
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: sxURXDvbyQiqn2J/K6Ov2N7+jjxh5Ffi+nbqqnpY2Tw=
Subject key identifier: EE:F0:3E:88:8E:A7:88:6E:5E:01:9B:28:B9:E3:1D:F4:C7:92:1B:51
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 1134272509AF7D4F3C6FD53625BB78A2B2543C5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number: 05E3
Signing time: Tue 21 Jul 2026 00:01:36 +0000
Manifest this update: Tue 21 Jul 2026 00:01:36 +0000
Manifest next update: Sat 25 Jul 2026 00:01:36 +0000
Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: Tq3fF/a7OvBkU3g4aoOjzGeIopJptNOAvtshIuCffME=)
2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: IybdQRuGKUz+LbkBrptFU/9JKaJTr8Dn8X3VCAKzJNE=)
3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: 5JBx3U3yROg9e1Wa4wZ6pBktVXmoZ2pDGJ03dT+dcwg=)
4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: sweULcZjHPT8IwxPRaLVa8xz7kL7MLaA+OqEV/RFsD8=)
5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=)
6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: gvyzuHo1Rq2CUm3xPRJ3/SMJriiWd/xSrtjuBGswy9A=)
7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: QG3zvrKKXmxLv+GVXi5B7E0Z2ufvNvdW7NKfX0GmA4U=)
8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: fYYnNyZky/qrlLWP5S8zSm2v17ULDsXYq5Y9Nh1hza0=)
9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: s1qUyRH3Fw9oHgx+ZxRIhgk8yLZ6iYy6ePhVXVFAntc=)
10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 4UuC+OYJXwgl+ZOhdImkz2/tYQnFq/fxM6y2ExbbwJc=)
11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: t5iHZ0YZekzmfq0y+PhVUngf/qO+t6VtPofs+84y//8=)
12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: uA3ZeD81Ey+SQMUY6max8Ur1zQBSW7JWHCluKDYrMdY=)
13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: 8rTp6mbrD5rf+jzY3ic4O1UnEJSQtRUpgFi5WUndeBY=)
14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=)
15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: Gc4Egy67JM0d/HEcfrgEvgnyi7RS8L58SIDhvgQi9/c=)
16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: 8rR2NDI380wGgc15cYW7w6lGnHDb3tV92XlKn9SGrDM=)
17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: boMsB6m0tXlf5cEYATl81Y1PhDlDlwgP1NKoYJsEPT0=)
18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:34:27:25:09:af:7d:4f:3c:6f:d5:36:25:bb:78:a2:b2:54:3c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Validity
Not Before: Jul 21 00:01:36 2026 GMT
Not After : Jul 25 00:01:36 2026 GMT
Subject: serialNumber=326dddb06525da080e2050f2d8f57bbcb134d000d43c68a3c82ce6fcb731befd, CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:d8:45:ff:c4:6f:55:bb:9c:5f:2e:48:a9:
95:ff:4c:47:36:c1:d7:02:c7:d7:fe:9c:df:22:3c:
0f:22:b6:97:80:53:17:bb:a9:36:3d:c8:df:15:f9:
01:78:75:fa:c0:74:b6:d8:46:0c:01:2e:b9:52:99:
63:2d:e7:61:5b:df:ad:ef:36:ee:39:f2:5e:96:02:
1e:f5:74:3c:04:1d:ce:4c:15:fc:e5:7e:5f:10:dc:
72:57:2d:15:90:e5:39:88:72:da:91:03:f9:56:74:
4b:b7:f7:6d:e6:fa:da:ef:9e:89:1d:8c:1f:5a:d5:
35:6c:6a:4c:0b:20:7e:a5:50:6d:52:d9:ba:fc:b0:
f6:62:7e:63:5d:59:da:b0:33:63:40:e7:a6:2d:c4:
81:65:ba:3a:e1:7c:d8:c7:8c:5e:d1:47:05:22:45:
0e:5c:01:26:f6:49:0d:eb:27:c3:86:98:e4:69:7c:
6b:72:3e:08:22:8d:f5:5d:65:a4:46:a4:62:1f:31:
dc:c3:e6:7e:ce:c0:cf:c3:a6:cc:27:e2:99:23:f6:
9c:0b:d7:d9:88:18:07:05:19:74:8a:9b:19:f7:b2:
bd:6b:38:cb:bf:a0:ce:0c:d4:c8:16:ed:dc:52:b7:
8d:8d:19:02:93:c2:b0:e6:88:a5:98:96:14:44:d6:
89:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F0:3E:88:8E:A7:88:6E:5E:01:9B:28:B9:E3:1D:F4:C7:92:1B:51
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1b:2b:13:6b:d7:74:e6:43:83:ad:81:c7:f8:98:0a:df:2e:
d0:80:ee:d8:21:b1:16:41:e5:0b:22:b8:2f:80:24:b8:61:36:
e6:bc:ad:cb:c5:4f:ad:46:38:a2:f6:31:86:fe:ea:5b:be:50:
3f:de:6f:c4:2d:55:d8:37:3e:b9:95:c1:2d:d1:2e:0e:62:ed:
31:6f:93:a8:ce:a0:82:3a:f3:84:35:50:a6:b1:fe:5f:11:52:
55:8d:7f:e4:a2:f4:5a:a7:b0:b8:75:83:2b:4a:f1:6d:4a:0f:
b9:a7:15:b4:70:02:88:f4:1c:ec:e4:c5:7f:1b:15:ba:96:6b:
c3:69:51:80:b1:fc:e3:6a:3c:2f:e4:27:78:5d:9e:fc:9b:13:
a4:ca:94:b7:ec:25:45:20:19:ee:74:df:0f:7c:31:fd:74:d4:
48:60:3c:7d:b0:a6:bc:a5:ec:3b:0d:2f:03:0b:eb:aa:35:48:
80:6a:52:3a:34:e4:8f:73:d0:28:47:35:27:0f:51:eb:69:c6:
74:55:70:f9:bc:08:4d:4d:47:3b:35:83:70:86:eb:b3:b4:b6:
eb:a1:8d:d2:ae:41:19:2c:50:c2:4b:02:2a:ba:8e:99:b1:a1:
27:d4:5f:04:3a:8f:bd:7b:b5:0c:e1:e9:32:5d:a3:3a:a2:5c:
cc:e8:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:27:38 2026 by rpki-client