Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          QqQK3zw7qjIgoIElDRb4NVqdjTFuEOBud9pK/pCMmk8=
Subject key identifier:   64:F2:0F:92:6F:6C:C3:7A:E4:D8:64:78:5D:AF:D0:9C:A4:76:85:4A
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       2FC3FE74475556BDD7F64C8BD5E7589D2964D00D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          0466
Signing time:             Sat 14 Jun 2025 00:00:06 +0000
Manifest this update:     Sat 14 Jun 2025 00:00:06 +0000
Manifest next update:     Wed 18 Jun 2025 00:00:06 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: PARNEnUNMqJNis6uThL9iPY+YceqLih3wSCIL0eeeU4=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: iPZXHJj6GhIfBmWaA7CSAIHjXIYp8qPR6znZEMX7GbI=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: pO1ZXG6sSfgfPTB9M91yC1+vKT6fjVgLHLXWYb4AAnM=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: QSVrI+1t15FqBHL13MGnFy0Nzpiz9H4wBuP69fIctDA=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: aR/X6hVIqtLE2FkCFjtRdq3arGLWHZB3/hhDcWN2+7U=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: fCMWwlq7r64lnXLdelYFeIbgkRv8V76xhHBjaLF1TI8=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: OWV8Q86skh5oa+OzEjFSL1cJ+WN1fwgJqGrnX0afKvk=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: dpTwwGwUN8ci0QMRkJkmkDKvUoL+XoAG41b3JRF15x0=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: ZRPDjAHdxmWX1jrwbdqSfzreGkjgYNX/6YHCrNtXhiA=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 0poBH9ZJIvm6o3WkVRQuwmCRSJDr2es/DEUsdpDssrw=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: gCeBQN+ekvH2K2ZZmIACMGOg1Zh29yCgVP8nrlCfA98=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: GmjTBXPCk2MheYMe3Ti89IM1ct0JP1/mtITjQvPPaJQ=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: xFW4C6CbOZIvVWF+EtVH4IiOy8S/XGy7V9Rs1IvWtd4=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: 0hUPSGWVkpM1DVpfbxZ+b3TvGt2Y0PP/EyAep+KQUKc=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: kJuAABBMqnIeYIoMqdCsUfjYd1db7aBbBCYk1Y9PjGw=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: jorKmjQGTLFrfGMvCHL7dpTuFYSLQ2ju9VOJeWwEeJU=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: MCFSo4p4hfWyGHa1bb10cJLk5iC7Xm35BqNCsVItFtQ=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: gZg05veLlxnjeSzm9ZcxJK7VEcNF/WOJb9FwgblxY74=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: Y3sZBlba7ZfdkYEtPZB029MWcLualK+7nmiFldcTk3s=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: XnwrkVxmWlu3oxMlkNnilulDwQFjCB65v8yjRMLXLr8=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 8pbrlWeDTsmzN4t4I9XM8Tm+FCp8sgg1LYPJ72x8tr8=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: +STu06X203RA1zxVwDiyeI5RCrpGG6M6LplCLYkPaPc=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:c3:fe:74:47:55:56:bd:d7:f6:4c:8b:d5:e7:58:9d:29:64:d0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Jun 14 00:00:06 2025 GMT
            Not After : Jun 18 00:00:06 2025 GMT
        Subject: serialNumber=866e0815a4180e9f6d73f67cdf34aef6e6cb26f78d5ff1f6f1f81fcd72493890, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:aa:af:0a:76:43:bd:8e:c4:90:2b:c8:e6:
                    c3:e8:90:fb:26:85:24:c8:06:17:6b:ad:f6:50:8f:
                    d5:f7:2d:33:04:c8:37:d2:fa:e3:88:5f:44:63:db:
                    91:dc:84:be:bf:bf:de:a5:c2:a4:02:5c:c1:6d:1d:
                    75:85:84:91:44:12:77:9e:6a:c4:3a:19:10:37:00:
                    da:eb:05:ea:73:51:1e:ef:80:ea:d9:2f:10:88:df:
                    61:bf:e5:3c:39:52:a6:a6:70:1b:83:f1:96:e9:78:
                    a6:2a:20:f3:9f:cc:7d:a7:4e:0c:79:8e:0f:94:6d:
                    8b:be:d8:3b:d0:db:92:6e:ef:0d:40:4a:b3:b5:2e:
                    b9:5f:5b:bf:b2:59:cd:6c:5d:33:b0:54:0b:92:75:
                    76:1e:bb:ab:06:3b:29:4e:2b:2c:fa:30:ca:a8:75:
                    c9:ec:25:fe:1b:b9:09:b1:ae:2c:48:f6:bf:1f:ee:
                    4f:0d:f5:6e:6f:28:81:a2:17:96:6d:e9:6e:28:63:
                    45:a5:5a:f4:d7:9f:13:57:83:f3:e5:fe:4e:a8:e7:
                    11:c2:ee:7e:03:1b:cc:56:2d:3b:f1:f3:57:ea:2c:
                    44:35:00:8e:6f:9f:35:ae:bb:a1:cb:01:0a:28:fd:
                    44:05:07:d6:61:38:96:2d:36:de:d7:e2:1b:c0:e3:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:0F:92:6F:6C:C3:7A:E4:D8:64:78:5D:AF:D0:9C:A4:76:85:4A
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ee:47:7b:b8:fa:23:3c:6a:3e:48:46:a5:1d:13:23:92:66:a0:
         42:7b:a0:c9:cf:87:d6:73:94:17:53:66:6a:d9:38:44:d8:32:
         6c:ac:18:67:78:3f:9f:58:0f:f4:69:04:8e:5c:75:8a:1b:17:
         c1:f3:47:5c:ed:c9:c0:5e:bb:b1:96:69:07:73:7e:40:32:9e:
         12:20:9d:ff:c6:88:7d:c8:0f:95:b9:e7:8a:62:9b:82:80:95:
         44:af:35:1c:41:5e:a4:3c:3d:7f:35:95:28:9d:8c:de:1a:1e:
         29:19:c8:02:67:27:f7:6d:b9:e9:ca:3d:6f:4c:f1:bc:51:5b:
         c7:c4:37:e2:32:cf:3f:73:19:d8:7b:cd:74:6d:93:28:8a:e5:
         d9:f4:7a:83:f0:24:01:39:5e:51:92:a1:3d:a7:84:0a:f9:e1:
         e1:8d:b9:34:81:b0:d8:19:71:44:c9:9f:09:a3:19:c2:5a:e4:
         84:90:ff:84:9b:0c:fa:d9:e7:e4:dd:76:81:59:a2:4b:22:31:
         43:1b:ec:4a:1c:6a:28:3f:fc:57:54:9b:40:3e:8f:ab:c7:a5:
         3b:17:cc:c4:29:81:07:49:07:d3:63:75:ca:3b:2b:df:9c:69:
         73:43:45:9f:ac:af:e8:b4:df:32:6f:50:96:de:98:30:54:98:
         1e:a4:88:0c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUL8P+dEdVVr3X9kyL1edYnSlk0A0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MDYxNDAwMDAwNloX
DTI1MDYxODAwMDAwNlowejFJMEcGA1UEBRNAODY2ZTA4MTVhNDE4MGU5ZjZkNzNm
NjdjZGYzNGFlZjZlNmNiMjZmNzhkNWZmMWY2ZjFmODFmY2Q3MjQ5Mzg5MDEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOqrwp2Q72OxJAryObD6JD7JoUk
yAYXa632UI/V9y0zBMg30vrjiF9EY9uR3IS+v7/epcKkAlzBbR11hYSRRBJ3nmrE
OhkQNwDa6wXqc1Ee74Dq2S8QiN9hv+U8OVKmpnAbg/GW6XimKiDzn8x9p04MeY4P
lG2Lvtg70NuSbu8NQEqztS65X1u/slnNbF0zsFQLknV2HrurBjspTiss+jDKqHXJ
7CX+G7kJsa4sSPa/H+5PDfVubyiBoheWbeluKGNFpVr0158TV4Pz5f5OqOcRwu5+
AxvMVi078fNX6ixENQCOb581rruhywEKKP1EBQfWYTiWLTbe1+IbwOMiOQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFGTyD5JvbMN65NhkeF2v0JykdoVKMB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAO5He7j6IzxqPkhGpR0TI5JmoEJ7oMnP
h9ZzlBdTZmrZOETYMmysGGd4P59YD/RpBI5cdYobF8HzR1ztycBeu7GWaQdzfkAy
nhIgnf/GiH3ID5W554pim4KAlUSvNRxBXqQ8PX81lSidjN4aHikZyAJnJ/dtuenK
PW9M8bxRW8fEN+Iyzz9zGdh7zXRtkyiK5dn0eoPwJAE5XlGSoT2nhAr54eGNuTSB
sNgZcUTJnwmjGcJa5ISQ/4SbDPrZ5+TddoFZoksiMUMb7Eocaig//FdUm0A+j6vH
pTsXzMQpgQdJB9Njdco7K9+caXNDRZ+sr+i03zJvUJbemDBUmB6kiAw=
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:35:15 2025 by rpki-client