
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 6eyOLtCfSMJc2It++cKoCmAWLh+tsSBd5fqgg48ejck=
Subject key identifier: F5:38:11:EC:01:E9:92:AF:80:0C:5A:5E:22:DB:02:DD:17:BA:04:18
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 107C87BC1B5B3B4FDA79BEF838E6456E089B4903
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number: 067E
Signing time: Thu 05 Nov 2026 00:05:22 +0000
Manifest this update: Thu 05 Nov 2026 00:05:22 +0000
Manifest next update: Mon 09 Nov 2026 00:05:22 +0000
Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: 2JAUl5dvPo0JU5nyFTpYQFvxxO8PYAc7+mlwQ6PJ1Pg=)
2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: daVbXNo6JR3itHF5BO5m3QnR1YmcgOjQKwhxPaaxPwE=)
3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: 3M5GPnkDVr0pjV/UiDgyA9bTvROP2Tab1ml8qK9SSWA=)
4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: te7DS3DktK83aCxy8o+ilCq83Ed1eUbE5XjTVNaNLzo=)
5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: pxl179+2Z9STCt3zvlMh2QmjRWCzybRt0qTHkaw9izw=)
6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: pZIg5QLIcMJ2tKTkN4y3BTL/qzRb0XJtGSJi9lZ296Y=)
7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: jGsjizFQQu2M+v0hSb2ci8UAzd2gsZoL7U0SVXsXsQ8=)
8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: 6lRJrAXMjwy0T5PFaW7gInpqYhWbXfSVHi1co5UCutY=)
9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: gf3kkKUsMcM0nMU+rCVktcwGuaga8TdEo6zjXKFRorM=)
10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: YwAn+8eIGy3ad4QYdASzq1otUGhKgh8qTwNC5FZ6KFQ=)
11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: AN9+KBqoSnDFn4m09+7txCRzkGMV1awX5N4uIvlabk8=)
12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: 560eoVayoQc0uUWqDrSEpx+QoZcpnombOG9IkNNtlMk=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Nov 2026 00:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:7c:87:bc:1b:5b:3b:4f:da:79:be:f8:38:e6:45:6e:08:9b:49:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Nov 5 00:05:22 2026 GMT
Not After : Nov 9 00:05:22 2026 GMT
Subject: serialNumber=fe9645eff34dfa08e4893e2a0aa616925e6a1d0db57b2e93bc98fbfa78cd4fb7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:2a:1e:94:f2:f8:e4:59:1b:9a:4f:1e:bf:
c4:bb:19:6e:7b:33:83:8d:fe:2d:2c:cf:b6:a3:f4:
74:7b:96:b6:c6:1f:65:69:45:a4:1b:33:1b:66:57:
c2:13:f3:b8:c2:16:62:32:49:e4:58:b2:98:64:2c:
fa:47:49:2f:69:2d:dc:e1:17:0f:2c:d1:0b:b4:75:
e7:24:51:f7:85:f2:ef:7e:92:76:73:99:46:37:c0:
31:75:98:9b:ff:22:71:d2:cf:ba:b2:77:3e:b5:8f:
01:f2:7e:9b:a5:2f:0d:a1:7a:3d:94:99:cc:f1:07:
72:4f:34:19:48:b5:9f:1b:3f:53:84:d7:59:4f:70:
d6:8b:ea:b3:1d:2a:ea:57:b4:98:c3:2f:52:b8:60:
76:d4:55:69:80:f7:45:6e:4e:3d:ed:51:77:6b:29:
56:3e:e5:51:19:ae:bc:0e:ef:3b:72:6f:56:ec:e0:
61:34:4b:18:c6:02:af:3f:60:a8:6d:2c:dc:0d:cb:
a5:4a:a3:23:3c:a6:c1:12:ad:4a:07:26:34:23:13:
7b:f5:3b:2b:25:07:2a:57:c9:f5:71:e7:3f:52:ca:
6b:ac:dd:66:1f:e8:a3:53:48:9e:d7:04:0b:ab:f2:
55:14:3b:ec:1f:04:01:59:23:c3:eb:ec:cd:b2:f2:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:38:11:EC:01:E9:92:AF:80:0C:5A:5E:22:DB:02:DD:17:BA:04:18
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7e:8d:28:74:02:02:29:29:e7:3a:cd:c9:d0:81:48:9d:35:
4f:f1:f2:26:28:5f:36:9f:78:0b:ae:dc:99:8b:49:4c:33:03:
b5:48:25:a1:29:22:37:de:9b:79:6f:ae:c7:3a:f3:c4:14:70:
b6:0f:84:ee:cd:bd:fe:af:33:37:88:cc:20:86:77:73:ab:40:
ca:dd:34:a7:cf:c1:85:e8:b8:e9:19:74:f2:3b:90:f6:61:f3:
10:50:57:3a:4f:c2:11:ff:dd:27:a2:6d:37:03:fa:e6:5c:4b:
88:c8:11:cb:a6:31:b3:32:37:18:b8:e0:98:4f:09:15:45:b8:
10:32:c5:1f:a9:98:c8:d5:ec:48:8d:e6:e0:be:b9:c6:16:86:
d0:58:ab:19:c8:c7:79:86:82:b5:6f:d5:b3:39:48:d3:05:82:
24:5f:13:7c:50:5e:31:cc:ae:b5:74:4b:f4:40:03:82:f9:b6:
38:31:16:85:a7:24:8f:b0:02:e0:31:25:c5:96:8a:5e:cc:4b:
ca:75:d9:20:f1:e0:c3:e5:7a:65:dd:43:87:02:e6:6a:90:8e:
27:d3:73:a9:1e:dd:26:72:ba:28:87:0d:04:9f:b1:af:34:38:
0c:5c:c7:04:a7:8d:99:91:d8:ed:fb:19:f2:e2:b1:6f:50:3a:
66:b4:ae:b0
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUEHyHvBtbO0/aeb74OOZFbgibSQMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG
QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MTEwNTAwMDUyMloX
DTI2MTEwOTAwMDUyMlowejFJMEcGA1UEBRNAZmU5NjQ1ZWZmMzRkZmEwOGU0ODkz
ZTJhMGFhNjE2OTI1ZTZhMWQwZGI1N2IyZTkzYmM5OGZiZmE3OGNkNGZiNzEtMCsG
A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs30qHpTy+ORZG5pPHr/EuxluezOD
jf4tLM+2o/R0e5a2xh9laUWkGzMbZlfCE/O4whZiMknkWLKYZCz6R0kvaS3c4RcP
LNELtHXnJFH3hfLvfpJ2c5lGN8AxdZib/yJx0s+6snc+tY8B8n6bpS8NoXo9lJnM
8QdyTzQZSLWfGz9ThNdZT3DWi+qzHSrqV7SYwy9SuGB21FVpgPdFbk497VF3aylW
PuVRGa68Du87cm9W7OBhNEsYxgKvP2CobSzcDculSqMjPKbBEq1KByY0IxN79Tsr
JQcqV8n1cec/UsprrN1mH+ijU0ie1wQLq/JVFDvsHwQBWSPD6+zNsvLCXQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFPU4EewB6ZKvgAxaXiLbAt0XugQYMB8GA1UdIwQY
MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt
alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm
OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz
LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAEt+jSh0AgIpKec6zcnQgUidNU/x8iYo
XzafeAuu3JmLSUwzA7VIJaEpIjfem3lvrsc688QUcLYPhO7Nvf6vMzeIzCCGd3Or
QMrdNKfPwYXouOkZdPI7kPZh8xBQVzpPwhH/3SeibTcD+uZcS4jIEcumMbMyNxi4
4JhPCRVFuBAyxR+pmMjV7EiN5uC+ucYWhtBYqxnIx3mGgrVv1bM5SNMFgiRfE3xQ
XjHMrrV0S/RAA4L5tjgxFoWnJI+wAuAxJcWWil7MS8p12SDx4MPlemXdQ4cC5mqQ
jifTc6ke3SZyuiiHDQSfsa80OAxcxwSnjZmR2O37GfLisW9QOma0rrA=
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:01:23 2026 by rpki-client