Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          aro7QCtLAnK80Ugs3nF95m1i6dU7CYQprHdxXaVLips=
Subject key identifier:   EA:AB:17:EA:62:D2:6B:77:68:1A:DE:03:95:D9:DC:F9:22:2F:8A:91
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       64A81B1D3EF94418BDEE4E9EB61B4944F8A44471
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          056F
Signing time:             Thu 26 Feb 2026 00:00:30 +0000
Manifest this update:     Thu 26 Feb 2026 00:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 00:00:30 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: lGmjKcXqeBZeOj8+BZIQfF3Llv+G2JEp0AkbbZaS4vs=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:a8:1b:1d:3e:f9:44:18:bd:ee:4e:9e:b6:1b:49:44:f8:a4:44:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Feb 26 00:00:30 2026 GMT
            Not After : Mar  2 00:00:30 2026 GMT
        Subject: serialNumber=4653c65da39875a3d01a10105342fbe62d295a637d7d95344eb68ad93acee8dc, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:5a:72:ab:da:ad:b8:2a:ae:8c:e6:27:b9:
                    d3:e0:73:33:49:30:6d:54:c7:36:58:7e:2d:a8:25:
                    83:4c:fa:b4:4e:e1:c9:fb:2e:24:5a:27:8d:ca:36:
                    e5:bc:20:c7:d9:a7:da:ea:47:f2:77:40:e4:df:d1:
                    e5:f2:0d:47:21:11:6f:f8:38:96:24:47:30:01:62:
                    0e:87:23:78:08:63:6e:08:f7:2f:2b:d7:af:50:8a:
                    6b:be:b1:45:7d:f8:23:88:bf:5c:a3:2e:a8:64:ed:
                    ee:1a:59:c0:be:2b:f7:9c:12:ac:21:d9:95:2c:a7:
                    8e:cf:e0:cd:d6:64:ea:aa:8a:6a:a8:c5:9e:d1:11:
                    8b:b1:4e:a9:4a:9e:b2:8f:72:89:02:52:65:5e:d2:
                    f2:2d:e0:01:8b:67:37:00:db:19:f2:c6:50:bd:3e:
                    61:fe:55:0b:c5:38:ba:b0:03:4d:e0:c3:09:c5:95:
                    d8:b6:2f:1f:37:db:9a:be:5b:aa:a3:86:3a:d0:eb:
                    13:3f:bb:08:80:17:53:fd:67:84:69:b5:ba:5b:03:
                    a6:60:41:d0:7a:52:03:ce:cf:69:ad:b0:c3:08:03:
                    db:6c:73:21:db:7e:ca:62:bd:0f:ba:3a:e5:33:f4:
                    f8:e7:a3:6e:e2:73:18:2a:0d:b6:ca:7d:3b:e6:a6:
                    3b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AB:17:EA:62:D2:6B:77:68:1A:DE:03:95:D9:DC:F9:22:2F:8A:91
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:06:79:6f:4e:ca:53:c0:8b:e1:21:33:aa:f0:74:23:73:e1:
         2e:9e:61:bd:65:42:a2:24:a8:3a:ca:98:91:a9:86:83:cb:5f:
         1a:ed:4c:a3:79:f8:e1:ac:25:36:93:cb:59:cc:00:d7:ad:91:
         7c:53:e0:07:4a:e2:aa:9e:cb:f9:26:00:0c:20:2d:43:f1:6f:
         67:34:f4:b8:e3:e6:c4:ca:ae:8a:94:44:68:0e:e3:74:76:85:
         52:5d:3c:14:0b:a3:32:c4:7b:60:41:be:85:16:22:4e:a1:ab:
         4f:bf:e7:4b:ea:04:be:fb:cc:79:08:e4:fb:96:75:bd:83:e6:
         5f:59:c5:e5:84:76:0b:e3:21:71:73:77:32:e2:91:15:b3:e4:
         1d:96:b8:b6:92:d1:87:fb:ed:f4:66:1f:79:87:4f:51:af:d4:
         24:bf:1e:57:28:0b:f8:60:49:3f:a7:c2:56:aa:1a:8b:23:3d:
         fe:a2:f3:20:26:68:d4:04:23:33:7e:48:57:88:16:5a:15:21:
         66:30:ee:31:fe:59:55:b6:01:ab:dc:58:4b:73:23:49:be:31:
         43:f4:14:d5:7f:92:7a:4f:e0:b7:2c:7d:84:b0:d5:b3:70:c0:
         c6:f5:e9:c9:4c:7e:66:d3:85:96:07:48:09:f0:ab:04:87:7d:
         f8:00:b2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:46:56 2026 by rpki-client