
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: er+xl9jY/56RXqn6eQQAQ1bw+JpoUj+/0WwQKWmSdnU=
Subject key identifier: F1:95:29:B1:30:54:3B:9B:5E:96:38:8F:D9:FD:9B:7B:9A:A9:B2:F9
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 5DF7B2D459E07AC9CCB400E984CE91CEA95F551C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0650
Signing time: Wed 07 Oct 2026 00:00:41 +0000
Manifest this update: Wed 07 Oct 2026 00:00:41 +0000
Manifest next update: Sun 11 Oct 2026 00:00:41 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 5fPAATqFzYXMyfSHindoMtrUh7SYx2yvH9VtxTnxuHg=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: r73l4iNZMafNXfC80CSyJoUcdCuZUcqJ+6+FN5X3XBo=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: +ugoeW2aHUE1wrHqoRYbCRE9DM5hBHnRChNFGKznhmo=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: UzPB51oYtAUm/8DkRY3gj1W4BpUt2oKlqQuyel4fjA8=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f7:b2:d4:59:e0:7a:c9:cc:b4:00:e9:84:ce:91:ce:a9:5f:55:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Oct 7 00:00:41 2026 GMT
Not After : Oct 11 00:00:41 2026 GMT
Subject: serialNumber=d9da2d1adac1f2f2000e9c968f42b208c5e0c4c4999c5be3a368495294fdb0fa, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:a7:d7:c5:e7:7c:78:ac:b7:3e:14:e5:c3:
bb:77:b6:dd:91:f9:48:12:0d:a3:29:73:74:15:1a:
07:4d:f3:b8:7a:cb:dc:d9:0b:db:64:da:6f:3f:50:
2f:ab:e8:a9:9a:d0:e3:2f:53:d3:a9:e2:37:f8:aa:
0e:b4:e4:67:a5:d3:77:3d:b8:43:e2:bb:f0:8d:92:
dc:9a:d5:08:1f:0b:cc:9a:53:60:ee:48:14:06:d9:
5d:da:f9:77:52:f3:70:34:d1:c1:7b:5c:45:2d:fc:
33:e3:00:9d:92:7d:96:9a:d7:ab:f5:f1:54:91:f4:
ab:68:c1:ae:38:12:66:28:3b:93:62:cc:d4:41:32:
b0:87:1d:58:b9:db:04:ee:56:3b:7c:84:27:77:69:
05:aa:ea:e2:b7:9c:a4:57:8d:f5:14:af:3c:28:b9:
e2:c8:f5:d9:55:9b:91:5c:36:54:a3:2c:78:b8:47:
0a:98:07:d8:46:8d:56:7a:bf:0d:a5:c4:32:77:dc:
1f:bf:47:8a:5f:f0:f9:cc:ce:b0:71:ec:36:6a:a0:
9f:a4:98:28:ff:c8:1c:04:12:be:f8:e5:f5:ca:1f:
eb:c7:0e:be:83:7b:b3:44:d5:a2:bb:00:52:96:f7:
b4:4c:c8:88:b6:4e:21:49:2d:95:ee:f9:b8:40:34:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:95:29:B1:30:54:3B:9B:5E:96:38:8F:D9:FD:9B:7B:9A:A9:B2:F9
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:20:43:17:76:07:8d:b8:2f:1e:0a:ae:05:d7:f6:9b:27:
3c:36:5e:6b:e4:4b:1e:5b:3e:e6:84:e1:1b:f6:90:04:a2:48:
d6:37:b3:bd:dc:bb:b7:b9:2f:03:3b:af:d2:24:14:bd:f1:d9:
61:a9:d5:db:3c:d6:ed:f7:f2:79:64:3b:fa:c7:43:41:1c:c0:
92:f7:d1:87:a8:c8:7d:63:95:2e:fc:4e:3f:37:bd:f3:37:1e:
10:11:70:63:df:69:95:cd:58:8f:c8:d5:38:d4:bd:d7:51:98:
c4:03:27:aa:2a:d5:55:2c:d9:a8:c0:21:c2:34:2b:76:39:c2:
e7:64:89:42:c7:df:43:a9:14:0d:30:1a:45:d9:40:28:13:4e:
45:c9:a3:34:b9:00:20:cb:dd:17:49:a7:7e:61:96:c3:e4:f4:
7f:19:47:b4:c9:3a:d9:c2:84:fd:bf:58:73:50:07:e2:dd:7d:
c7:d0:ed:71:24:08:3c:74:a0:54:d8:6c:a4:b7:c6:73:93:22:
91:e8:83:d9:2d:16:cd:be:ce:8f:db:e5:f2:73:80:d6:e6:70:
aa:e5:5b:f6:64:19:41:3c:66:85:f0:6a:33:72:53:ea:a7:b3:
4f:f0:78:91:fc:c8:ae:2d:13:f8:16:94:58:95:d4:07:90:da:
6c:90:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 23:13:23 2026 by rpki-client