
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: EanUYFqX8ckiEHb46kxCfgWpYcaTg6uvGx8GBlBMpkw=
Subject key identifier: C5:F3:55:54:66:82:75:BD:7A:78:5E:7D:DA:07:A9:7C:4E:95:2C:E8
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 12B30C31C330F96DC6C0F8926C0529FFED34B89B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05A9
Signing time: Sat 25 Apr 2026 00:14:56 +0000
Manifest this update: Sat 25 Apr 2026 00:14:56 +0000
Manifest next update: Wed 29 Apr 2026 00:14:56 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: cMSuFx+2+EaAUZeo7Sm8B0z32RTI3fJom43DL9EBYW8=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Apr 2026 00:14:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:b3:0c:31:c3:30:f9:6d:c6:c0:f8:92:6c:05:29:ff:ed:34:b8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Apr 25 00:14:56 2026 GMT
Not After : Apr 29 00:14:56 2026 GMT
Subject: serialNumber=20489877f98bfa59132b1c991bc8f9b0922b4646828b2bee3d963d19fdd4e9ac, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:c0:50:e9:56:e3:4a:83:93:f4:29:6b:50:
b9:10:01:9c:08:31:1d:d4:34:82:a9:fb:7c:fd:65:
09:53:3f:a6:b6:5e:4c:83:de:39:ee:1b:b4:98:63:
e0:d5:b7:4a:34:bb:10:50:8d:f8:a9:4c:d6:fb:b9:
4c:39:64:f8:a1:fb:38:85:10:dc:a7:c2:7b:b5:e2:
2d:7f:13:39:5a:45:96:0b:30:f9:b0:c4:28:93:eb:
95:f9:84:d4:64:08:55:55:91:38:29:c6:96:2f:ef:
62:fe:1f:9f:5d:16:82:70:47:65:55:e8:9a:69:8d:
dd:0c:bb:a2:39:ab:27:13:9a:2e:2e:62:19:0c:cf:
e0:d5:c1:c0:9e:be:4b:53:33:df:9d:27:9a:b2:78:
e3:5e:ee:ec:4c:2e:63:6e:82:17:c9:f6:8a:ad:9e:
0b:a8:51:e9:96:5e:cc:66:88:14:bc:2d:30:fe:1b:
36:db:80:2f:0d:87:76:86:29:e7:e4:0a:e1:82:cc:
c7:79:e8:a8:38:ef:ed:ce:ca:63:21:21:90:0d:6a:
23:9d:ab:7c:e5:47:23:eb:3f:46:8a:fb:22:96:28:
fb:51:3d:d3:4b:a9:88:b4:e8:cc:23:c0:0e:ac:ec:
1b:27:43:9d:08:70:ec:a2:3d:23:b6:1b:1a:9b:f0:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:55:54:66:82:75:BD:7A:78:5E:7D:DA:07:A9:7C:4E:95:2C:E8
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b2:79:ce:50:b0:30:b8:b4:55:68:71:cf:82:fc:7a:f2:a7:
39:ff:a4:d2:84:53:cc:e8:16:df:3c:e0:54:36:ec:42:b8:bb:
8e:6c:68:16:c8:50:3a:fa:3e:a9:28:b8:fe:59:ce:f4:b8:e7:
9c:5d:03:76:89:20:bb:aa:62:d0:88:bd:6f:8d:49:84:4e:ad:
a0:85:8e:d8:40:ed:82:5b:02:02:50:a5:10:83:2f:0c:55:1b:
99:c8:b9:9d:a2:64:88:38:06:50:c1:3e:4c:ed:3e:d3:06:00:
e0:9d:11:61:9b:a8:6f:1e:af:0d:e9:e4:85:d3:78:ee:35:93:
76:c6:7f:af:48:ab:35:38:da:f5:69:22:de:b5:34:b5:53:69:
a1:ee:14:98:b9:16:ff:de:f5:66:12:8b:95:9f:94:03:74:b8:
f2:44:0c:70:89:b8:84:95:13:13:88:fc:16:09:1d:99:9d:5f:
12:f9:7f:4e:6f:04:70:c9:01:87:82:7e:9d:52:07:25:eb:2e:
6f:9a:f9:0f:f8:ad:10:4b:c6:ab:b1:e0:dc:36:43:46:a2:7b:
1e:55:4a:52:19:cb:70:22:c7:4e:36:78:ea:7d:95:01:5a:7c:
ed:cf:80:6b:29:78:38:11:3e:9b:29:07:51:e6:1b:02:7b:78:
44:51:df:a6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUErMMMcMw+W3GwPiSbAUp/+00uJswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDQyNTAwMTQ1NloX
DTI2MDQyOTAwMTQ1NlowejFJMEcGA1UEBRNAMjA0ODk4NzdmOThiZmE1OTEzMmIx
Yzk5MWJjOGY5YjA5MjJiNDY0NjgyOGIyYmVlM2Q5NjNkMTlmZGQ0ZTlhYzEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWzAUOlW40qDk/Qpa1C5EAGcCDEd
1DSCqft8/WUJUz+mtl5Mg9457hu0mGPg1bdKNLsQUI34qUzW+7lMOWT4ofs4hRDc
p8J7teItfxM5WkWWCzD5sMQok+uV+YTUZAhVVZE4KcaWL+9i/h+fXRaCcEdlVeia
aY3dDLuiOasnE5ouLmIZDM/g1cHAnr5LUzPfnSeasnjjXu7sTC5jboIXyfaKrZ4L
qFHpll7MZogUvC0w/hs224AvDYd2hinn5ArhgszHeeioOO/tzspjISGQDWojnat8
5Ucj6z9Givsilij7UT3TS6mItOjMI8AOrOwbJ0OdCHDsoj0jthsam/DXKQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFMXzVVRmgnW9enhefdoHqXxOlSzoMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAMKyec5QsDC4tFVocc+C/Hrypzn/pNKE
U8zoFt884FQ27EK4u45saBbIUDr6PqkouP5ZzvS455xdA3aJILuqYtCIvW+NSYRO
raCFjthA7YJbAgJQpRCDLwxVG5nIuZ2iZIg4BlDBPkztPtMGAOCdEWGbqG8erw3p
5IXTeO41k3bGf69IqzU42vVpIt61NLVTaaHuFJi5Fv/e9WYSi5WflAN0uPJEDHCJ
uISVExOI/BYJHZmdXxL5f05vBHDJAYeCfp1SByXrLm+a+Q/4rRBLxqux4Nw2Q0ai
ex5VSlIZy3Aix042eOp9lQFafO3PgGspeDgRPpspB1HmGwJ7eERR36Y=
-----END CERTIFICATE-----
Generated at Sun Apr 26 00:12:46 2026 by rpki-client