
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: mb3vhGZCup32VG4XxeHnFUpiAJOoS0khJkmHJft/wDU=
Subject key identifier: 16:26:47:96:EC:98:A9:D8:E1:6E:94:34:71:8C:54:A8:71:DA:3D:D1
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 07DECD01B1FF7CF1D797C7349994F33042F4EBF4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 057C
Signing time: Wed 11 Mar 2026 00:03:48 +0000
Manifest this update: Wed 11 Mar 2026 00:03:48 +0000
Manifest next update: Sun 15 Mar 2026 00:03:48 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: i1FEJy1j0jZuIWiw7sLk0rjd38ofEw+32rUYy9O58XA=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Mar 2026 00:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:de:cd:01:b1:ff:7c:f1:d7:97:c7:34:99:94:f3:30:42:f4:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Mar 11 00:03:48 2026 GMT
Not After : Mar 15 00:03:48 2026 GMT
Subject: serialNumber=6448237ddee091ea06d50c532c5add4afbcc9066335971c6ae3526dfe6eacdc5, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:38:40:8c:bb:92:ba:be:cd:c7:ce:ad:4a:
8b:e7:00:81:57:f7:e0:11:7e:eb:ea:83:62:56:66:
7e:85:da:86:16:c5:fb:81:ed:e8:fd:92:8a:98:62:
82:af:1c:d2:82:d5:d3:81:76:e1:26:06:39:c5:ad:
a7:d7:f0:79:84:cc:cd:6e:be:0c:df:22:71:66:d2:
3e:51:89:f6:11:61:9a:35:59:41:d5:84:25:f7:9f:
ed:92:f7:62:88:ba:8f:e1:f0:ca:f0:4a:1d:b2:fc:
13:f1:af:5a:c9:44:6d:67:74:10:55:be:f4:c3:10:
8b:72:1f:da:70:45:2e:d9:c1:96:f6:eb:f2:71:28:
74:7d:f5:d5:1f:da:0e:22:ed:24:9e:a0:bb:b0:69:
c2:a6:49:62:34:5a:98:47:f9:19:ec:e7:69:7b:a7:
0f:e0:6c:4f:64:eb:64:3b:f5:3f:f7:24:1f:bf:ca:
3d:8c:b8:af:4c:c9:9f:42:9b:f0:1c:7c:eb:70:59:
f7:7e:4d:5e:81:d8:d6:13:c0:84:da:3d:b5:4a:f2:
98:ab:45:57:61:1d:1b:c1:82:b2:40:34:79:bb:01:
e0:e9:19:52:65:2a:4f:47:41:93:1c:2b:6f:52:cd:
ba:bf:48:e1:09:9c:47:f1:db:f4:0d:85:b5:e1:7a:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:47:96:EC:98:A9:D8:E1:6E:94:34:71:8C:54:A8:71:DA:3D:D1
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:6d:1a:e8:e9:82:81:38:a2:60:80:8a:d0:01:15:ab:f1:e0:
cd:8d:ce:3f:70:3e:ab:d9:11:7d:9a:cd:70:51:f5:5f:15:ff:
3f:38:2a:eb:5b:86:6c:f4:2b:40:df:a0:c1:3c:1e:83:2b:f4:
7d:d4:b5:c4:34:1b:30:62:5a:15:26:57:16:ed:c9:8d:4a:d3:
e8:20:43:99:98:23:20:81:14:9c:66:d0:42:78:96:cd:61:14:
a6:27:9b:64:b0:d6:59:2a:44:78:a9:84:39:3f:09:1a:d6:6a:
90:db:16:7f:18:ae:b2:f6:5a:0b:00:2b:90:b2:db:30:1f:5d:
72:26:d5:ee:4d:57:af:ae:d4:f8:02:76:f8:10:1e:fc:f9:bc:
8e:0c:a5:3f:62:8e:7b:39:e0:1c:a7:dc:5a:73:ed:a1:56:7b:
bf:05:f4:cf:e9:96:9c:b6:e6:09:37:50:d7:0d:29:fb:69:d8:
2d:7d:1a:5d:c6:d3:a9:38:16:58:75:68:6f:72:23:15:cc:11:
13:d2:97:db:63:7f:db:c8:02:a8:56:ca:b9:dc:03:5f:0e:fc:
64:2d:46:ef:35:29:80:2f:1b:4b:86:72:61:d2:d0:f0:e8:95:
1b:f5:33:6f:2b:b7:ef:dc:85:2f:23:06:cf:11:84:73:87:67:
d5:f5:45:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 16:05:11 2026 by rpki-client