Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          yMnokWem/vKai3jZv/N4qARpiSbIHQmIctmjlXS0uTM=
Subject key identifier:   C0:B2:89:CD:37:67:73:1B:0C:7B:4C:F3:1A:64:0B:B8:81:88:26:46
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer:       /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial:       51427A7C00E9F0EEA804470C608DCAACAE5DFAD9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number:          05BD
Signing time:             Sat 13 Jun 2026 00:05:59 +0000
Manifest this update:     Sat 13 Jun 2026 00:05:59 +0000
Manifest next update:     Wed 17 Jun 2026 00:05:59 +0000
Files and hashes:         1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: Tq3fF/a7OvBkU3g4aoOjzGeIopJptNOAvtshIuCffME=)
                          2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: IybdQRuGKUz+LbkBrptFU/9JKaJTr8Dn8X3VCAKzJNE=)
                          3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: 5JBx3U3yROg9e1Wa4wZ6pBktVXmoZ2pDGJ03dT+dcwg=)
                          4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: sweULcZjHPT8IwxPRaLVa8xz7kL7MLaA+OqEV/RFsD8=)
                          5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: sqmhzfAuFPlH4QoK2na+v+GfhV8fLLG3moxK2B9Pkoc=)
                          6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: gvyzuHo1Rq2CUm3xPRJ3/SMJriiWd/xSrtjuBGswy9A=)
                          7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: QG3zvrKKXmxLv+GVXi5B7E0Z2ufvNvdW7NKfX0GmA4U=)
                          8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: fYYnNyZky/qrlLWP5S8zSm2v17ULDsXYq5Y9Nh1hza0=)
                          9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: kgASeMknwm8nNkKgQK45KbZIlqOAuQ/mLGg6LHojKe4=)
                          10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 4UuC+OYJXwgl+ZOhdImkz2/tYQnFq/fxM6y2ExbbwJc=)
                          11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: t5iHZ0YZekzmfq0y+PhVUngf/qO+t6VtPofs+84y//8=)
                          12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: uA3ZeD81Ey+SQMUY6max8Ur1zQBSW7JWHCluKDYrMdY=)
                          13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: 8rTp6mbrD5rf+jzY3ic4O1UnEJSQtRUpgFi5WUndeBY=)
                          14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: IFPWZLYqICCTZpiAlPV0uS3SJy8BLcnhhBvheTkomoI=)
                          15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: Gc4Egy67JM0d/HEcfrgEvgnyi7RS8L58SIDhvgQi9/c=)
                          16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: 8rR2NDI380wGgc15cYW7w6lGnHDb3tV92XlKn9SGrDM=)
                          17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: boMsB6m0tXlf5cEYATl81Y1PhDlDlwgP1NKoYJsEPT0=)
                          18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: v33jq27fZuv6YhlnQHJUjBHiUrUIsq6Hlil/qH2vUro=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 00:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:42:7a:7c:00:e9:f0:ee:a8:04:47:0c:60:8d:ca:ac:ae:5d:fa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
        Validity
            Not Before: Jun 13 00:05:59 2026 GMT
            Not After : Jun 17 00:05:59 2026 GMT
        Subject: serialNumber=4697009a4b84eb56436be3d868030f19a90df5174b64ec0dcb7a707803c7302a, CN=58810403-9ba0-403a-809b-c78252ab7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c9:2b:f6:bd:2a:46:4f:92:c3:25:83:df:2e:
                    82:d7:69:4c:c4:90:a7:df:d7:b7:37:5b:d1:c3:57:
                    17:0f:3c:42:a8:6f:17:0b:83:4a:1b:98:e9:7d:fa:
                    a3:1b:71:78:f5:a1:9d:94:0c:b6:41:c6:8c:5d:1d:
                    d9:d8:95:d3:de:47:86:0b:3a:ae:d9:31:13:c2:05:
                    63:08:f1:a8:10:2d:c9:70:e4:84:2d:2d:68:e5:9f:
                    e5:bd:3b:9d:e1:97:3d:3d:b4:9c:15:b2:94:51:61:
                    90:06:d4:9f:51:c0:26:c2:34:f1:fa:e4:12:1c:af:
                    97:f9:86:16:71:db:f1:85:78:83:66:cb:f1:b9:40:
                    e7:0b:e6:44:d7:d5:0e:a4:35:f2:df:69:9e:ad:43:
                    34:8e:84:c0:73:7e:e5:76:e9:ed:ca:b8:5d:83:f5:
                    a0:75:c3:63:fb:57:10:97:53:d3:56:ce:bb:93:45:
                    70:c3:e0:b0:93:93:ff:71:c1:2e:79:d4:56:51:8f:
                    91:3e:0f:a0:5f:47:d1:4d:aa:a8:9e:9c:6c:78:56:
                    c6:3d:80:d5:51:46:19:09:f1:c5:b5:46:ec:67:d5:
                    82:2b:3f:43:83:18:5b:8a:4d:15:b1:9f:b4:ab:8a:
                    ee:c0:47:97:dd:0e:e7:71:d4:dd:75:1b:ae:06:3c:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B2:89:CD:37:67:73:1B:0C:7B:4C:F3:1A:64:0B:B8:81:88:26:46
            X509v3 Authority Key Identifier:
                keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6e:aa:66:31:09:ce:b8:6b:d6:71:3a:d8:1c:59:e0:ed:71:
         32:13:96:fe:d3:f2:c8:2d:8b:4f:d9:fc:19:ea:ff:78:7d:9b:
         e6:5e:95:9b:e6:61:8c:0f:95:44:fd:db:85:8b:59:15:1c:ef:
         7d:ee:56:a9:15:38:ac:71:2c:16:bf:ef:e4:47:74:06:56:2d:
         22:63:b8:54:3d:ac:86:d7:97:25:61:43:1d:e1:bf:39:ad:3f:
         ad:71:05:27:2b:a0:c2:1d:96:9a:d2:63:19:51:46:3a:df:1c:
         dc:96:73:1f:0b:84:12:ef:f2:ee:d0:bc:65:1a:b6:0d:a6:e3:
         dc:30:62:23:6b:39:21:8c:70:21:fe:f2:38:d1:d0:f6:5b:22:
         8c:40:d9:0d:f6:ab:c8:fb:30:ec:46:63:39:6b:41:5b:1b:02:
         29:d8:6a:68:a9:a1:e5:75:61:b3:0d:3a:0d:2a:26:5b:9e:49:
         5b:99:04:48:d6:e2:8b:64:07:d9:14:9d:c7:1b:d5:57:46:3c:
         0a:b5:61:78:8e:fc:e4:c1:5a:27:5b:ec:d6:b2:20:9b:32:d1:
         85:57:27:fa:84:92:66:6f:04:37:b0:3d:9b:43:89:6f:57:e6:
         94:59:dd:82:10:68:97:60:65:f0:94:6a:df:2b:fa:d2:99:ab:
         ea:da:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:02:59 2026 by rpki-client