
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 4TGyqHnk5D8ZIJ5b6XjUP1tsOHEUsSsX3OTio4nk8Yc=
Subject key identifier: 71:73:C3:2C:E7:4B:00:A3:BE:B9:77:D0:10:21:A1:A1:0E:A5:7E:22
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 57F8A7400683486AE7AAA4A8698E487F5B92AE67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05A3
Signing time: Sun 19 Apr 2026 00:12:45 +0000
Manifest this update: Sun 19 Apr 2026 00:12:45 +0000
Manifest next update: Thu 23 Apr 2026 00:12:45 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: 0e0o/tkj5uh6jJbrl8YvGeNAneNpldaUPLcDYFgyoBI=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 1l+gLwyU/H4HNaQ0uYL3F1eW99PrBxN74OxZSMVTb64=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: cBXtNI3VbGLGZEDX6FlUDTPJNJ35d5uKk0qGRhvviKM=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: Twa6OvLBJ5r+OhaQBu3auEpybOLrFowc3lKgUxxm0bY=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: n8mdK97d/Vw0NB0uqE1Lu/NAcKYHksxdIYeyBefJ5e0=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: VNTjv8zj56XPQscVA1nVjmEH4qZHD6SH0x107VrlxlE=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: uyHF6RDXBqu8/m5/rxS9tqyNKt4hFLLacYUMWBiJ3LY=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: zmCV/d5bpLoSS+zvApJ7r/z/pnc55m95Bh5MUhoeQPU=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 46SkQknDcBfOGQwbNRfMD6C/4bRPxr72VMFVTNETTU8=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: iNY6C3I93M/b88ycFa4wj9iSAtZRjCOVsp9Gf/bWmT8=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: pklnbVub/fuu34AybFXOGT+PdGgA5UEdWQ9SFNOmiw4=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: doGDeV/JZpETUW2CE9tY+Z4Pwxu5xmhr4Vl+a0gqJU8=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: zZSdfeX8NNWn6l7ff8TltCcHKYzcM1IAhXvaT99erpc=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: SbC+1TuCvU+jX8YVK+7obHcSTkPpgYNWlTlRRoFqGKo=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 6SXvrQCVtJ9I7yKXy5cpiG6IXfqjfmiQZzvT8SNuDyE=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: ZLXxMwM4vDfoBdxGaRhMGTm+FfO6E/g3I0EGSRmBbYY=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: fB2mXgwfTDMHGU9TN7w89E4Dzg6sh/SSFtPBROFGSJg=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: +2Ox8MRpSKcyTvXMAxijBxiUi8rZJNCBj7CY+0WEQd4=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: EbVvusiwIRiiG6aIZrh85ZC5dtWbNE/O92xrlXFEtg0=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 00:12:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f8:a7:40:06:83:48:6a:e7:aa:a4:a8:69:8e:48:7f:5b:92:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Apr 19 00:12:45 2026 GMT
Not After : Apr 23 00:12:45 2026 GMT
Subject: serialNumber=c3efd4ac257b7a5045d350a9421631e471388d949b72c8691b110ae3f1dde8de, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:51:43:9f:ec:42:ff:6e:83:3e:f2:2e:84:1c:
d9:43:91:64:25:16:2c:3f:07:34:30:97:19:b9:83:
70:63:57:5a:02:3f:12:16:24:93:da:d6:09:a2:40:
40:fc:fd:75:9f:7a:06:81:ad:79:8e:89:21:35:42:
af:69:f1:a1:c0:11:46:fb:82:b7:b7:0a:3a:9f:41:
ff:b0:aa:da:b4:37:01:1f:ae:41:01:76:fb:c8:1c:
6c:e7:00:0a:7a:bb:fa:39:34:7c:fa:90:e5:5a:b2:
dc:8b:9d:c5:f4:43:ac:b2:13:54:a6:58:1d:6a:d8:
e0:fb:e6:9b:c5:6e:d9:f5:69:14:5f:20:5a:14:1c:
25:bf:2d:cf:24:55:7d:5f:5d:f3:b5:28:8f:38:58:
35:1d:b2:05:ca:b4:e6:ca:15:94:86:59:63:45:7b:
bc:16:b4:50:93:41:66:60:02:ca:ae:f3:16:d4:f9:
3f:14:ee:87:7d:20:94:f9:d5:97:0f:98:80:86:84:
20:de:91:9e:37:76:c0:5a:6a:78:e8:23:d4:f9:35:
3d:7b:f8:3f:a1:fd:24:7c:9b:c8:08:6c:9a:4a:45:
f8:df:a6:17:5a:bf:56:ab:f3:2e:09:c6:5e:a8:46:
b4:81:73:a2:0f:f0:f5:eb:ba:b7:dd:de:b9:3f:38:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:73:C3:2C:E7:4B:00:A3:BE:B9:77:D0:10:21:A1:A1:0E:A5:7E:22
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b9:e7:59:f7:01:c8:e3:da:5c:07:f9:c8:7a:52:37:7a:d1:
2b:e1:f4:9d:eb:e7:26:5a:83:36:c1:11:ed:b5:2d:4e:89:25:
95:2e:63:34:04:b2:96:fe:69:39:f4:60:1d:c6:2f:d1:c4:c2:
7c:ff:e5:c4:50:ba:cc:d0:b2:2f:82:dd:37:c5:30:b4:bf:f5:
bc:fc:9c:05:50:99:36:35:6a:b6:8d:10:2f:d4:18:c4:c8:11:
49:eb:de:24:df:1a:c5:50:b1:6d:37:aa:da:95:45:6e:c5:98:
d9:9a:c0:96:65:11:26:bf:58:ad:c1:ed:8a:fc:7c:c7:22:d9:
9d:02:70:bb:ef:6c:ca:52:b0:34:93:1f:11:8d:51:f8:29:db:
71:5b:d6:a8:7e:c2:fe:2e:7c:f2:0f:f8:20:24:41:02:c9:11:
89:ba:9b:50:ec:de:25:e6:71:33:89:c2:37:b3:b3:27:25:e4:
e7:2c:3e:23:29:d6:e0:22:f8:3c:08:f1:8d:74:19:f8:1a:50:
f9:69:0b:24:cd:94:ec:b1:d3:35:f5:2f:80:2f:b9:ea:f4:37:
18:a9:d9:3f:28:26:24:c4:24:49:ff:33:25:a7:b7:56:64:0c:
32:0d:75:b4:bd:73:d4:1d:b3:95:a4:e5:b0:ef:e1:17:8d:75:
67:37:f2:a2
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUV/inQAaDSGrnqqSoaY5If1uSrmcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI2MDQxOTAwMTI0NVoX
DTI2MDQyMzAwMTI0NVowejFJMEcGA1UEBRNAYzNlZmQ0YWMyNTdiN2E1MDQ1ZDM1
MGE5NDIxNjMxZTQ3MTM4OGQ5NDliNzJjODY5MWIxMTBhZTNmMWRkZThkZTEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFFDn+xC/26DPvIuhBzZQ5FkJRYs
Pwc0MJcZuYNwY1daAj8SFiST2tYJokBA/P11n3oGga15jokhNUKvafGhwBFG+4K3
two6n0H/sKratDcBH65BAXb7yBxs5wAKerv6OTR8+pDlWrLci53F9EOsshNUplgd
atjg++abxW7Z9WkUXyBaFBwlvy3PJFV9X13ztSiPOFg1HbIFyrTmyhWUhlljRXu8
FrRQk0FmYALKrvMW1Pk/FO6HfSCU+dWXD5iAhoQg3pGeN3bAWmp46CPU+TU9e/g/
of0kfJvICGyaSkX436YXWr9Wq/MuCcZeqEa0gXOiD/D167q33d65Pzgi9wIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFHFzwyznSwCjvrl30BAhoaEOpX4iMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHO551n3Acjj2lwH+ch6Ujd60Svh9J3r
5yZagzbBEe21LU6JJZUuYzQEspb+aTn0YB3GL9HEwnz/5cRQuszQsi+C3TfFMLS/
9bz8nAVQmTY1araNEC/UGMTIEUnr3iTfGsVQsW03qtqVRW7FmNmawJZlESa/WK3B
7Yr8fMci2Z0CcLvvbMpSsDSTHxGNUfgp23Fb1qh+wv4ufPIP+CAkQQLJEYm6m1Ds
3iXmcTOJwjezsycl5OcsPiMp1uAi+DwI8Y10GfgaUPlpCyTNlOyx0zX1L4Avuer0
Nxip2T8oJiTEJEn/MyWnt1ZkDDINdbS9c9Qds5Wk5bDv4ReNdWc38qI=
-----END CERTIFICATE-----
Generated at Mon Apr 20 01:07:49 2026 by rpki-client