
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: +HRZHc+fDOlkwVK165m5/N7lT9DmX39Ezn9TIYe9dSw=
Subject key identifier: CF:E9:95:96:61:45:AF:A6:A2:68:D5:26:D3:44:01:D9:EE:3C:78:20
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 2BC715FBF4933C1ABC2E6E9D55FEC8C3A459C9CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number: 0556
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Fri 06 Mar 2026 00:01:51 +0000
Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: 94IdkhuysCtpUhjxxnTBDxDY8wcAFCDxnvDHBRF5fs8=)
2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: 3/O173PHBuIz6mu8xF4BBpQyuSSXG31gIN+dAztx7tU=)
3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: qH4UYxIo4GmiVDct5oCvngMgU+M+xfB7x0cpSWfBWpI=)
4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: w9dP68hgjTwoVTVZbfzP2G5I7m0K6Q1OW+wD/LSUllg=)
5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: 92iBp9qU7g6n+zuX9c8av5bZGkNDQA6sfydJaa4OH2E=)
6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: KdJvcPeDsOZ+BJoWuQRlSV6VANqoUPeEX3cWo51RCu4=)
7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: ROZb7Tv2KD3NnpptYibXOH4yrtmutDpNrPPgjX6j8aE=)
8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: BY42jY8m9CnIuDARw32JheNmH2JsVrZ/FgY72atfbec=)
9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: SmWHxLLKx2g5eyT+JhJQ1TdME1gipxKE7uHRzFHWfGU=)
10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 6iafgtxJna4YOKnfmGGjHe/fUaX3c3vMQNik0yLQ2sY=)
11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: qZkqbKiNgx8ucra+8F91Z+iqMAPhmhI0ZuWkZkNBdNU=)
12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: OJmgOUcQjiJMwxM7bwdSAtFKotOY/2x5tv0dDie1nVQ=)
13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: dvqZyjDP4DM17H4iP9qadmlu63zU1PZlX4eNeTdhr54=)
14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: zdOl15xiPO/2p9k0fkfFESjOUUAzls9mUEj1rb9KzuY=)
15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: f4Fl24SB2Oz8neyZRhs4xAWvq57eQY8Tm6Y9abpLvNI=)
16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: IfPsINwRrxd34VBeRIe+GE50/CjGcoN/iwF7+EVNuzM=)
17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: xkM4EMj1nW0jd1U+wxjkYr8i5dZqCvgIU9sDt8QBn+o=)
18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: yfUIFh+TomPlrcVQIlX9VNrU1he+sH0NOx9nr1TTQok=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Mar 2026 00:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:c7:15:fb:f4:93:3c:1a:bc:2e:6e:9d:55:fe:c8:c3:a4:59:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 6 00:01:51 2026 GMT
Subject: serialNumber=f4b76d7a7b4c1d266bd482f0747c23b0a56bf74d01384d9c26f642883d731749, CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1e:51:97:ab:91:99:1a:79:95:1c:ef:8e:6d:
59:88:13:0c:03:f3:97:48:44:d9:00:ac:6c:82:21:
4d:f5:57:44:fd:9c:ad:d1:92:7c:a0:de:48:29:c9:
37:0a:8e:b4:1f:f9:51:a7:38:13:36:19:2f:1f:bc:
e3:61:24:11:2f:1d:a6:96:94:ea:f2:ca:17:df:e9:
c3:01:86:b9:43:0d:d2:75:83:a2:31:32:2e:9e:f1:
4f:3b:e8:dc:29:ae:95:90:19:10:b9:5a:34:05:41:
c4:ac:07:5e:c0:22:9c:ea:39:ed:e4:79:b5:d9:a7:
18:07:70:ad:b7:6e:d0:14:e7:d2:3e:15:8a:b6:9a:
b6:d5:dd:ad:6a:b9:fa:b5:46:fb:81:2f:d9:ee:ff:
f1:05:64:ba:c8:35:5a:29:67:95:b3:ed:ce:d8:8a:
c8:b1:d7:fd:86:49:dc:38:5d:d2:e2:4a:be:de:23:
fa:e3:b2:a6:40:4b:66:4b:89:c0:86:c7:cf:a7:ca:
51:b7:f9:eb:96:4b:88:53:69:b6:1d:13:a1:5f:8a:
b8:db:b4:ee:2b:3e:21:96:f4:84:db:86:82:04:49:
c6:7b:f7:eb:bc:ca:34:f1:7b:cb:fc:ca:51:57:ff:
2e:5a:ee:bc:d5:37:46:fb:a7:15:65:05:6a:68:d6:
42:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E9:95:96:61:45:AF:A6:A2:68:D5:26:D3:44:01:D9:EE:3C:78:20
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c8:e1:3a:90:cf:39:d5:1d:43:af:e1:80:34:68:07:f8:1f:
05:0c:d5:e0:cc:44:ef:75:02:c5:08:a8:b2:be:ac:d2:c9:55:
ad:05:f3:36:6c:26:bf:47:8a:eb:ca:05:da:ad:a7:a0:0f:c3:
b9:f4:9b:cd:d0:17:17:e7:a8:28:1a:10:43:87:2d:f4:93:3e:
c8:e9:dd:c6:7c:27:49:35:dc:64:0f:1b:65:41:70:dc:f8:1d:
69:42:13:53:3e:91:d5:e1:03:a6:7b:74:66:82:18:db:bb:ec:
09:86:81:20:d6:28:0f:e1:c8:28:12:d2:80:ab:d5:03:b3:86:
4b:9f:38:ae:63:52:56:d3:b1:c8:fd:03:2a:2c:08:3c:9c:0e:
43:4b:27:ea:d5:e9:d2:b2:d3:7a:ca:ab:79:ad:23:47:65:06:
60:60:29:67:d6:30:25:24:ca:08:65:ac:9d:c1:5e:5a:6c:25:
31:93:0d:28:89:f6:d6:38:b1:6f:8b:08:c2:ed:80:ef:14:eb:
e6:41:28:da:95:e1:d6:2f:04:60:da:9f:e0:d4:0e:1c:ed:f6:
11:75:a0:e3:cd:cb:62:ed:f6:1e:6a:f9:76:5e:d3:7b:b6:6b:
13:be:bc:88:93:b5:0b:e2:7c:a2:cf:c0:83:97:1a:af:df:36:
a2:41:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:02:21 2026 by rpki-client