
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: MnkalJPuCr6wxBdOJ1cv82wPGrwvF7Vks2y15MvXWe4=
Subject key identifier: 2E:A0:15:DB:45:F1:12:63:D6:76:CA:F3:C7:4D:97:FB:1E:23:85:79
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 5AE6417EB7BAE033B2500DE130AB66362001A404
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05B1
Signing time: Sun 03 May 2026 00:01:43 +0000
Manifest this update: Sun 03 May 2026 00:01:43 +0000
Manifest next update: Thu 07 May 2026 00:01:43 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: kLjK3VA45KUgkhi4Sa1QwlpLOUbCJrFf9f04X4YtX6o=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 07 May 2026 00:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:e6:41:7e:b7:ba:e0:33:b2:50:0d:e1:30:ab:66:36:20:01:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: May 3 00:01:43 2026 GMT
Not After : May 7 00:01:43 2026 GMT
Subject: serialNumber=5fd677b7c65b5e821657fdedc54738ae0799bcca7d02dde05085d836668552c1, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:be:ad:09:64:75:41:10:6f:48:5a:e6:ce:
2c:4f:99:b5:d1:c8:40:71:9c:9d:52:24:aa:0a:63:
3e:87:78:fd:02:3b:de:15:95:b5:1e:a0:c8:9a:13:
e4:b7:a4:4a:1b:72:fe:67:c0:2e:4d:e9:1c:42:f1:
43:bc:79:00:5e:40:d5:35:4a:e8:87:61:25:1b:cd:
11:82:b3:99:de:d1:8d:17:2e:6e:42:36:e0:0b:11:
72:0d:4a:a0:f6:65:46:5d:7f:42:dc:86:6a:a9:1f:
b2:49:e0:d5:91:27:66:62:9b:a1:2f:98:6a:2e:b1:
3a:95:1a:c6:60:ea:c0:73:6f:02:7d:d5:eb:7e:b7:
ab:a3:ad:14:cc:2b:18:47:35:9a:18:0f:81:a5:d5:
d0:2b:33:c7:eb:4a:69:2c:33:48:76:b2:d4:63:7f:
88:1c:1f:a5:a0:5b:5a:57:43:de:06:15:92:22:95:
1a:76:f9:d5:f6:b4:87:1c:0c:19:1e:d5:64:3f:9d:
2a:e7:f1:57:f0:f1:44:09:45:d2:60:a2:17:9e:0b:
cf:b8:12:dd:ae:26:e8:d8:09:9d:52:94:92:92:ff:
4b:bb:48:3d:07:f5:0a:7d:0e:2d:41:f5:7e:5b:16:
39:b2:46:36:31:05:c2:1f:15:f9:ce:a0:b6:15:59:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A0:15:DB:45:F1:12:63:D6:76:CA:F3:C7:4D:97:FB:1E:23:85:79
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:47:67:d6:bf:4c:a8:a0:b0:03:4e:ca:7b:3e:81:87:10:ac:
f3:c3:b2:24:8c:5e:5d:59:74:b0:2f:6c:01:85:aa:4c:b0:bb:
1e:04:cd:c3:fd:be:1b:3f:ee:f2:fb:a6:4f:fd:7b:59:c5:62:
dc:ce:70:af:12:82:17:8b:a2:ce:8a:dd:82:db:cc:84:c0:a0:
32:94:81:83:56:ec:06:5b:57:a1:eb:c0:83:3b:09:21:6b:32:
8e:17:65:a7:1e:49:67:6d:4a:ed:db:0a:06:91:46:5f:42:92:
44:e3:b9:d4:2e:22:fe:68:34:f7:33:69:2e:98:d1:a6:c2:5e:
c4:f1:ad:ba:d4:08:70:b7:01:50:1c:e2:5b:17:ca:65:54:55:
48:38:8a:7f:0e:d8:e0:35:a0:f4:50:3f:da:37:3f:27:b0:13:
2b:ef:fd:69:72:5e:10:9b:63:ac:70:ea:5b:73:65:8e:ea:44:
51:44:3b:fd:bb:14:d1:bf:2a:d5:b9:b8:1c:76:83:65:80:52:
c4:7d:88:87:ac:09:d6:f7:c5:9d:04:84:b2:02:a7:68:78:03:
89:96:4d:85:1e:30:f4:11:50:38:97:da:3b:27:f0:8f:cd:ca:
96:29:75:9d:88:9d:d8:91:0b:a5:6b:c0:f9:0c:da:17:af:e5:
cf:9d:0c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 01:02:52 2026 by rpki-client