
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: dze7V66K7mAqcjQ9eNIsVJO/cZpLXel83CjVNx+Vayw=
Subject key identifier: C0:0F:FF:6D:10:9D:D4:0E:8F:0E:E5:99:BC:CA:51:A0:F6:98:AC:F7
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 74427A17825314120A7AEE1CEB2652C4208AB95A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0569
Signing time: Sat 21 Feb 2026 00:03:30 +0000
Manifest this update: Sat 21 Feb 2026 00:03:30 +0000
Manifest next update: Wed 25 Feb 2026 00:03:30 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: MBCm/wpjWTCynLBAAXlhwqpHi+4pATpa9VJ7w3ENyd0=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: W5s2+KsThmK2t/kTEoDyc0qk5t8nWR8Vcr0OHIME7gY=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: ut8FczR7ugZqnHluzfx95xeHGc0pG9tLkp28GdPg+1g=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: CNy33lvFVRD+mSD8JJeY7w+m3uy4j1Q7IRyDV4kVRuc=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 55JqWeNnPUgIMiCbIulJEhJREuoglf7zd0Hdhdnk7JI=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: nX53gsp63aFe1Zk0fvuz7gf9dNGw1Q0a6vNdlF04HMM=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: n1kg4tDD9KCpPUv6L5rqRkioae0zUB8A2YrnCFiHVJ0=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: rgmgKkFA/1ZuGJ4QRcU97a/WiPe2lq2P1GX24tqN91U=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: DuZi0/kBsFkmGULcNt4xmJZ4I8aFDcP0+xR9g1RHy40=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: N/cY7SofU7BQTjSpADixy6DLuAFs/nCWf8HWg3e5lnI=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: mnMvQYdAbSRRbDZHXyfM/f8XdM80z72GugupasAKoQg=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: iHgVMCQkVpqqh3egN8945TcYU7izcrnduLWWQD583q4=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 00:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:42:7a:17:82:53:14:12:0a:7a:ee:1c:eb:26:52:c4:20:8a:b9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Feb 21 00:03:30 2026 GMT
Not After : Feb 25 00:03:30 2026 GMT
Subject: serialNumber=aea0f2b78bd142404cba5c243b6fd627a080ee60caaf866d97f42eca6ca379e0, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:b2:18:e3:14:11:17:59:85:4e:b9:58:b9:
fd:62:25:53:a6:73:a7:f6:b5:34:74:c6:77:c5:59:
3a:45:26:41:0e:00:a3:fb:06:4c:24:67:a6:48:f1:
44:8d:c8:fb:ad:32:98:b0:f3:72:06:55:6c:19:a1:
59:ad:7c:9a:91:71:d5:56:d5:a1:4e:0a:b2:d3:a0:
96:78:db:b7:c6:e5:34:2f:4f:35:94:70:0b:4e:f6:
d0:a2:22:28:b8:2d:ab:67:27:73:7b:6c:9b:55:32:
fc:38:01:0e:74:5c:a5:d4:38:ff:69:4a:6b:7a:98:
fe:bd:a7:50:38:5d:c5:6d:b1:ad:2b:e4:fe:cb:55:
ff:bc:05:3f:59:3f:89:d0:4a:20:54:ca:0a:42:f9:
0e:f0:b8:c8:0a:a7:78:e6:02:fa:32:1a:85:a0:f1:
fc:80:a9:92:44:12:75:45:9d:60:35:03:c4:37:8d:
b5:c1:e1:99:42:7a:1a:4b:f1:46:2d:e9:39:5e:c8:
2a:fd:c0:b0:37:1b:29:15:77:bf:2b:e8:4f:10:57:
be:ca:c7:cf:53:1c:63:9d:65:58:ac:91:41:3e:22:
e1:f6:30:ef:64:38:3d:c2:04:3a:e6:e8:11:28:c0:
3c:38:60:35:94:5c:76:83:c5:29:fd:31:f7:e4:7a:
d2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:FF:6D:10:9D:D4:0E:8F:0E:E5:99:BC:CA:51:A0:F6:98:AC:F7
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:3c:a7:6b:2a:0e:09:0f:14:b5:5f:2b:f6:58:06:d7:c8:4b:
e0:38:3f:80:95:0d:84:e8:36:d1:81:3f:66:e2:0f:9a:49:60:
1e:f1:9c:9d:ab:a0:ec:8a:e5:a1:48:d7:aa:ad:8c:a8:41:55:
26:c0:38:da:e3:a7:6a:20:bf:9e:9e:3e:ba:49:52:68:2c:b6:
ee:90:d2:32:4b:af:79:2b:6e:ff:ee:a7:0f:c5:2e:a9:ea:fb:
b9:57:2b:b4:ed:92:46:38:f7:ec:0e:50:13:66:8f:ec:f9:19:
41:6e:b6:ab:03:4b:03:a8:59:bb:e9:47:f6:30:77:c9:72:2f:
18:1f:bf:3a:92:a0:8d:59:37:60:83:8c:90:55:a4:0b:08:ed:
89:7f:52:c4:20:a7:3f:0e:49:02:5d:de:0a:3b:5c:6b:ac:ba:
6d:64:f2:93:41:e6:49:9d:6c:d1:3e:00:1a:56:f4:b6:ec:68:
66:cf:a0:4b:ad:33:8b:78:4a:d4:af:f5:09:d1:1e:21:06:4e:
15:b7:01:4f:9e:e2:21:43:35:06:a6:0a:4c:bc:05:c2:31:ac:
80:c6:a7:38:62:ce:6a:68:2c:82:dd:8f:b7:6c:1b:98:ee:9e:
d1:6f:95:3b:f8:2e:5a:9a:e7:82:ab:29:bd:77:08:15:fe:9b:
21:41:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 09:22:14 2026 by rpki-client