
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: ST8EWODbCnjzmEZqTvWJCO/NYJLqTANfc5Ip9B4xX2Y=
Subject key identifier: 09:71:FC:47:85:EA:A4:10:88:63:87:F0:7C:28:9A:80:DD:50:B7:78
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 6C5B67B13E592C848B83A8178A9323D5E44574DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0624
Signing time: Mon 24 Aug 2026 00:04:41 +0000
Manifest this update: Mon 24 Aug 2026 00:04:41 +0000
Manifest next update: Fri 28 Aug 2026 00:04:41 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: yHaPsA2ywth0egcvQAqrFr2OhqQ5/TARe+nDOkPTtDk=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: r73l4iNZMafNXfC80CSyJoUcdCuZUcqJ+6+FN5X3XBo=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: rDQw2NlaITAzyDgBs7YI0l4weL1704mjzjFsg+xw0kE=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: k9kJTRHzieVUKtUJcCU58vrFuecAYruUDN3npMtxG8E=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 28 Aug 2026 00:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5b:67:b1:3e:59:2c:84:8b:83:a8:17:8a:93:23:d5:e4:45:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Aug 24 00:04:41 2026 GMT
Not After : Aug 28 00:04:41 2026 GMT
Subject: serialNumber=80af964370d40d55aae300de0246dc87fd94d716fec21e79499713777581b9d0, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:8d:4e:3b:36:78:b1:e1:11:d1:f2:c6:d5:
96:4d:8f:fe:b0:2e:36:72:34:65:32:fd:94:bb:a2:
bb:9f:d1:69:fc:df:8c:2a:d5:10:43:d6:e6:ae:3c:
44:a3:68:ae:bd:44:9a:09:d7:9a:ce:0a:84:a8:e3:
e2:d4:5d:d3:70:04:f7:ca:15:7c:ab:1d:80:49:b4:
63:85:ac:7f:e5:0b:f9:1b:a2:0b:fb:df:73:9b:ea:
af:45:24:9b:f8:77:4e:6e:7c:86:23:fd:95:53:48:
43:75:11:25:ed:c4:25:40:49:8f:72:50:31:00:22:
d0:cd:c9:25:f5:dc:8e:e7:88:72:d7:c1:44:9f:59:
cc:dd:ec:64:18:37:a3:b2:e6:2d:9c:3e:5e:3e:80:
11:2a:94:96:82:ce:33:36:ee:8b:7a:a5:3c:18:e9:
66:b9:18:c6:d1:f1:ce:16:13:98:96:a7:68:e0:a7:
a2:85:e5:bb:f1:3f:d4:ff:65:e6:ef:64:2f:47:0e:
87:1b:f7:f9:7f:31:31:cc:64:c2:75:34:3a:12:50:
00:d5:49:8d:17:9c:ae:2e:67:b1:3a:49:5c:97:23:
c2:74:32:66:1d:3b:56:cc:4f:ab:5c:ce:45:d6:ff:
2b:ed:5f:ad:ec:94:0f:d1:3f:9a:0d:5f:3e:ce:e9:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:FC:47:85:EA:A4:10:88:63:87:F0:7C:28:9A:80:DD:50:B7:78
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3e:7e:c8:f8:b6:f2:83:40:1c:e3:0f:57:82:10:24:fe:e4:
54:76:4c:4f:14:6e:8f:bf:8a:3a:14:97:5c:13:d6:f1:d0:4c:
ff:eb:6c:3d:01:5c:bc:20:d3:df:ae:ce:fe:ba:80:1d:5f:5a:
fd:9d:aa:79:b6:06:7f:f3:49:85:25:72:1c:6e:0b:ec:1f:e1:
ee:84:31:01:cf:27:9e:d8:d0:56:23:c1:9b:6a:40:4c:8f:6f:
e4:78:cc:81:0b:46:75:16:a9:a8:6d:21:66:ea:8a:58:fe:ed:
e4:ca:cb:9e:d7:ae:68:d9:53:76:3e:1f:f5:1d:1f:56:8d:40:
0d:b3:c8:0a:fd:d3:6b:46:4b:e7:0e:30:6c:69:00:64:23:07:
ce:aa:a5:44:a1:2a:8c:de:00:a9:b7:f6:ba:03:7c:e7:74:3d:
15:0a:bd:5f:c2:b4:47:cd:cf:4a:4d:f6:6d:46:9c:fc:f3:c4:
99:ac:8a:80:84:b0:48:f9:fb:38:63:0b:65:c4:f3:c0:aa:10:
7d:6e:13:3c:c8:d2:be:3d:82:ed:99:fa:59:95:d3:5e:de:a5:
ab:37:4f:52:5f:77:e7:d7:31:75:78:09:dc:bf:40:14:59:f4:
ea:9c:09:bf:34:86:2c:16:0e:ca:37:63:82:18:21:f6:df:e3:
db:0a:92:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 18:20:59 2026 by rpki-client