Manifest

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          Sbs2zj40QIMoFKruk+RDVn895nSC+r2SBfWc2XfSQrc=
Subject key identifier:   FC:67:AF:12:83:81:7F:D8:A6:9E:AC:DB:71:88:3F:10:06:F7:28:81
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       288087873E0A2A8EC643AF4242736951C823B365
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          0632
Signing time:             Mon 07 Sep 2026 00:07:23 +0000
Manifest this update:     Mon 07 Sep 2026 00:07:23 +0000
Manifest next update:     Fri 11 Sep 2026 00:07:23 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 28jsferzL1J2EC8N5wDUh0RQ0SJjLwSuksSEGh7+nvM=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: r73l4iNZMafNXfC80CSyJoUcdCuZUcqJ+6+FN5X3XBo=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: rDQw2NlaITAzyDgBs7YI0l4weL1704mjzjFsg+xw0kE=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: k9kJTRHzieVUKtUJcCU58vrFuecAYruUDN3npMtxG8E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:80:87:87:3e:0a:2a:8e:c6:43:af:42:42:73:69:51:c8:23:b3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Sep  7 00:07:23 2026 GMT
            Not After : Sep 11 00:07:23 2026 GMT
        Subject: serialNumber=47fb8d486835ae558e7f10cef1240d39c27bafa2d605385b8cf70027a43f9f53, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:68:6e:39:77:cd:f5:ec:93:cf:93:1c:c7:b8:
                    4f:f2:fd:d2:66:1b:dc:9b:41:fe:96:b7:fa:55:fd:
                    89:95:60:e2:cc:4f:b0:38:96:11:4c:d8:da:4e:c1:
                    fc:a3:c6:ca:73:19:4a:f5:04:99:b2:7e:fa:27:6d:
                    84:6c:a0:2a:c9:6c:3e:00:fc:9c:0c:a2:94:f5:35:
                    ec:f9:72:c5:68:25:04:51:15:ad:d8:93:81:f6:1b:
                    80:33:d6:14:78:61:26:51:00:21:f9:b3:76:27:d4:
                    60:42:ae:c8:5e:12:91:e7:3c:9f:4c:43:fa:1b:68:
                    99:22:d6:d7:b6:ce:99:eb:24:83:eb:36:75:76:a7:
                    7e:d7:24:c3:c1:c4:28:78:b1:90:35:e2:b5:d6:81:
                    21:f8:88:93:75:9f:2b:68:d5:51:01:56:4f:d7:9f:
                    0f:9e:79:72:50:27:49:21:eb:ff:38:a3:e8:01:15:
                    76:6a:30:5d:da:da:17:82:9b:15:41:ce:05:fa:73:
                    fc:63:08:c6:5c:78:09:97:77:2c:83:ce:f2:32:b0:
                    bd:40:a0:81:4c:23:8b:e8:a8:61:ee:be:bc:a7:d4:
                    4b:5e:ea:89:6b:30:df:c0:a5:16:83:92:2c:42:62:
                    5a:25:e3:f4:ba:cf:1f:b8:01:65:86:1e:e2:54:9f:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:67:AF:12:83:81:7F:D8:A6:9E:AC:DB:71:88:3F:10:06:F7:28:81
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:b2:39:7c:28:2e:d8:b9:c6:ef:7c:88:a7:8a:78:df:24:5e:
         f8:30:a8:2a:be:83:e3:4f:16:75:9b:69:ea:51:ac:2b:8c:8b:
         8b:be:dd:d6:82:47:c7:64:11:fd:ac:c3:bd:65:c0:a5:05:e8:
         1a:55:f9:fb:41:05:84:dd:85:78:b2:14:5b:7f:4f:0c:72:76:
         02:6c:f0:c3:b4:79:c2:d1:dd:97:f3:3f:d9:76:dd:58:ba:98:
         6c:ca:88:1b:08:e1:64:fa:de:1a:14:7c:81:84:7c:b4:d1:79:
         f5:f8:5e:55:b3:6f:c0:ab:88:f5:a5:57:f9:63:65:dc:19:72:
         59:f5:f3:6b:67:5f:c0:8f:3e:32:ff:c9:7e:6c:90:e2:02:25:
         86:6e:12:67:a1:38:83:e1:c6:09:29:2d:24:1d:4a:12:3c:21:
         c4:fc:29:c5:a9:0e:61:46:b2:5e:38:4b:a7:ba:a3:64:a1:bd:
         47:d2:49:bb:d7:13:04:be:1a:b7:21:dc:cf:67:0e:24:30:2f:
         3b:d4:05:c4:13:a4:57:c5:81:1f:b0:09:7a:5d:73:1d:ba:dc:
         8a:7a:7e:03:c0:7b:f6:79:7b:2a:27:79:b1:74:b5:b2:8a:63:
         23:f6:3b:eb:e3:cc:1f:14:7c:1f:37:0b:02:57:6e:a3:72:00:
         14:99:91:4e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUKICHhz4KKo7GQ69CQnNpUcgjs2UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDkwNzAwMDcyM1oX
DTI2MDkxMTAwMDcyM1owejFJMEcGA1UEBRNANDdmYjhkNDg2ODM1YWU1NThlN2Yx
MGNlZjEyNDBkMzljMjdiYWZhMmQ2MDUzODViOGNmNzAwMjdhNDNmOWY1MzEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2huOXfN9eyTz5Mcx7hP8v3SZhvc
m0H+lrf6Vf2JlWDizE+wOJYRTNjaTsH8o8bKcxlK9QSZsn76J22EbKAqyWw+APyc
DKKU9TXs+XLFaCUEURWt2JOB9huAM9YUeGEmUQAh+bN2J9RgQq7IXhKR5zyfTEP6
G2iZItbXts6Z6ySD6zZ1dqd+1yTDwcQoeLGQNeK11oEh+IiTdZ8raNVRAVZP158P
nnlyUCdJIev/OKPoARV2ajBd2toXgpsVQc4F+nP8YwjGXHgJl3csg87yMrC9QKCB
TCOL6Khh7r68p9RLXuqJazDfwKUWg5IsQmJaJeP0us8fuAFlhh7iVJ+nrQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFPxnrxKDgX/Ypp6s23GIPxAG9yiBMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAL6yOXwoLti5xu98iKeKeN8kXvgwqCq+
g+NPFnWbaepRrCuMi4u+3daCR8dkEf2sw71lwKUF6BpV+ftBBYTdhXiyFFt/Twxy
dgJs8MO0ecLR3ZfzP9l23Vi6mGzKiBsI4WT63hoUfIGEfLTRefX4XlWzb8CriPWl
V/ljZdwZcln182tnX8CPPjL/yX5skOICJYZuEmehOIPhxgkpLSQdShI8IcT8KcWp
DmFGsl44S6e6o2ShvUfSSbvXEwS+Grch3M9nDiQwLzvUBcQTpFfFgR+wCXpdcx26
3Ip6fgPAe/Z5eyonebF0tbKKYyP2O+vjzB8UfB83CwJXbqNyABSZkU4=
-----END CERTIFICATE-----
Generated at Mon Sep 7 15:34:48 2026 by rpki-client