Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          qVU0odijYg3c/VejA8UlBdZCqZCFAFDEsGI84BlUWDA=
Subject key identifier:   0C:8E:19:33:CB:A7:BA:B7:73:8E:3A:CA:19:60:32:D5:32:CF:AC:38
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       73B9596A8EB4FE3CE09CB9AEDFDAD9AF92267C58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          0607
Signing time:             Mon 27 Jul 2026 00:03:09 +0000
Manifest this update:     Mon 27 Jul 2026 00:03:09 +0000
Manifest next update:     Fri 31 Jul 2026 00:03:09 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 9noVsp+SlXMaVtRYLZ2UsgHXOR8yBZrfK7uKc6w2RU0=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: LWW7G4vSgrTVoC49iuj/jpZ5T5IkSgMBRFaAY/6AWUQ=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: AOkOTFpxItedQjG2l73x63Rqi05iOCSy8Hyd2aGXElk=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: 8F7U3HuBEHAbZxeotbZdxHhB0w+z61KRGEVZWZ1NOPA=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Wr+c6Q1I10v8ZDHa1kskBEdqqsWESS2cYOTf7oQrhuo=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 1t03EChjZYkK077vk6ZH3a5qPnl5WndlNpd+mVGJaPM=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: SekGmHDfoGXj5vE4Zm57ePrlctkbgwVHEgjShmndD3o=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: NMamOf9rJQLEFcxePu5jji6CzEB+kU961XK/hVBXFrA=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: 56ohyAlTtw3nDjDnI6PeLZ9qx5aGxhIqza4yGFF5fkk=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: sgve8SNnpJRICXi56BMuftrBFNrW8ZCffoMP5NfnWZg=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: e7DgUMtp6AoSqdNYLBl9ON3HVwaVdFMx/vALGOr1yFY=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: MUN3E1NLiG+U9TN+LvMQxVmbYWbeCf+Yz3FFqM07XUk=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: aWTrNq1G+utWB6tkA4hz4DH0ZMMJfiIsmt+vshKxw30=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: mmDjTVF7uC6IcLTQiEaOr33xzbFkcnbXUdIc6xa3iKs=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: NBLGSURJiomLlOLBraVQVdoTSr6bS+7HxfARclWtYgE=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: KpdoMD0r6LzGsIFEnqxHdIGwAQfhLRI49qdtI7ZZKXk=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: rDQw2NlaITAzyDgBs7YI0l4weL1704mjzjFsg+xw0kE=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: eemEEY86nS8bPyiVDFi6ZCQhg151yZIJ5Mn0I+PMcdc=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: Hi54Gbhw3DEMbkLoHk2FXWg76N5z+6Fx0yPf7AZ7FXk=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: k9kJTRHzieVUKtUJcCU58vrFuecAYruUDN3npMtxG8E=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 00:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:b9:59:6a:8e:b4:fe:3c:e0:9c:b9:ae:df:da:d9:af:92:26:7c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Jul 27 00:03:09 2026 GMT
            Not After : Jul 31 00:03:09 2026 GMT
        Subject: serialNumber=29c1ee2f9195e49f28a4e7fcebc14045b83a31819b8f07590e2ad27fff8cd411, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:f1:8b:e1:36:6d:58:12:a5:89:b1:1f:84:
                    ca:49:c6:0f:12:36:19:3d:e8:92:6b:cc:99:d6:60:
                    85:9c:d6:3b:51:32:73:b7:5d:a3:23:4a:60:e4:77:
                    96:91:32:46:f9:bf:c0:c1:db:53:66:b2:e7:3f:81:
                    74:45:77:a5:42:c4:8b:cf:03:90:3b:49:4b:15:42:
                    d6:4d:69:97:ec:ff:2a:17:dc:de:df:92:3c:1f:80:
                    6d:f6:da:01:95:6d:86:dc:7b:89:f9:b9:44:0e:a5:
                    77:f0:6e:a9:ce:e3:54:9b:31:64:1a:f6:5f:fe:9a:
                    cf:c9:17:68:94:8c:96:c4:ec:06:e0:3e:76:cb:da:
                    66:39:71:66:eb:b5:ab:e6:39:a9:83:68:83:8e:6b:
                    1e:42:5d:49:47:7e:b7:9d:a5:e7:c2:e1:0e:99:4b:
                    4a:36:b7:ae:f6:e5:89:f7:49:86:ab:6d:a7:60:bb:
                    d1:ec:35:0b:dd:a6:76:02:4a:be:4f:46:bd:e7:8d:
                    fb:87:3e:b2:62:76:64:6f:4a:78:61:d5:12:df:15:
                    da:d2:20:36:a5:18:2f:9e:98:18:c0:48:d3:a1:5e:
                    d4:f5:b7:11:fd:56:1c:fd:b5:63:d2:6b:2a:cc:7d:
                    09:ed:27:7a:2b:28:b1:28:b3:95:a7:70:19:08:43:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:19:33:CB:A7:BA:B7:73:8E:3A:CA:19:60:32:D5:32:CF:AC:38
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:df:7f:14:fe:6b:8b:3a:5f:74:2c:3d:ac:5f:75:7a:c9:c2:
         6f:98:89:fa:cf:6b:ae:0e:2f:38:ff:b1:7b:09:4e:87:c5:a9:
         86:47:58:4d:26:41:8d:c9:fc:a3:9c:a1:e5:20:42:1c:b0:69:
         ac:f2:6f:a4:f0:d6:fb:9a:33:9f:c1:21:67:43:c9:e2:e4:d0:
         05:15:98:4c:03:f0:cf:e0:f0:78:11:15:d2:f9:68:46:aa:69:
         92:b6:c2:ad:ad:07:ba:73:01:93:c5:ef:1b:8a:55:6b:df:8a:
         14:8e:ea:2b:72:75:37:9c:56:99:03:d7:cb:f8:7f:30:d4:4d:
         19:cf:eb:58:7d:ac:26:bd:13:7b:38:60:00:67:80:12:fc:5e:
         ea:63:40:67:e0:6a:91:20:dd:38:cc:ef:c5:3c:9e:4a:cf:fd:
         38:10:34:81:93:b8:9f:96:50:e1:60:e4:18:8d:25:87:76:44:
         00:ec:0f:f3:ec:42:ab:67:9f:4e:c8:e0:61:00:a3:95:c2:c3:
         7f:25:cc:00:f4:80:22:eb:66:ae:02:43:3d:44:7b:48:87:82:
         46:4a:9c:9f:d3:b5:3a:db:6a:ea:09:cb:f2:7d:83:1a:b0:10:
         b5:ed:a3:5d:ab:c5:5e:0b:79:76:15:1a:9a:e6:af:06:e7:79:
         e8:e8:d2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:54:37 2026 by rpki-client