
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 0uu8ZXrhjQ6x5e7BCtpH3mZAbo1umYviZIq4EGN5z7g=
Subject key identifier: 8D:80:32:4C:ED:5E:65:A6:53:38:AF:71:AC:DE:36:F0:3C:A7:6C:1A
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 15B5A5B4795C901C90BE76AD081CF4B2C31B9A60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0640
Signing time: Mon 21 Sep 2026 00:09:47 +0000
Manifest this update: Mon 21 Sep 2026 00:09:47 +0000
Manifest next update: Fri 25 Sep 2026 00:09:47 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: XI0YO8PQJNo5y/8VL5CIBjJFoAiW+UwJPxLoFNYY0Fg=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: r73l4iNZMafNXfC80CSyJoUcdCuZUcqJ+6+FN5X3XBo=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: rDQw2NlaITAzyDgBs7YI0l4weL1704mjzjFsg+xw0kE=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: k9kJTRHzieVUKtUJcCU58vrFuecAYruUDN3npMtxG8E=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 00:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b5:a5:b4:79:5c:90:1c:90:be:76:ad:08:1c:f4:b2:c3:1b:9a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Sep 21 00:09:47 2026 GMT
Not After : Sep 25 00:09:47 2026 GMT
Subject: serialNumber=a283e283a21485fd0b84d138703700ec739bc900f4886a365dc8176a69520e02, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:5b:b8:b3:df:2e:84:a0:9a:bc:19:84:99:
48:bc:21:bd:83:6d:74:16:c2:ec:fb:43:54:70:b1:
2e:0b:77:dc:81:20:17:b2:1f:51:48:67:c5:bb:96:
60:40:d6:33:7c:65:a3:da:f2:94:28:e3:74:aa:6d:
3e:1e:58:82:b3:42:0b:8b:4e:25:51:60:c3:d0:5d:
59:53:fe:66:e2:9b:fd:14:bc:02:da:63:c6:a9:26:
c1:50:5a:e6:db:ae:fe:f9:b1:db:e2:6d:77:85:ec:
af:96:40:7f:38:35:c9:4d:b9:65:7f:a9:95:b1:7c:
48:74:84:7f:be:86:9c:65:e9:83:d4:f7:9a:38:bc:
70:24:71:d1:20:10:65:32:32:64:17:13:78:25:4e:
29:a5:f4:ec:28:58:a4:00:a1:bc:a7:b1:31:85:2e:
60:e1:79:27:cd:b9:24:6b:e0:4a:3e:89:1e:6b:a2:
5a:bc:34:45:fc:93:33:7c:4b:ac:cb:0e:75:fe:1f:
ca:28:18:94:6c:35:6e:36:35:43:f6:43:e4:d2:cc:
69:f4:e6:5c:5f:45:02:0a:88:61:a3:56:e7:1d:82:
fb:92:02:d8:2f:97:2b:85:fb:00:84:bb:cb:d7:5a:
8f:d8:a8:78:c0:b4:e2:03:0f:08:9d:d3:d4:92:83:
b5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:32:4C:ED:5E:65:A6:53:38:AF:71:AC:DE:36:F0:3C:A7:6C:1A
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f6:16:c8:68:68:86:c1:22:92:6e:9c:18:88:0e:b0:b4:e5:8b:
d5:b2:8a:54:12:da:fc:cd:48:c8:83:a1:9d:79:a8:8f:df:21:
ff:91:96:c5:e6:16:ed:cf:59:66:9d:37:7a:75:62:89:f4:fb:
e1:e4:86:cf:03:39:0f:dc:8b:dc:ce:95:b9:64:64:6f:af:68:
30:c0:15:ae:00:cf:fc:e4:97:5d:7c:e7:4a:6c:d8:d6:71:2e:
be:bf:df:d4:cc:58:b2:03:65:86:8a:9a:a0:f9:a5:56:e9:cc:
04:95:02:c4:4b:65:3c:9b:f6:59:ba:19:c9:75:85:09:8c:ef:
94:35:a2:e5:0a:00:bf:5b:47:c7:03:ac:3e:e0:cc:15:09:59:
46:91:bf:d7:7b:c1:60:4b:2e:a1:76:34:2b:2a:e3:29:14:53:
6d:cd:68:27:31:34:b8:47:91:62:e8:42:d9:3d:30:d8:66:b5:
ff:c1:66:b4:66:8f:f7:d7:6c:75:3a:11:76:c1:ce:99:82:fe:
b8:41:dd:d1:94:e6:46:24:2b:64:9c:26:5a:b2:03:59:0c:c1:
7d:1e:46:41:f9:cd:cd:d2:b5:5f:8c:88:9f:10:52:77:ea:99:
14:d7:6d:33:cd:ce:5b:61:9d:47:22:eb:b7:ad:66:cf:b0:1b:
8e:f2:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:11:40 2026 by rpki-client