
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: g1j48uV3QC9XzUKVn1qLJDEV0zZrOYOXL+laRG3ht8E=
Subject key identifier: B4:3E:3D:86:91:24:0D:0E:A7:08:5D:4A:89:46:3F:D4:B4:E1:6D:BB
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 7B2DFDDBE7CF3C316D2BF1D5F8EB2CEDAB58FEB7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 059B
Signing time: Sat 11 Apr 2026 00:11:02 +0000
Manifest this update: Sat 11 Apr 2026 00:11:02 +0000
Manifest next update: Wed 15 Apr 2026 00:11:02 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: WQt2y6TlYxr92JmHZkEg07mehUDNJFXyl1B+Nv9ZoS0=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Apr 2026 00:11:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:2d:fd:db:e7:cf:3c:31:6d:2b:f1:d5:f8:eb:2c:ed:ab:58:fe:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Apr 11 00:11:02 2026 GMT
Not After : Apr 15 00:11:02 2026 GMT
Subject: serialNumber=1f7cf287c1a9435e8a920aa813ed1673c8569b962742407dab8c8ed8c7db3900, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:15:f9:20:bb:c9:88:95:63:23:60:85:54:
d0:fe:50:ca:68:8d:a7:30:e8:af:15:ac:a7:16:56:
6c:3b:40:41:76:c9:9e:95:ae:a0:5c:b4:6c:38:1a:
30:5a:27:a3:59:45:21:e2:b5:53:c0:8b:ce:4d:92:
c4:62:48:79:ea:cb:b2:8c:aa:43:28:d6:4e:82:dc:
3c:b0:0c:90:34:ef:ae:5a:1e:8e:b6:9d:ff:1b:0a:
27:38:a5:1f:5a:1c:f4:56:87:14:2d:95:5f:f0:35:
86:31:f2:52:2f:6d:ab:04:f5:ea:56:c4:0a:db:39:
2d:97:c9:d2:8c:2d:ef:f6:e3:2c:2d:2c:aa:b5:6b:
1d:08:49:a0:78:9c:0b:7d:3a:13:26:f8:24:18:76:
ff:26:29:06:11:9d:47:bb:2a:d4:91:44:ff:ac:0f:
18:17:bc:44:d3:3c:9e:bb:7b:75:95:c1:3e:54:63:
3a:5a:da:e4:1d:da:e5:74:c2:f8:54:57:5c:06:02:
1d:2b:07:22:a9:59:dc:4a:d4:e9:e8:5b:69:d2:fe:
24:cc:62:f5:01:67:82:16:95:47:29:23:fd:a6:53:
5c:af:33:de:32:a1:23:4a:d0:94:95:03:be:42:98:
1a:eb:71:a6:7e:c7:09:9b:43:b4:63:7d:a0:a7:07:
7e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:3E:3D:86:91:24:0D:0E:A7:08:5D:4A:89:46:3F:D4:B4:E1:6D:BB
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:54:b2:1a:4c:3d:88:de:63:00:d1:f1:17:62:46:58:db:3a:
cd:ba:2e:df:7f:09:38:95:9c:96:38:07:2d:f1:d3:6b:03:10:
a0:aa:c7:d8:40:d6:6a:ee:b5:80:e7:cd:67:7d:b3:2d:fe:cb:
1b:0e:ab:9b:a0:df:3a:ac:21:38:3e:bb:b7:36:b4:33:12:5a:
b6:05:78:74:aa:cf:91:e7:61:eb:ca:7f:5e:51:49:3d:f4:a5:
61:dd:92:01:67:2d:18:5f:17:c9:f4:23:70:d6:c5:fb:32:58:
32:da:9c:8c:c4:2b:db:14:c7:43:ac:d0:a2:af:4d:b2:7d:87:
94:5a:e6:8c:27:b7:b2:6c:55:30:7e:a5:f1:79:a6:6d:ad:bf:
dd:ec:83:ef:b2:36:81:16:66:d8:5c:84:a0:88:16:9f:86:49:
89:23:9c:8e:6c:0f:1a:5d:7c:dd:32:3c:09:49:ec:a6:62:6a:
1d:33:67:ea:e0:d2:d9:84:4a:7d:3a:45:fb:25:b1:bc:44:67:
de:c9:0a:04:54:0b:68:0a:9b:90:73:46:dc:c1:08:46:b9:92:
6c:6f:f6:9c:a3:8e:09:43:6d:fb:64:50:b2:85:97:b0:2a:e1:
3e:c1:ee:ba:ec:46:bb:60:7b:0c:52:ad:d3:9d:a8:66:c0:a3:
e9:b2:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 03:29:01 2026 by rpki-client