
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 9moAroUXX/xq5Q8kJ8kotMdwu1Lb5zs0yO0fy5me/Iw=
Subject key identifier: 7F:B7:04:2B:84:CD:C7:1B:73:EC:6A:39:E2:1D:A4:CC:D1:E1:53:DC
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 5719B6DA345D9D5F8EC426812D06A39572BB576D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0641
Signing time: Tue 22 Sep 2026 00:09:55 +0000
Manifest this update: Tue 22 Sep 2026 00:09:55 +0000
Manifest next update: Sat 26 Sep 2026 00:09:55 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: zICboMBFoDWQbdk8MP/DZRlv/R8TCsqdWQDOJ6BhHGk=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: JS5bz35Ewx8DTp8/iz+8ZYDl54lvO4wwOJh221IKssM=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pG6f7ffIwTFwlDGXIOjWeq2pvtqQcYHjDsQBql/4Ln8=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: TPeroObNa5nTO9OGrTAO9t2+kpmxj24dSyIKR/yAWjk=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: foCeceipoHt2iBcpqitRYX+2oIIeUUdTZaIcHRm+piU=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: M17X9ZstdKPiOiaowDV9py+basmFK9dswRvMmNAfmyY=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Xfh6ZjU3jVx9qa79ZmwSH+KBpt26XR6wuBYg75N51d8=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: f89D2b5c8Zs4k8stZCv3jaHZ+1kBWHUzK88khgX2CBI=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: uIskc2vZKE0TG6rZ7zU3gO/YBPvk63ePmcll0X+Q+Lc=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 36zyXS5EhxOtNn4PX71OekuUj1IFeK9xcFYUIGS7uYo=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: jqK4j9uKnP6mkvPpUUYruYek4zjhpF2nQXMP5W7a9Qo=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: r73l4iNZMafNXfC80CSyJoUcdCuZUcqJ+6+FN5X3XBo=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: 7g5YFvc9Ja+LNtF/CNyVYlMGrIybgUTURYvwekeTQEA=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: Rt6xeAG5BC92OG08uxGijjEv+6Nk8Ua9nz3u1/xjupg=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: 0t6pw1zjlgZY+wZ5e82TOOsu+qUa1YX5mTwb6oXX8HM=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: xsqkUQbSEtoGJnJJHboYNK9BHlm0sU29tHhaJi9mmSE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: 7XgAJ+gr6KA0su8xucLdioVeQG9tOsLX2BCpy2wbklo=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Vf8YdqXd6PK59l/nJECtAxPzN54qUYTTnU1X7y+Hl+o=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: rDQw2NlaITAzyDgBs7YI0l4weL1704mjzjFsg+xw0kE=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5sdZchZ9b8aSmuGueMOFRBbV7e90xtd+L0+oJr39aZ8=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: rVIJNgp4LBpEepxSDHvTh5KCpV25MUZbwVzCwpiejfs=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: k9kJTRHzieVUKtUJcCU58vrFuecAYruUDN3npMtxG8E=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 00:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:19:b6:da:34:5d:9d:5f:8e:c4:26:81:2d:06:a3:95:72:bb:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Sep 22 00:09:55 2026 GMT
Not After : Sep 26 00:09:55 2026 GMT
Subject: serialNumber=da5e857c5a1fef8b7c0ebf3e4a33dacb8e40d25e7e5275b1c04fed61bb87d955, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cf:54:1f:00:08:c9:66:c2:9b:be:a3:66:61:
4a:1e:23:9c:29:78:b3:0b:74:24:31:03:58:1b:b9:
bd:b3:01:e1:b7:e7:b1:16:01:8d:a8:b5:d8:09:5b:
9a:0f:5a:fa:ba:f3:4d:bf:b4:ca:c2:ec:a8:42:24:
72:08:e0:ba:7d:39:25:91:a7:4f:3d:58:f9:f6:4e:
52:32:ac:50:b6:3c:ec:ab:3d:36:be:5c:fd:9d:1d:
82:19:90:12:66:c8:6a:5b:ec:e9:d3:72:95:88:06:
99:a6:c6:04:f0:66:9c:69:ad:97:0d:17:be:79:00:
cf:c6:91:7d:7e:87:f1:d7:5a:c2:26:42:78:8b:d6:
2a:83:93:48:f9:7d:c0:c9:c3:ff:0a:db:82:7f:c7:
44:72:cb:b0:9b:9b:bd:4d:5f:ff:c4:82:db:86:12:
60:08:8a:7c:d8:d2:a5:70:5e:0c:f5:da:97:50:ea:
2b:b9:1b:e9:5b:45:49:c2:fb:c2:d2:1e:e0:40:c9:
29:51:a6:5e:25:d2:40:70:b0:06:52:fb:1a:1b:10:
5a:15:72:34:69:b4:6e:d5:38:3f:5e:ca:e5:23:c9:
c1:ca:e6:f5:88:10:9a:0d:8f:9f:0c:bc:b6:f7:93:
0d:38:0e:dc:72:cd:ef:76:51:c9:c5:0a:bd:42:b1:
3b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:04:2B:84:CD:C7:1B:73:EC:6A:39:E2:1D:A4:CC:D1:E1:53:DC
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:83:a2:60:be:5d:e8:de:bf:4d:6a:35:68:35:79:60:eb:
35:ae:30:2f:84:21:5c:78:ab:9c:59:a9:51:54:29:d6:c6:d0:
25:b7:c4:6d:75:27:5d:81:72:87:ca:33:82:8a:ab:c3:55:af:
bd:ce:11:97:1f:4b:35:af:bd:3f:67:be:0b:fb:dd:0a:de:f1:
b9:e8:a8:1b:88:ba:1a:dd:97:c1:7d:c7:0b:ed:1e:7c:b4:85:
09:76:ee:02:c8:2e:39:33:4e:af:d0:64:3a:a3:1f:6c:ec:fe:
db:04:ad:8c:0c:ac:c1:a2:94:f6:1d:77:c8:d3:2f:a1:87:1a:
44:b2:10:c8:22:ec:b4:b3:87:00:27:74:61:f0:32:3e:b7:6f:
11:e3:85:b1:01:06:b8:b4:f7:dc:59:0e:3e:cd:9f:50:e6:62:
2d:53:61:3d:b4:05:0f:7f:2f:9f:d4:a1:38:6f:01:88:34:82:
65:5f:c4:ff:4b:25:84:24:1d:65:bb:66:3e:57:7f:83:0a:41:
57:74:05:ab:f9:76:dc:ab:ed:6a:3c:b4:08:e2:24:a6:e9:b9:
b1:43:5f:fe:df:be:9b:cd:9c:aa:57:2e:2e:e3:66:2c:ec:2d:
6e:e4:06:24:f4:c4:83:e8:14:8e:e7:bf:c5:6c:a6:b9:f7:91:
60:26:f3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:29:42 2026 by rpki-client