
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: LzH2JmTAK9kvUJKubC6mawG6PELhp87CDAfjByHRHCA=
Subject key identifier: 52:3B:F5:4D:40:7B:05:D6:4D:44:2C:12:9B:2E:9C:C6:F9:A6:EF:58
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 6B0EAA887883DA8D61C21639B48F1D6F70838DB6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0570
Signing time: Fri 27 Feb 2026 00:01:04 +0000
Manifest this update: Fri 27 Feb 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: R1Wqc2d35SaceS6ayuR4zQhnZ3ul1aiVdFbwTjX44Yk=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0e:aa:88:78:83:da:8d:61:c2:16:39:b4:8f:1d:6f:70:83:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Feb 27 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: serialNumber=005bd6c271772e3032fd5ade8216978f52edadb7197c4705601f3fe3d06e176e, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e0:ec:d5:7f:6b:b6:a8:42:38:c3:5d:cb:14:
39:29:20:21:5f:da:7f:cf:6c:35:31:88:e8:6f:17:
84:d7:6e:e9:4a:bd:eb:5b:ba:9d:05:2f:51:db:0d:
45:85:03:53:9f:aa:31:63:3a:36:ef:97:32:bc:5d:
26:bc:e1:ab:96:05:6c:ed:21:36:49:fd:0e:29:7a:
22:86:12:82:6a:24:c5:64:eb:ea:2a:f2:38:97:2e:
88:0c:e1:81:0b:6a:56:76:dc:44:01:70:21:b8:b7:
bf:05:33:10:f5:27:eb:21:53:83:a5:80:17:65:10:
85:af:54:15:dc:29:b5:84:f8:30:2d:7a:b5:af:a1:
21:ea:90:09:24:92:80:ee:37:56:da:18:a4:09:7a:
e9:e9:b0:6b:8f:ca:b4:ee:ad:db:03:47:3b:46:ac:
ed:73:26:8a:77:c3:5b:49:3b:b6:09:92:59:9e:79:
14:c6:ae:b4:4f:eb:c8:46:ea:8a:d4:fd:a1:1a:b9:
e6:b1:03:31:bf:ec:66:aa:ad:4e:88:08:7d:0b:93:
07:05:ad:97:33:d0:b8:1b:9b:1b:bd:73:9e:a7:ec:
06:89:80:86:88:44:47:25:46:d1:d8:2e:74:41:65:
9f:67:3f:22:1a:a8:de:00:5c:f4:1e:9b:17:6e:5e:
62:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:F5:4D:40:7B:05:D6:4D:44:2C:12:9B:2E:9C:C6:F9:A6:EF:58
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:7f:0d:c6:cb:b5:bd:b0:77:0a:cf:c7:77:7c:e9:28:55:99:
f7:bc:d9:de:0e:35:4d:77:4d:e2:83:e7:b0:73:5f:a3:df:28:
31:f9:7d:55:a0:09:a7:5e:e1:4a:81:b6:1e:b3:ed:48:b6:a1:
6b:40:6f:e9:10:e8:34:55:4b:6a:e6:c4:6d:c6:ab:0f:98:17:
8d:1f:5f:b7:f4:9d:58:b3:79:89:d7:a4:08:6a:ad:7b:fd:f5:
f3:fb:fb:b5:4f:21:65:2f:b4:3b:4f:83:f1:07:06:93:7a:0b:
c4:d1:ec:a6:94:d0:c5:07:f6:b7:f2:b6:dc:92:43:3d:08:00:
06:58:2b:3d:a4:d9:b9:f4:ed:69:42:35:83:da:7a:d2:31:af:
7e:a3:f0:67:de:8b:68:15:77:f5:3e:f7:3d:93:07:c5:0d:4d:
70:68:05:50:51:47:61:20:81:f5:01:46:29:7c:ab:e0:0b:02:
98:9c:70:3f:a5:bb:fc:ea:25:0b:ae:94:7e:74:05:0b:e4:63:
52:f6:57:e0:f3:2a:74:19:fb:60:c4:76:34:f3:9f:f2:88:f2:
a4:e4:01:cf:d6:64:4b:d5:7e:3a:69:16:9e:28:03:b2:fd:a2:
0b:74:ff:4c:83:0f:21:60:3e:84:38:21:07:4d:71:cb:63:1f:
33:7b:0f:97
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUaw6qiHiD2o1hwhY5tI8db3CDjbYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDIyNzAwMDEwNFoX
DTI2MDMwMzAwMDEwNFowejFJMEcGA1UEBRNAMDA1YmQ2YzI3MTc3MmUzMDMyZmQ1
YWRlODIxNjk3OGY1MmVkYWRiNzE5N2M0NzA1NjAxZjNmZTNkMDZlMTc2ZTEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++Ds1X9rtqhCOMNdyxQ5KSAhX9p/
z2w1MYjobxeE127pSr3rW7qdBS9R2w1FhQNTn6oxYzo275cyvF0mvOGrlgVs7SE2
Sf0OKXoihhKCaiTFZOvqKvI4ly6IDOGBC2pWdtxEAXAhuLe/BTMQ9SfrIVODpYAX
ZRCFr1QV3Cm1hPgwLXq1r6Eh6pAJJJKA7jdW2hikCXrp6bBrj8q07q3bA0c7Rqzt
cyaKd8NbSTu2CZJZnnkUxq60T+vIRuqK1P2hGrnmsQMxv+xmqq1OiAh9C5MHBa2X
M9C4G5sbvXOep+wGiYCGiERHJUbR2C50QWWfZz8iGqjeAFz0HpsXbl5iawIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFFI79U1AewXWTUQsEpsunMb5pu9YMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBALt/DcbLtb2wdwrPx3d86ShVmfe82d4O
NU13TeKD57BzX6PfKDH5fVWgCade4UqBth6z7Ui2oWtAb+kQ6DRVS2rmxG3Gqw+Y
F40fX7f0nVizeYnXpAhqrXv99fP7+7VPIWUvtDtPg/EHBpN6C8TR7KaU0MUH9rfy
ttySQz0IAAZYKz2k2bn07WlCNYPaetIxr36j8Gfei2gVd/U+9z2TB8UNTXBoBVBR
R2EggfUBRil8q+ALApiccD+lu/zqJQuulH50BQvkY1L2V+DzKnQZ+2DEdjTzn/KI
8qTkAc/WZEvVfjppFp4oA7L9ogt0/0yDDyFgPoQ4IQdNcctjHzN7D5c=
-----END CERTIFICATE-----
Generated at Sat Feb 28 01:47:58 2026 by rpki-client