
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: WFXtmPDdHQfw5XLUaz3Sc5c1el/WqWA4IX9Pk+KhKLA=
Subject key identifier: F7:20:DF:FF:C7:50:DC:2E:99:8C:C9:3D:C9:92:1F:79:62:32:4E:38
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 7D6409F2B0119B1F008CA21C9389757F56CAE2A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 065C
Signing time: Mon 19 Oct 2026 00:02:50 +0000
Manifest this update: Mon 19 Oct 2026 00:02:50 +0000
Manifest next update: Fri 23 Oct 2026 00:02:50 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: BJPAFrjdVH6cCuOI38lY5RbYmtc9rh/OBG7Vk7LJrvA=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: r73l4iNZMafNXfC80CSyJoUcdCuZUcqJ+6+FN5X3XBo=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: +ugoeW2aHUE1wrHqoRYbCRE9DM5hBHnRChNFGKznhmo=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: UzPB51oYtAUm/8DkRY3gj1W4BpUt2oKlqQuyel4fjA8=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 00:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:64:09:f2:b0:11:9b:1f:00:8c:a2:1c:93:89:75:7f:56:ca:e2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Oct 19 00:02:50 2026 GMT
Not After : Oct 23 00:02:50 2026 GMT
Subject: serialNumber=a14701db1b419b970416ab1f483c269bc3416df05eae84181c78a7fbf7dc3c8c, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:3a:1f:25:dd:71:42:51:8f:00:35:6b:ea:
02:bc:57:3d:c5:29:f5:4f:77:eb:01:7c:47:f2:93:
fc:45:57:f2:fc:9f:05:20:93:b7:05:55:73:67:d6:
7a:ae:07:67:84:a8:b4:6f:5f:44:b1:cc:81:b8:8b:
2e:81:8d:b9:f9:5f:e4:02:a3:20:fd:a2:11:b2:88:
f6:9b:7a:1f:d1:7c:e9:93:21:e7:d9:37:22:93:29:
9d:1d:76:bf:bb:7a:ad:65:87:c6:0c:89:9e:82:62:
fe:82:db:70:8b:9b:40:84:85:af:98:35:8f:4a:03:
6b:6b:ab:99:0f:b6:de:29:88:4c:0b:31:12:08:8d:
bb:6d:ec:a5:d9:c2:e5:9e:28:57:7d:94:29:1c:7d:
c0:a5:35:6b:63:2e:1c:03:42:b8:15:ba:fa:09:30:
b5:aa:2a:4c:ee:22:ad:55:27:7e:27:64:2d:e4:2f:
0f:74:a2:07:44:e7:d8:a0:46:8e:62:54:d9:6a:05:
65:ef:4b:38:f0:ed:d8:07:94:60:79:5e:b6:91:5e:
5f:88:4c:bd:93:a7:48:13:4a:9a:56:da:49:ae:57:
b3:04:9d:02:14:3f:89:40:9a:02:1e:06:92:1d:c3:
2d:d5:c4:98:2c:7e:11:1c:0f:36:f5:a6:ca:4b:3b:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:20:DF:FF:C7:50:DC:2E:99:8C:C9:3D:C9:92:1F:79:62:32:4E:38
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5e:2b:77:c9:8a:0f:1a:32:34:19:86:fb:ac:88:d2:20:6f:
f6:d9:48:eb:05:5c:95:54:76:74:82:cb:c7:6d:24:ab:c7:e2:
9b:e1:13:8d:2c:7d:6b:05:66:9f:ba:67:37:02:3a:a9:f2:b8:
d0:50:26:f9:7e:5f:1d:cc:82:dd:cb:a9:c1:33:85:7a:59:dc:
7e:ea:42:de:7e:73:0f:75:aa:3c:d7:b0:21:57:8d:ee:61:a2:
34:b7:ba:d3:09:37:44:2d:a8:42:2c:7b:84:ba:f0:71:32:af:
b2:92:a0:77:f3:ef:5f:28:56:29:16:6d:38:ca:bf:f6:78:02:
7b:83:5d:b5:0d:0c:84:4f:20:3f:63:8c:24:76:81:93:07:a8:
5c:17:a9:c7:92:5b:36:18:ff:26:73:55:3e:76:5c:c8:df:ea:
01:2f:72:ca:5e:8b:71:29:3a:0b:58:ff:d4:44:cc:df:28:4b:
00:a2:ca:1b:07:d6:84:95:0d:eb:df:08:02:d5:52:59:8b:ee:
2f:82:98:a9:2f:4a:d3:4a:ca:43:6c:05:3c:5b:7c:c4:0f:b0:
c3:4b:e0:54:0d:20:27:c9:e8:33:ef:86:18:ec:47:66:08:64:
ec:6b:79:c3:e1:d4:d9:11:a6:be:a5:76:ed:1b:64:11:ea:1c:
98:60:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 18:25:35 2026 by rpki-client