
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: h8BlJMn/9bHhs2wPEkXzErPWG3JQ2bXRHvogQd2PBps=
Subject key identifier: F7:71:E1:D1:78:18:9B:57:91:F1:42:FB:84:98:22:C8:31:C2:AC:5A
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 0640E07A25415A3AA1764FEF13A9EB7F218D9015
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 05C1
Signing time: Mon 18 May 2026 00:01:30 +0000
Manifest this update: Mon 18 May 2026 00:01:30 +0000
Manifest next update: Fri 22 May 2026 00:01:30 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: ccwt1CBQMyS3892sZdcXMVVzywZdW2vC4hnvlBXhQmc=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: 9noVsp+SlXMaVtRYLZ2UsgHXOR8yBZrfK7uKc6w2RU0=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: LWW7G4vSgrTVoC49iuj/jpZ5T5IkSgMBRFaAY/6AWUQ=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: AsxQjgG+4IBBKiQ2WrHyK8UYgTES6BqGehpnT40y4uE=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: gWQW94UchMXKpAitMYpF39jPrIGeNpor2yQqW1vclFo=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: 8F7U3HuBEHAbZxeotbZdxHhB0w+z61KRGEVZWZ1NOPA=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Wr+c6Q1I10v8ZDHa1kskBEdqqsWESS2cYOTf7oQrhuo=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 1t03EChjZYkK077vk6ZH3a5qPnl5WndlNpd+mVGJaPM=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: SekGmHDfoGXj5vE4Zm57ePrlctkbgwVHEgjShmndD3o=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: NMamOf9rJQLEFcxePu5jji6CzEB+kU961XK/hVBXFrA=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: 56ohyAlTtw3nDjDnI6PeLZ9qx5aGxhIqza4yGFF5fkk=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: sgve8SNnpJRICXi56BMuftrBFNrW8ZCffoMP5NfnWZg=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: e7DgUMtp6AoSqdNYLBl9ON3HVwaVdFMx/vALGOr1yFY=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: MUN3E1NLiG+U9TN+LvMQxVmbYWbeCf+Yz3FFqM07XUk=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: aWTrNq1G+utWB6tkA4hz4DH0ZMMJfiIsmt+vshKxw30=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: mmDjTVF7uC6IcLTQiEaOr33xzbFkcnbXUdIc6xa3iKs=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: NBLGSURJiomLlOLBraVQVdoTSr6bS+7HxfARclWtYgE=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: KpdoMD0r6LzGsIFEnqxHdIGwAQfhLRI49qdtI7ZZKXk=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: kIQquhGVEcAvabpPXVXZt+As4t5sh2W4yCXCsbRhSVc=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: eemEEY86nS8bPyiVDFi6ZCQhg151yZIJ5Mn0I+PMcdc=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: Hi54Gbhw3DEMbkLoHk2FXWg76N5z+6Fx0yPf7AZ7FXk=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: yfq8iFfIcDeAU+un+cEPlZiZth6uF29SsXYSk1FGweo=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 22 May 2026 00:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:40:e0:7a:25:41:5a:3a:a1:76:4f:ef:13:a9:eb:7f:21:8d:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: May 18 00:01:30 2026 GMT
Not After : May 22 00:01:30 2026 GMT
Subject: serialNumber=8b2143ebe36713fd1d10b4dbeed7c8f74030260d7fd175b92125dd1516c76d08, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:4b:f4:f4:25:25:6b:3e:ac:3b:ff:e3:91:8f:
15:8e:96:e1:be:31:f3:eb:28:3d:c7:e1:26:35:d3:
de:c1:6c:7f:d1:84:50:95:8d:00:18:bd:f4:27:43:
7f:cd:db:b2:df:3c:b5:3f:40:80:a7:89:6e:2f:e6:
2c:06:bb:f3:42:dc:03:59:c5:3e:a3:c4:a3:83:dd:
5c:80:69:b9:cb:bd:9c:cf:d6:c9:8a:98:f8:2b:c9:
d5:68:df:a6:8b:ec:92:8b:17:bc:bf:33:b5:f7:81:
c1:d5:84:24:90:2d:d8:56:84:e7:87:c8:29:b4:5b:
de:d3:c6:41:c5:3e:1b:d4:07:e3:22:50:c8:98:75:
f2:00:9c:38:6e:97:cd:b3:2a:ca:d9:2f:e7:a4:05:
06:ea:16:0e:45:63:f1:28:10:98:8f:fb:cc:46:48:
24:c1:51:e8:7a:ef:44:42:09:c6:86:b3:80:28:c1:
23:47:b2:98:56:2f:28:8a:b3:14:af:7c:f0:d2:b0:
83:dd:36:72:d2:ae:9c:1d:25:0b:13:63:21:40:a0:
83:af:90:d2:b3:26:81:2a:5e:9f:3c:ee:82:fb:ba:
b4:e6:a9:3e:a0:f0:21:41:10:25:04:bc:ac:f6:36:
32:65:c7:ec:b9:98:fe:22:30:b7:e2:31:27:2b:51:
80:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:E1:D1:78:18:9B:57:91:F1:42:FB:84:98:22:C8:31:C2:AC:5A
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:93:f3:be:9d:64:23:c3:34:d3:ca:1f:0a:23:8e:0e:b4:d1:
9a:c7:d6:92:e5:5b:a1:83:21:ad:e8:aa:5f:3f:d7:aa:06:78:
75:d1:29:fe:d2:36:60:82:b4:79:77:07:34:35:99:27:6b:54:
ff:12:1d:f3:99:fc:77:03:f2:57:c9:19:70:4d:54:32:73:8f:
8a:f9:42:39:4f:0f:4c:a8:e6:b5:48:16:05:ae:f7:64:83:77:
64:7d:54:bd:ec:61:7c:72:da:51:58:91:c8:4d:a8:ea:99:a8:
d5:72:74:d5:1e:d4:a1:9b:6d:2f:68:0b:1f:a5:32:16:cb:1d:
00:4f:34:40:2b:d5:50:99:67:0a:3c:76:6b:74:51:54:1f:c3:
65:3f:aa:c4:f0:f4:ae:b8:39:5d:78:46:a3:c2:0c:6f:47:ab:
15:37:0b:76:50:19:68:bb:79:78:39:b9:af:27:72:a4:81:30:
1c:4d:e1:87:60:56:ce:f4:85:05:f1:e2:e3:12:32:5a:b5:a5:
1f:c3:d7:b6:cb:c5:01:9c:2a:af:2f:27:79:52:31:90:33:a9:
15:db:90:03:89:ad:18:d0:57:8d:59:31:d5:88:f3:cc:cf:17:
fd:e9:be:5d:94:32:18:4d:06:74:aa:3d:12:ad:16:fb:99:21:
3b:b6:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 18 03:34:58 2026 by rpki-client