
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: sbHHoBp0uYCLEGzbOD9hv7PvksTk1xDFZdRwZSX073A=
Subject key identifier: 42:82:B7:BC:D3:A0:5E:D6:D4:D6:D3:78:F3:84:AF:0F:EF:A8:BA:94
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 7BF2B3063863183C73EBD51031328D16B10D2CFB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05DF
Signing time: Wed 17 Jun 2026 00:07:17 +0000
Manifest this update: Wed 17 Jun 2026 00:07:17 +0000
Manifest next update: Sun 21 Jun 2026 00:07:17 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 9noVsp+SlXMaVtRYLZ2UsgHXOR8yBZrfK7uKc6w2RU0=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: LWW7G4vSgrTVoC49iuj/jpZ5T5IkSgMBRFaAY/6AWUQ=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: tSXYX/7DStfGoPDZaoojSsCpcjEESLy1shlqchxdJm0=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: 8F7U3HuBEHAbZxeotbZdxHhB0w+z61KRGEVZWZ1NOPA=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Wr+c6Q1I10v8ZDHa1kskBEdqqsWESS2cYOTf7oQrhuo=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 1t03EChjZYkK077vk6ZH3a5qPnl5WndlNpd+mVGJaPM=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: SekGmHDfoGXj5vE4Zm57ePrlctkbgwVHEgjShmndD3o=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: NMamOf9rJQLEFcxePu5jji6CzEB+kU961XK/hVBXFrA=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: 56ohyAlTtw3nDjDnI6PeLZ9qx5aGxhIqza4yGFF5fkk=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: sgve8SNnpJRICXi56BMuftrBFNrW8ZCffoMP5NfnWZg=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: e7DgUMtp6AoSqdNYLBl9ON3HVwaVdFMx/vALGOr1yFY=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: MUN3E1NLiG+U9TN+LvMQxVmbYWbeCf+Yz3FFqM07XUk=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: aWTrNq1G+utWB6tkA4hz4DH0ZMMJfiIsmt+vshKxw30=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: mmDjTVF7uC6IcLTQiEaOr33xzbFkcnbXUdIc6xa3iKs=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: NBLGSURJiomLlOLBraVQVdoTSr6bS+7HxfARclWtYgE=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: KpdoMD0r6LzGsIFEnqxHdIGwAQfhLRI49qdtI7ZZKXk=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: eemEEY86nS8bPyiVDFi6ZCQhg151yZIJ5Mn0I+PMcdc=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: Hi54Gbhw3DEMbkLoHk2FXWg76N5z+6Fx0yPf7AZ7FXk=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 21 Jun 2026 00:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f2:b3:06:38:63:18:3c:73:eb:d5:10:31:32:8d:16:b1:0d:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Jun 17 00:07:17 2026 GMT
Not After : Jun 21 00:07:17 2026 GMT
Subject: serialNumber=27418b076f3627695016a0bb4a46c29ff8bbf8d8a939992debcce11d5c7f2af7, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6c:99:5b:3f:15:90:1a:2b:fc:f0:7f:ca:77:
3a:73:30:86:59:e6:81:00:fc:a5:38:ec:00:01:ca:
6b:8a:84:6f:98:5c:a5:2e:5a:b8:23:7e:d5:1f:01:
e3:1b:39:df:e6:c5:26:67:c6:76:80:4b:e3:ab:16:
e2:81:bc:bc:ec:8b:88:f6:a1:88:af:1e:9a:56:e3:
03:32:24:8c:36:2f:be:2a:70:9c:c3:41:e3:ae:da:
5d:79:fb:7e:85:3a:bf:28:f0:08:b2:65:33:27:a7:
0e:3d:7f:66:9d:1c:71:cb:5b:2e:09:a2:bf:f5:25:
da:32:eb:bf:93:a0:e5:3e:ce:7f:75:7b:52:a1:b4:
d6:60:cf:cc:1e:ae:c5:75:40:a7:6e:de:31:57:00:
b2:52:9e:89:ca:a0:1b:44:a6:89:51:43:b5:fe:59:
cc:c9:23:7d:89:17:21:6b:c0:e9:0d:07:7f:8c:39:
91:11:58:57:f7:3d:be:b0:23:33:96:8b:65:fb:ba:
6e:f7:02:03:4e:c7:4a:08:17:0f:54:f3:d5:70:b1:
c8:34:fe:e4:2c:5b:39:98:9d:9c:c4:2e:f4:7f:ab:
cf:86:e3:84:9e:63:0d:a9:3a:07:56:b6:4f:f0:f1:
1b:a7:44:27:cd:df:22:74:73:fb:bf:f7:e9:eb:9e:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:82:B7:BC:D3:A0:5E:D6:D4:D6:D3:78:F3:84:AF:0F:EF:A8:BA:94
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:12:28:de:c6:03:c2:e5:a7:89:c3:03:77:21:13:c8:a5:30:
25:f7:83:f7:5a:96:b2:bf:b3:4a:63:86:05:f9:4c:94:4e:b5:
bd:69:24:9a:a9:18:e7:c4:b8:66:c8:a0:13:5f:36:76:04:a4:
28:70:53:37:b2:6c:b0:90:6b:15:e3:65:94:cf:03:da:24:39:
32:04:97:9b:37:54:af:4c:9b:61:de:54:d8:c9:fc:38:1c:50:
7f:a4:18:6a:87:16:f9:ee:68:ec:ab:18:23:92:ec:2c:22:8e:
2a:a6:f0:49:b3:96:f9:eb:fd:1b:1a:1e:27:4f:f5:87:c0:6a:
58:8a:a4:a2:43:74:f4:58:cd:12:81:7d:69:6e:a2:75:68:b9:
d8:9f:b5:0c:a5:c1:74:0b:ad:7d:73:51:1d:fe:6d:fd:b1:1b:
29:4c:1a:84:5a:cd:b0:6b:a1:89:13:1c:ee:6d:24:69:04:18:
b5:fe:8a:5c:b3:ab:e8:36:6e:44:7e:0b:85:3f:11:53:aa:a7:
cd:e1:1d:b4:e9:fc:4a:de:e6:c1:75:b6:e0:8e:fa:58:59:b9:
d9:fc:a0:69:c4:27:f8:6f:f4:e1:4b:25:75:97:8f:9f:3e:1a:
5f:62:63:71:5f:cc:18:ba:4b:f0:20:54:3b:24:5b:1f:45:72:
9d:4f:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:24:48 2026 by rpki-client