
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: PO4rfivlGw/uxLJNADkXCGthweyXjgcGjB7p5bP/yVA=
Subject key identifier: DC:6D:05:09:B3:22:E4:4A:58:58:34:41:6E:6C:48:F3:83:53:B3:D1
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 3E2A1BD77C3D4BDFDDCB8E8EF2BC6C78A869DC8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05A7
Signing time: Thu 23 Apr 2026 00:14:14 +0000
Manifest this update: Thu 23 Apr 2026 00:14:14 +0000
Manifest next update: Mon 27 Apr 2026 00:14:14 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: DVg2obIFPh2/9k7UFTf9iUfa8zIOiCskL9h9orwkd4c=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 00:14:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:2a:1b:d7:7c:3d:4b:df:dd:cb:8e:8e:f2:bc:6c:78:a8:69:dc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Apr 23 00:14:14 2026 GMT
Not After : Apr 27 00:14:14 2026 GMT
Subject: serialNumber=f50ca712533346faca19d201823c67123d1f3b4a6ada21edd15d355903e5d981, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b0:3f:67:2b:6f:69:ca:48:7f:e7:4b:07:70:
cb:0e:0b:cc:84:04:3d:65:81:e1:d5:86:bc:cc:20:
34:02:3b:79:20:7a:bc:21:8c:25:90:d9:75:e5:22:
f8:6a:fc:f9:4a:b6:ce:81:80:87:0a:c5:f8:af:5b:
31:e7:fb:54:5e:1b:54:03:a0:06:06:19:29:a0:9c:
01:c2:8a:fc:08:a9:f6:dd:54:38:70:5b:62:77:f2:
cb:e4:11:c9:05:e1:3c:64:c1:3e:14:29:19:4b:4e:
93:9e:22:2b:8a:3d:1e:5d:49:b2:fc:ee:db:ce:b1:
34:0b:f3:4d:69:d6:a0:06:87:b5:26:3d:b3:52:fb:
15:90:0a:d7:19:ff:63:79:f0:49:36:3d:3b:a5:fb:
0e:2e:14:20:35:24:d2:8c:8e:32:c3:77:df:bf:00:
f9:90:6f:f1:b1:77:5b:ec:b6:30:93:6e:e6:a2:40:
8b:b3:5a:e5:ff:1c:65:ad:76:8a:38:43:8f:98:bd:
91:b5:da:9a:13:9f:b0:e7:62:55:8d:2a:52:35:a1:
3c:1d:be:2d:ae:f4:3a:55:d0:3a:8b:18:45:db:6b:
e6:15:cd:73:d1:02:7c:50:01:d3:af:2d:ba:96:b7:
7f:e1:e0:f4:47:4b:7c:09:21:32:ae:68:56:e6:2e:
e0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6D:05:09:B3:22:E4:4A:58:58:34:41:6E:6C:48:F3:83:53:B3:D1
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:89:db:81:c9:22:e9:7c:38:71:18:eb:c7:78:f3:bb:f0:61:
6f:01:8f:94:10:fa:09:e1:d3:c4:5c:7c:1c:82:90:c8:ab:2e:
46:e5:dd:b6:38:55:4e:4f:6f:d7:68:04:e2:e1:01:89:67:f8:
84:1a:f5:e4:34:87:8e:71:9b:3c:b2:ed:67:9a:0b:2b:94:93:
aa:ad:a5:6e:17:e8:e4:f4:e9:fb:24:fc:d4:4d:81:57:26:9e:
74:0e:ca:63:da:6e:2c:e4:3e:30:a5:81:aa:8b:a7:0f:75:df:
ed:46:85:0a:81:fe:47:cf:b7:22:ee:4c:ed:1c:1b:e5:04:9a:
5b:a2:b2:6e:0b:14:c9:5d:96:ea:36:ca:80:69:0e:95:29:ed:
bb:78:02:f3:7e:14:73:ab:04:5d:37:f0:71:35:dd:c7:ae:74:
21:74:f6:60:a7:80:a9:02:22:7a:3e:7e:39:d8:b1:f2:23:fd:
0f:62:a1:74:bb:ee:fd:87:ba:9b:64:04:f8:b7:7f:08:9d:53:
88:0f:80:65:a5:d2:d1:a2:ad:0e:ff:75:02:e0:0a:b3:14:f7:
1a:be:84:f1:cb:2b:98:8f:fc:00:9a:66:51:7b:f8:0c:fc:39:
68:dc:f7:80:9c:c2:8d:37:7f:ac:c5:e3:f3:34:c3:8f:1f:23:
d2:d1:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 23 07:23:12 2026 by rpki-client