Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          Lv6X8kRexk7T/SGmO/7CmltB8OKpKAQNIM0Q8Lx2qW8=
Subject key identifier:   94:09:EA:6C:D2:D8:DC:06:00:77:5B:27:80:03:8E:90:65:96:FE:F0
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       7271AC6204331D67F503B8FD4ACDC2B8DD4CECB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          05B6
Signing time:             Fri 08 May 2026 00:02:42 +0000
Manifest this update:     Fri 08 May 2026 00:02:42 +0000
Manifest next update:     Tue 12 May 2026 00:02:42 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: nhG611UyM7KJhdVLH9Zh/Jwgnzufuokh3z203U7kzus=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 May 2026 00:02:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:71:ac:62:04:33:1d:67:f5:03:b8:fd:4a:cd:c2:b8:dd:4c:ec:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: May  8 00:02:42 2026 GMT
            Not After : May 12 00:02:42 2026 GMT
        Subject: serialNumber=4451bb8ad95daae87f84431d35598f748812611cb88ca4279205efac1e2c739f, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:78:f2:3a:4d:a7:07:72:1d:6f:70:6c:66:
                    f4:b9:c9:d0:fb:07:8d:37:43:f9:5b:bf:f1:ed:59:
                    aa:b4:f7:57:e0:a5:34:a1:56:5c:d1:1a:4b:48:cb:
                    47:23:9a:40:49:8f:18:f8:0e:98:4d:1c:c1:2f:e6:
                    aa:43:5d:25:53:ff:8c:70:95:71:df:57:41:d1:f9:
                    50:3e:46:c6:8b:52:cc:bf:3f:28:7e:df:22:ee:58:
                    c2:30:6a:7e:b2:e6:c1:92:31:ab:b8:02:68:83:a3:
                    06:07:6d:56:51:cc:9d:37:b5:55:bb:73:43:00:70:
                    45:3d:a4:e6:0e:fb:3a:e9:d9:8a:81:aa:ec:22:13:
                    09:90:26:84:b6:bb:34:ea:e3:a2:6e:86:e9:19:56:
                    4c:10:71:9b:a7:95:ee:13:b3:49:29:b0:23:1a:c2:
                    b1:ce:01:9b:00:f0:d7:67:93:79:e3:4a:02:82:a2:
                    17:9a:40:24:21:07:71:04:bc:ce:c1:5d:58:55:9e:
                    31:a8:00:c4:08:c8:54:1f:52:93:0e:15:28:ec:b9:
                    0c:f4:18:03:77:3d:87:6c:b3:6e:ce:c7:5c:f3:f7:
                    31:dd:3b:7c:54:25:5e:e5:4b:59:9f:b6:89:bc:9b:
                    fe:34:9e:4e:e6:b2:f8:f5:e0:36:46:a9:9c:50:50:
                    40:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:09:EA:6C:D2:D8:DC:06:00:77:5B:27:80:03:8E:90:65:96:FE:F0
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:48:dd:b6:f7:9b:1a:2b:6d:fb:9c:06:d4:a3:8c:bd:d7:f2:
         28:32:47:2c:f6:65:c8:45:27:63:68:86:6f:36:7f:c8:ae:af:
         aa:4d:e3:c7:1c:80:15:b1:1e:03:20:03:fe:de:56:97:e3:7e:
         15:5f:ee:f6:44:78:52:af:a6:52:6f:a4:a7:cd:69:27:bd:9d:
         31:64:5f:ab:74:93:22:5c:ea:97:66:df:be:e6:2d:4f:fe:10:
         97:88:31:4c:0c:f6:38:09:17:a5:ab:08:24:cf:7e:83:15:9a:
         4d:fd:df:bd:0b:1e:ec:70:5f:95:74:ff:7a:22:4b:7a:dd:5f:
         a1:46:c9:aa:83:9a:ac:ca:d3:09:2d:00:03:9d:05:69:b2:ed:
         c8:f8:06:f5:38:41:ea:ef:cc:8e:cd:4a:3c:3b:ac:94:2a:f5:
         bd:d0:0f:86:66:15:5f:98:a1:d3:23:1d:48:19:1c:23:9c:ed:
         4c:f8:cb:6c:97:df:76:80:1d:29:40:98:fd:4e:2e:9a:05:1a:
         95:a0:46:e9:97:7c:17:ab:12:4c:54:a3:3e:3e:a9:c0:ff:8d:
         4f:68:4c:7f:e4:1e:36:b3:4f:22:83:c1:ee:5f:39:d4:91:ac:
         ef:7b:2f:07:c8:30:fc:fa:31:f7:3b:6d:8d:5f:fa:5c:fe:6b:
         cd:ef:8b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 02:20:14 2026 by rpki-client