Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          4KI4X4dVA0FKxbXqkaWIkE12GeuA/4vz7UFoWKWcl+k=
Subject key identifier:   C0:8D:31:62:6F:B4:E9:25:BC:F6:1A:DF:BA:DB:15:F6:7B:1D:71:58
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       648B332C0E451F6EB64FF44013BDAE97441DF7B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          05B3
Signing time:             Tue 05 May 2026 00:02:07 +0000
Manifest this update:     Tue 05 May 2026 00:02:07 +0000
Manifest next update:     Sat 09 May 2026 00:02:07 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 2rbV6VB/rrtedDFaOAaa9EyzfKyb3YBogQAOyeQYnVc=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 00:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8b:33:2c:0e:45:1f:6e:b6:4f:f4:40:13:bd:ae:97:44:1d:f7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: May  5 00:02:07 2026 GMT
            Not After : May  9 00:02:07 2026 GMT
        Subject: serialNumber=6287b0a31ad4e293fe550eba274788d7505193bdc46d34eed4588b9770cbdd88, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:47:94:2f:72:fb:40:95:21:c6:aa:c3:3c:
                    95:72:2e:5a:1c:f7:41:cf:11:a4:78:88:18:d6:6e:
                    b7:ed:c7:23:b1:05:6d:ce:d9:2f:ba:c4:e3:81:e6:
                    86:34:19:8d:97:5b:8e:8d:8b:ad:b6:56:b0:ff:d6:
                    d9:8a:c4:f1:b1:9a:b5:a2:bd:39:30:99:82:a3:90:
                    d6:61:7a:04:07:c8:6c:80:ca:7a:68:f0:35:d1:d8:
                    5d:be:ba:35:00:56:d7:ee:19:c5:39:9b:bc:c9:20:
                    9e:bb:91:96:9e:a5:dd:22:b9:00:04:ad:87:c4:39:
                    36:44:68:66:7e:af:7d:3f:b6:6a:83:05:e1:4a:32:
                    d0:29:3f:4e:0c:fa:e0:a3:3e:5a:b0:76:6a:61:fa:
                    3a:02:4f:4f:3a:f7:44:3b:a3:d2:65:a4:9b:96:c6:
                    f3:1b:f9:68:e7:39:85:48:2f:e0:72:79:ff:ae:5e:
                    db:bb:4b:ad:d0:d6:97:2e:cf:09:88:c8:a2:08:c6:
                    2a:79:03:ac:f4:d3:8f:fc:dd:a0:37:ef:be:de:db:
                    ca:d7:4d:85:83:b0:6d:63:46:56:44:b0:84:f4:b7:
                    06:4f:cd:6a:16:ed:5a:c5:9d:65:1d:3c:ae:8f:09:
                    ad:52:fa:8e:0a:b4:10:09:0b:02:5e:b4:6f:a5:3f:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:31:62:6F:B4:E9:25:BC:F6:1A:DF:BA:DB:15:F6:7B:1D:71:58
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:81:6a:07:82:cd:36:b3:cf:11:a6:8d:64:10:ed:27:d8:
         1a:49:35:8c:e5:54:cd:75:e7:b5:f1:0b:8c:f8:eb:a9:f8:88:
         6c:01:f2:a7:d6:09:f7:fa:4c:a9:18:48:8b:80:55:ee:94:17:
         be:28:1f:15:79:a1:a7:fd:92:58:a4:49:69:51:25:50:f4:b7:
         e2:9f:aa:12:e1:5a:00:04:d0:ed:bc:1a:7e:89:69:41:a7:8b:
         a3:c8:77:bd:9d:d2:ed:e6:75:af:01:3f:21:be:b8:2f:c3:90:
         de:f8:04:3f:f4:bc:ef:38:65:e2:2d:51:d2:21:ad:4f:3e:80:
         56:a8:f6:3f:bc:1e:26:ef:35:57:8a:97:c1:ab:bd:e6:ea:55:
         20:84:0f:c7:72:2a:90:e2:f3:15:bf:91:46:23:5a:a1:d3:28:
         6e:29:ce:60:6c:c2:4a:3c:44:38:b6:d0:47:87:08:d3:7a:9f:
         f9:37:2e:09:9e:34:8c:87:7a:3a:97:9a:33:85:74:22:4e:b6:
         f2:68:07:89:d0:e5:09:1b:20:a3:bf:b1:7f:89:26:b8:4f:0f:
         51:c8:98:4c:51:95:68:6b:a8:3c:5d:fe:41:aa:ad:57:e6:38:
         2c:e9:0d:27:b6:d0:96:0d:c2:d5:17:91:59:79:ec:8a:3b:97:
         b9:80:30:a6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUZIszLA5FH262T/RAE72ul0Qd97AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDUwNTAwMDIwN1oX
DTI2MDUwOTAwMDIwN1owejFJMEcGA1UEBRNANjI4N2IwYTMxYWQ0ZTI5M2ZlNTUw
ZWJhMjc0Nzg4ZDc1MDUxOTNiZGM0NmQzNGVlZDQ1ODhiOTc3MGNiZGQ4ODEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz5HlC9y+0CVIcaqwzyVci5aHPdB
zxGkeIgY1m637ccjsQVtztkvusTjgeaGNBmNl1uOjYuttlaw/9bZisTxsZq1or05
MJmCo5DWYXoEB8hsgMp6aPA10dhdvro1AFbX7hnFOZu8ySCeu5GWnqXdIrkABK2H
xDk2RGhmfq99P7ZqgwXhSjLQKT9ODPrgoz5asHZqYfo6Ak9POvdEO6PSZaSblsbz
G/lo5zmFSC/gcnn/rl7bu0ut0NaXLs8JiMiiCMYqeQOs9NOP/N2gN+++3tvK102F
g7BtY0ZWRLCE9LcGT81qFu1axZ1lHTyujwmtUvqOCrQQCQsCXrRvpT8jNQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFMCNMWJvtOklvPYa37rbFfZ7HXFYMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAKFZgWoHgs02s88Rpo1kEO0n2BpJNYzl
VM1157XxC4z466n4iGwB8qfWCff6TKkYSIuAVe6UF74oHxV5oaf9klikSWlRJVD0
t+KfqhLhWgAE0O28Gn6JaUGni6PId72d0u3mda8BPyG+uC/DkN74BD/0vO84ZeIt
UdIhrU8+gFao9j+8HibvNVeKl8GrvebqVSCED8dyKpDi8xW/kUYjWqHTKG4pzmBs
wko8RDi20EeHCNN6n/k3LgmeNIyHejqXmjOFdCJOtvJoB4nQ5QkbIKO/sX+JJrhP
D1HImExRlWhrqDxd/kGqrVfmOCzpDSe20JYNwtUXkVl57Io7l7mAMKY=
-----END CERTIFICATE-----
Generated at Tue May 5 01:50:43 2026 by rpki-client