Manifest

$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          6eyOLtCfSMJc2It++cKoCmAWLh+tsSBd5fqgg48ejck=
Subject key identifier:   F5:38:11:EC:01:E9:92:AF:80:0C:5A:5E:22:DB:02:DD:17:BA:04:18
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       107C87BC1B5B3B4FDA79BEF838E6456E089B4903
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number:          067E
Signing time:             Thu 05 Nov 2026 00:05:22 +0000
Manifest this update:     Thu 05 Nov 2026 00:05:22 +0000
Manifest next update:     Mon 09 Nov 2026 00:05:22 +0000
Files and hashes:         1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: 2JAUl5dvPo0JU5nyFTpYQFvxxO8PYAc7+mlwQ6PJ1Pg=)
                          2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: daVbXNo6JR3itHF5BO5m3QnR1YmcgOjQKwhxPaaxPwE=)
                          3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: 3M5GPnkDVr0pjV/UiDgyA9bTvROP2Tab1ml8qK9SSWA=)
                          4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: te7DS3DktK83aCxy8o+ilCq83Ed1eUbE5XjTVNaNLzo=)
                          5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: pxl179+2Z9STCt3zvlMh2QmjRWCzybRt0qTHkaw9izw=)
                          6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: pZIg5QLIcMJ2tKTkN4y3BTL/qzRb0XJtGSJi9lZ296Y=)
                          7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: jGsjizFQQu2M+v0hSb2ci8UAzd2gsZoL7U0SVXsXsQ8=)
                          8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: 6lRJrAXMjwy0T5PFaW7gInpqYhWbXfSVHi1co5UCutY=)
                          9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: gf3kkKUsMcM0nMU+rCVktcwGuaga8TdEo6zjXKFRorM=)
                          10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: YwAn+8eIGy3ad4QYdASzq1otUGhKgh8qTwNC5FZ6KFQ=)
                          11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: AN9+KBqoSnDFn4m09+7txCRzkGMV1awX5N4uIvlabk8=)
                          12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: 560eoVayoQc0uUWqDrSEpx+QoZcpnombOG9IkNNtlMk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Nov 2026 00:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7c:87:bc:1b:5b:3b:4f:da:79:be:f8:38:e6:45:6e:08:9b:49:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Nov  5 00:05:22 2026 GMT
            Not After : Nov  9 00:05:22 2026 GMT
        Subject: serialNumber=fe9645eff34dfa08e4893e2a0aa616925e6a1d0db57b2e93bc98fbfa78cd4fb7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:2a:1e:94:f2:f8:e4:59:1b:9a:4f:1e:bf:
                    c4:bb:19:6e:7b:33:83:8d:fe:2d:2c:cf:b6:a3:f4:
                    74:7b:96:b6:c6:1f:65:69:45:a4:1b:33:1b:66:57:
                    c2:13:f3:b8:c2:16:62:32:49:e4:58:b2:98:64:2c:
                    fa:47:49:2f:69:2d:dc:e1:17:0f:2c:d1:0b:b4:75:
                    e7:24:51:f7:85:f2:ef:7e:92:76:73:99:46:37:c0:
                    31:75:98:9b:ff:22:71:d2:cf:ba:b2:77:3e:b5:8f:
                    01:f2:7e:9b:a5:2f:0d:a1:7a:3d:94:99:cc:f1:07:
                    72:4f:34:19:48:b5:9f:1b:3f:53:84:d7:59:4f:70:
                    d6:8b:ea:b3:1d:2a:ea:57:b4:98:c3:2f:52:b8:60:
                    76:d4:55:69:80:f7:45:6e:4e:3d:ed:51:77:6b:29:
                    56:3e:e5:51:19:ae:bc:0e:ef:3b:72:6f:56:ec:e0:
                    61:34:4b:18:c6:02:af:3f:60:a8:6d:2c:dc:0d:cb:
                    a5:4a:a3:23:3c:a6:c1:12:ad:4a:07:26:34:23:13:
                    7b:f5:3b:2b:25:07:2a:57:c9:f5:71:e7:3f:52:ca:
                    6b:ac:dd:66:1f:e8:a3:53:48:9e:d7:04:0b:ab:f2:
                    55:14:3b:ec:1f:04:01:59:23:c3:eb:ec:cd:b2:f2:
                    c2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:38:11:EC:01:E9:92:AF:80:0C:5A:5E:22:DB:02:DD:17:BA:04:18
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:8d:28:74:02:02:29:29:e7:3a:cd:c9:d0:81:48:9d:35:
         4f:f1:f2:26:28:5f:36:9f:78:0b:ae:dc:99:8b:49:4c:33:03:
         b5:48:25:a1:29:22:37:de:9b:79:6f:ae:c7:3a:f3:c4:14:70:
         b6:0f:84:ee:cd:bd:fe:af:33:37:88:cc:20:86:77:73:ab:40:
         ca:dd:34:a7:cf:c1:85:e8:b8:e9:19:74:f2:3b:90:f6:61:f3:
         10:50:57:3a:4f:c2:11:ff:dd:27:a2:6d:37:03:fa:e6:5c:4b:
         88:c8:11:cb:a6:31:b3:32:37:18:b8:e0:98:4f:09:15:45:b8:
         10:32:c5:1f:a9:98:c8:d5:ec:48:8d:e6:e0:be:b9:c6:16:86:
         d0:58:ab:19:c8:c7:79:86:82:b5:6f:d5:b3:39:48:d3:05:82:
         24:5f:13:7c:50:5e:31:cc:ae:b5:74:4b:f4:40:03:82:f9:b6:
         38:31:16:85:a7:24:8f:b0:02:e0:31:25:c5:96:8a:5e:cc:4b:
         ca:75:d9:20:f1:e0:c3:e5:7a:65:dd:43:87:02:e6:6a:90:8e:
         27:d3:73:a9:1e:dd:26:72:ba:28:87:0d:04:9f:b1:af:34:38:
         0c:5c:c7:04:a7:8d:99:91:d8:ed:fb:19:f2:e2:b1:6f:50:3a:
         66:b4:ae:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:01:23 2026 by rpki-client