
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: GSe4/pLOTL1lX0xSSkTlbXdMGHAlJI+jkRlC1ODAOZs=
Subject key identifier: C7:80:7E:C7:1B:4E:B7:74:4D:74:02:22:1C:15:E7:76:B3:A0:DF:17
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 16FB9352AD6E817366E57FD094392BC72DCBA6A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05AF
Signing time: Fri 01 May 2026 00:01:21 +0000
Manifest this update: Fri 01 May 2026 00:01:21 +0000
Manifest next update: Tue 05 May 2026 00:01:21 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: Z2cu0eoRYy8aUNz8KMBXZkn/0POyuu3ykLxBciexseo=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fb:93:52:ad:6e:81:73:66:e5:7f:d0:94:39:2b:c7:2d:cb:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: May 1 00:01:21 2026 GMT
Not After : May 5 00:01:21 2026 GMT
Subject: serialNumber=3a9810e0af75898fe04830b11299e1e0c4ea211b272842d38fdb4edeef5fb713, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cc:72:cb:9c:d0:ca:5d:1d:aa:2e:dd:02:10:
09:d2:16:58:cc:89:fc:10:29:d5:5e:f3:1a:76:49:
bf:5c:a2:bf:15:ec:9b:9f:38:5a:d0:42:76:2f:2f:
31:99:ce:63:d9:0a:1b:23:8d:be:73:7d:c2:58:6a:
06:3e:57:3f:a2:d6:5c:e7:c8:37:89:c7:22:0b:30:
e7:37:8e:be:70:51:95:e4:09:8c:66:b9:51:69:02:
f2:d8:fd:4f:fd:33:7c:ec:ea:c2:6b:ce:b8:72:96:
5a:54:97:75:d7:d6:45:b7:9b:8a:33:8a:7e:23:fd:
bf:28:cb:5c:3c:b1:8e:d2:c3:9b:9b:1f:41:61:0d:
9b:e0:55:15:1c:a3:77:12:05:af:0b:62:b4:e4:52:
fc:31:68:f5:bc:49:32:0e:16:9e:c5:a9:72:41:b4:
97:08:5f:81:bf:3f:6f:e7:fb:1f:d2:6c:79:a0:d5:
9e:a7:cf:5b:00:ec:73:28:a6:61:4a:ae:ab:3c:eb:
8a:98:c6:60:e5:1a:a2:d4:ef:61:fb:bb:1e:0a:7b:
8a:54:47:74:ca:b6:28:fc:64:c2:4c:27:63:9f:af:
d8:35:96:a7:66:0d:d3:d0:05:1f:25:20:32:31:63:
c7:e3:97:b1:6b:b9:e2:54:5e:40:3c:ad:3c:7e:3d:
b1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:7E:C7:1B:4E:B7:74:4D:74:02:22:1C:15:E7:76:B3:A0:DF:17
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ad:a8:33:68:17:39:76:a8:2b:ff:1a:d5:1e:8a:ab:85:08:
b5:05:b3:85:6e:03:9f:de:15:9c:91:5a:15:f4:1e:ad:54:88:
d4:f6:7c:16:fb:ff:73:da:50:ec:fe:2f:98:b4:47:42:67:b0:
5a:47:2b:61:f0:d8:69:2e:32:50:49:5c:e0:ec:21:11:e3:be:
08:0d:49:a2:d0:28:7b:3c:53:8e:96:b6:cb:e2:b8:09:36:6e:
86:57:42:42:32:e6:b6:38:a3:a3:2a:48:5e:8b:51:71:13:87:
f8:81:ea:14:f5:d0:18:6f:b5:cd:e8:b5:71:97:4a:ea:8c:3a:
3d:ae:11:f5:8b:45:05:30:db:c7:31:60:80:0e:83:d1:18:97:
6c:51:1b:87:67:0b:3e:e7:36:82:71:57:4a:28:52:cd:2c:d3:
60:d9:ea:fd:3c:71:6e:25:40:cd:79:a4:0d:85:bd:4b:e6:90:
b2:cd:d0:40:86:76:16:6d:6f:66:bc:1a:39:70:0d:84:23:b5:
0c:2e:db:86:8a:a6:19:04:5f:09:e3:76:2b:3e:93:9a:da:56:
4b:ea:65:07:10:3f:de:db:59:dd:a4:7f:d0:22:f3:08:95:ae:
26:34:81:2b:92:4c:45:b9:df:96:9f:70:92:e5:dd:df:ad:38:
df:d2:50:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 00:20:55 2026 by rpki-client