:cf:bf:60:24:38:1b:d2:1a:db:dc:cb:
         0d:44:d1:4f:23:36:3c:78:2c:0c:c1:a5:db:4f:f6:52:54:eb:
         c2:8a:1c:ee:09:12:5a:e0:bf:16:c1:90:ee:e4:78:14:35:0b:
         45:d8:71:ab:a4:97:9b:7c:af:a5:fb:65:8c:cd:41:f7:8c:5d:
         9f:aa:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 11:55:14 2026 by rpki-client