Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          KBBxn4xQ5vgFN8/BtTmTscB7QjW0Oyfw2o2LuCcyB5M=
Subject key identifier:   49:F8:03:32:02:F6:42:E1:BC:DD:E3:7F:E4:31:00:63:8C:43:C1:BD
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       2CE6782095F0A7A28CF1E2F614D1010DF6CE69BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          056B
Signing time:             Mon 23 Feb 2026 00:00:06 +0000
Manifest this update:     Mon 23 Feb 2026 00:00:06 +0000
Manifest next update:     Fri 27 Feb 2026 00:00:06 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: MBCm/wpjWTCynLBAAXlhwqpHi+4pATpa9VJ7w3ENyd0=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: W5s2+KsThmK2t/kTEoDyc0qk5t8nWR8Vcr0OHIME7gY=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: IWScRmTGngy/TAE4BM/N+FmYb0Macj0ST80vr4/O2eY=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: CNy33lvFVRD+mSD8JJeY7w+m3uy4j1Q7IRyDV4kVRuc=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 55JqWeNnPUgIMiCbIulJEhJREuoglf7zd0Hdhdnk7JI=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: nX53gsp63aFe1Zk0fvuz7gf9dNGw1Q0a6vNdlF04HMM=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: n1kg4tDD9KCpPUv6L5rqRkioae0zUB8A2YrnCFiHVJ0=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: rgmgKkFA/1ZuGJ4QRcU97a/WiPe2lq2P1GX24tqN91U=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: DuZi0/kBsFkmGULcNt4xmJZ4I8aFDcP0+xR9g1RHy40=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: N/cY7SofU7BQTjSpADixy6DLuAFs/nCWf8HWg3e5lnI=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: zVg+chZsOqM0G5PhFIXsidezF7tDS/5injSaQlsHP78=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: NlFUv6dJwsR3RjMmUp1VN/OlvhJ1TaIgnS+8Z9Ov1Us=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: iHgVMCQkVpqqh3egN8945TcYU7izcrnduLWWQD583q4=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: kOpfYh9nuQ7s0H/UIYwh+6amJBF7Bcdr+fTO2DNuSiA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e6:78:20:95:f0:a7:a2:8c:f1:e2:f6:14:d1:01:0d:f6:ce:69:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Feb 23 00:00:06 2026 GMT
            Not After : Feb 27 00:00:06 2026 GMT
        Subject: serialNumber=8ff789f861718c497570461a5df80b967eca5e6ad21800aa513e1f56c5f3825c, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d2:49:31:80:f9:c7:ce:ee:e6:ac:74:9b:eb:
                    f1:85:99:ed:26:08:41:91:50:31:97:05:eb:d6:64:
                    6e:53:84:b1:3f:72:0d:3e:26:54:ac:d1:b1:73:f2:
                    3d:26:e7:7a:18:f9:28:d3:14:d9:09:85:97:1f:75:
                    f4:58:40:5d:36:0b:b2:29:f1:87:08:ed:40:aa:4e:
                    38:c0:0d:70:67:0e:fb:b3:32:92:e3:f4:b9:b7:86:
                    2e:3a:08:bf:f3:32:84:66:47:3a:46:64:11:41:e5:
                    d3:58:38:21:a9:65:5a:ca:a3:6c:f7:ba:62:b2:e0:
                    7c:0b:cb:81:82:27:e3:22:5f:d7:fc:70:92:0b:ef:
                    5b:43:93:85:e8:bc:6e:94:78:1c:59:f8:86:36:3f:
                    a0:d3:0e:05:f8:62:55:39:d3:29:83:39:cc:17:ba:
                    62:c3:b5:d0:4c:26:37:f2:a8:62:75:c0:97:99:35:
                    29:f4:b5:24:89:91:f9:85:b9:4f:8a:5e:ec:8c:a0:
                    45:cc:56:b6:a4:d0:91:61:94:a3:05:b1:b9:da:b8:
                    04:d0:08:ec:ac:77:e1:11:c3:8f:0d:f9:d6:75:a1:
                    0d:88:90:0a:d6:2d:69:a1:40:2d:f7:65:96:b6:8e:
                    06:ad:33:2f:ff:97:d0:21:e3:65:06:d4:1d:1a:0c:
                    8f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F8:03:32:02:F6:42:E1:BC:DD:E3:7F:E4:31:00:63:8C:43:C1:BD
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:26:24:f2:66:cc:ab:b5:9b:7b:9c:09:98:d1:70:64:6d:7f:
         7a:20:4f:c7:24:71:ae:78:48:97:19:f1:1b:16:41:36:38:89:
         ee:a4:0e:e3:ac:df:89:fe:08:73:04:17:7a:e6:d2:7c:77:c0:
         dc:b3:5b:a0:20:0c:33:4d:11:4b:39:34:4d:08:bf:b6:3d:46:
         33:a5:72:a7:49:cc:ad:8d:dc:b5:43:54:03:1c:df:68:87:a7:
         6a:03:b8:04:dc:ac:96:38:6f:c4:49:8e:aa:64:57:db:60:b2:
         e1:c1:d3:c9:50:8c:a4:1b:ac:d7:ad:c1:86:51:33:c5:49:30:
         b3:cd:9e:72:80:7f:41:89:39:98:b9:62:4e:d0:de:e8:0d:a0:
         47:37:ec:f0:ee:33:b6:04:43:30:cb:03:16:19:45:f4:8c:28:
         17:4c:69:c6:20:36:d9:cc:47:2e:4e:e1:69:61:15:a1:b8:dd:
         0d:b2:0e:11:4f:a9:24:14:14:dc:82:4c:ca:b4:a9:39:90:1a:
         f9:15:62:56:78:0a:b0:85:3f:16:ad:9c:9d:21:94:78:41:74:
         eb:18:50:36:13:77:4f:ad:2b:65:2a:d8:a4:7a:bc:a8:5d:da:
         3f:a7:7f:77:3a:e2:1b:e4:de:a6:a0:42:6b:0f:f2:4b:d3:c0:
         6d:d7:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 00:44:21 2026 by rpki-client