
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: eI1KTuxATYnn2b3RR08vTsndxj4OqSrrs2nzVIlH5EM=
Subject key identifier: 06:C2:C2:22:A2:05:B7:55:C7:F8:65:D6:00:6F:BA:82:76:B3:BB:16
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 2CC219FF6B1CDD242053595A952328442AA6178A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05CF
Signing time: Mon 01 Jun 2026 00:04:13 +0000
Manifest this update: Mon 01 Jun 2026 00:04:13 +0000
Manifest next update: Fri 05 Jun 2026 00:04:13 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 9noVsp+SlXMaVtRYLZ2UsgHXOR8yBZrfK7uKc6w2RU0=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: LWW7G4vSgrTVoC49iuj/jpZ5T5IkSgMBRFaAY/6AWUQ=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: nQFFWGYu0gMeq41JL4LntAsJDpqUTYk9FqH4zY2lCik=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: 8F7U3HuBEHAbZxeotbZdxHhB0w+z61KRGEVZWZ1NOPA=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Wr+c6Q1I10v8ZDHa1kskBEdqqsWESS2cYOTf7oQrhuo=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 1t03EChjZYkK077vk6ZH3a5qPnl5WndlNpd+mVGJaPM=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: SekGmHDfoGXj5vE4Zm57ePrlctkbgwVHEgjShmndD3o=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: NMamOf9rJQLEFcxePu5jji6CzEB+kU961XK/hVBXFrA=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: 56ohyAlTtw3nDjDnI6PeLZ9qx5aGxhIqza4yGFF5fkk=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: sgve8SNnpJRICXi56BMuftrBFNrW8ZCffoMP5NfnWZg=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: e7DgUMtp6AoSqdNYLBl9ON3HVwaVdFMx/vALGOr1yFY=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: MUN3E1NLiG+U9TN+LvMQxVmbYWbeCf+Yz3FFqM07XUk=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: aWTrNq1G+utWB6tkA4hz4DH0ZMMJfiIsmt+vshKxw30=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: mmDjTVF7uC6IcLTQiEaOr33xzbFkcnbXUdIc6xa3iKs=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: NBLGSURJiomLlOLBraVQVdoTSr6bS+7HxfARclWtYgE=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: KpdoMD0r6LzGsIFEnqxHdIGwAQfhLRI49qdtI7ZZKXk=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: eemEEY86nS8bPyiVDFi6ZCQhg151yZIJ5Mn0I+PMcdc=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: Hi54Gbhw3DEMbkLoHk2FXWg76N5z+6Fx0yPf7AZ7FXk=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 00:04:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:c2:19:ff:6b:1c:dd:24:20:53:59:5a:95:23:28:44:2a:a6:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Jun 1 00:04:13 2026 GMT
Not After : Jun 5 00:04:13 2026 GMT
Subject: serialNumber=dbf333b59e58932977de9d1ab3a514a97d2f4cea35f275bc0d13d3e7ac5a6a79, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:ec:1a:46:bd:92:c1:b4:ce:90:73:26:5b:
f4:f6:25:5f:90:e2:7a:10:ba:85:ac:74:7a:dd:35:
eb:1c:62:b1:75:16:18:d6:ab:cc:f0:79:e2:9b:cc:
70:54:5c:20:82:ca:17:de:74:5b:48:41:4a:03:1f:
3e:c1:92:46:8a:c2:ba:29:57:4e:ac:92:6a:29:b7:
d5:ce:db:53:c2:1a:2d:23:91:2d:b1:33:f6:25:36:
cc:16:09:98:f3:8d:1d:db:9b:71:29:0e:cd:47:af:
21:28:10:52:9e:4c:81:1e:f3:8b:d1:4b:3e:eb:d7:
f7:dc:c4:9c:99:f6:2a:08:ea:c3:3c:a5:bc:2c:27:
e4:f2:8b:18:e8:d5:23:b7:02:e6:43:9b:d4:a0:20:
18:2a:9d:da:75:26:34:46:2f:52:39:cf:6b:a3:fc:
26:3b:81:40:e6:66:be:26:db:00:fb:0b:c1:cd:3d:
15:43:32:33:bb:33:e9:1b:07:11:f1:3f:2f:2b:2c:
70:aa:c1:1c:1a:96:02:48:ae:f3:e3:11:bc:0c:9a:
a7:a5:e4:04:22:78:19:c9:14:59:fc:de:20:da:fc:
f5:9f:27:63:11:92:4c:0e:28:c1:9c:4f:d9:05:c0:
52:36:d6:a8:15:3c:0e:93:d7:91:fa:22:d9:f1:28:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C2:C2:22:A2:05:B7:55:C7:F8:65:D6:00:6F:BA:82:76:B3:BB:16
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:de:b3:58:69:4e:53:e0:49:e0:af:73:c5:7d:93:23:79:54:
c6:5b:3e:dd:ed:68:59:45:bd:bd:55:48:44:9a:18:82:aa:f1:
5c:26:d5:08:fe:82:43:8a:ea:e7:b1:6a:91:d3:93:fc:72:67:
2e:bb:06:9c:50:9e:29:0d:e0:88:60:e9:fd:2b:42:a1:35:d0:
e4:99:27:5d:3e:70:cb:8c:a6:b9:2a:eb:67:14:30:a5:da:93:
66:fd:53:b6:98:07:a1:0d:7c:c5:98:f3:b4:c4:e8:f6:ec:de:
1a:d1:81:a1:be:cf:f2:73:ab:5e:8b:79:b2:51:8c:0c:1f:2e:
c4:5d:d8:74:e7:cd:3c:bd:0f:2f:52:c9:5a:f9:c9:d2:78:f6:
66:a5:26:ee:89:ab:6b:0b:bf:fa:cd:be:b6:e8:a6:b3:69:56:
af:be:8f:79:9d:ad:47:be:a0:75:bc:32:6f:27:8f:a7:dc:d2:
f3:5d:be:8a:c2:0e:2f:d7:65:6f:36:90:0c:ff:03:d2:fe:44:
ed:a2:9d:80:79:23:d4:9e:8f:e9:7c:18:7d:5e:73:50:55:b5:
c2:77:b3:05:8b:cf:61:3e:8d:a7:b1:a1:22:4c:1c:26:f5:7e:
72:ab:d3:d3:36:52:fa:6a:e2:7d:15:1c:61:f3:23:ae:6c:ae:
36:34:56:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 05:49:13 2026 by rpki-client