Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          5G9Q5TIKDBwG+UBNDXtGL66hEGlDaIBnlIFcsV4HpAM=
Subject key identifier:   1F:CC:87:C6:25:86:C2:C8:33:68:59:42:D4:9E:2F:92:19:40:FA:77
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer:       /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial:       5AA1739DE6713F158E3C93435B78E596C6F0699C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number:          05EB
Signing time:             Wed 29 Jul 2026 00:03:00 +0000
Manifest this update:     Wed 29 Jul 2026 00:03:00 +0000
Manifest next update:     Sun 02 Aug 2026 00:03:00 +0000
Files and hashes:         1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: Tq3fF/a7OvBkU3g4aoOjzGeIopJptNOAvtshIuCffME=)
                          2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: IybdQRuGKUz+LbkBrptFU/9JKaJTr8Dn8X3VCAKzJNE=)
                          3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: 5JBx3U3yROg9e1Wa4wZ6pBktVXmoZ2pDGJ03dT+dcwg=)
                          4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: sweULcZjHPT8IwxPRaLVa8xz7kL7MLaA+OqEV/RFsD8=)
                          5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: SBbAMoRoCEcPLDNU3aRXyoFbsg+b2tGAIka8WO5y1qA=)
                          6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: gvyzuHo1Rq2CUm3xPRJ3/SMJriiWd/xSrtjuBGswy9A=)
                          7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: QG3zvrKKXmxLv+GVXi5B7E0Z2ufvNvdW7NKfX0GmA4U=)
                          8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: fYYnNyZky/qrlLWP5S8zSm2v17ULDsXYq5Y9Nh1hza0=)
                          9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: 0bccoyrrSAP75JG6xXZ8Fe7+BBYWS3PxkDPJ2y67peE=)
                          10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: 4UuC+OYJXwgl+ZOhdImkz2/tYQnFq/fxM6y2ExbbwJc=)
                          11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: t5iHZ0YZekzmfq0y+PhVUngf/qO+t6VtPofs+84y//8=)
                          12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: uA3ZeD81Ey+SQMUY6max8Ur1zQBSW7JWHCluKDYrMdY=)
                          13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: 8rTp6mbrD5rf+jzY3ic4O1UnEJSQtRUpgFi5WUndeBY=)
                          14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: Dcm8WyP+tRkJzCNAbotVujAO0N7AZKefgHJLgDm17rM=)
                          15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: Gc4Egy67JM0d/HEcfrgEvgnyi7RS8L58SIDhvgQi9/c=)
                          16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: 8rR2NDI380wGgc15cYW7w6lGnHDb3tV92XlKn9SGrDM=)
                          17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: boMsB6m0tXlf5cEYATl81Y1PhDlDlwgP1NKoYJsEPT0=)
                          18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: Pa8aH+K3CqvEc4N5b1Bw5FQ7b2xwh+Ahb5pfwMJk73M=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Aug 2026 00:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a1:73:9d:e6:71:3f:15:8e:3c:93:43:5b:78:e5:96:c6:f0:69:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
        Validity
            Not Before: Jul 29 00:03:00 2026 GMT
            Not After : Aug  2 00:03:00 2026 GMT
        Subject: serialNumber=270e08ea87f9cc5a80b2d13971d0fa424528941fda9a493f027eaebcdec3bb2f, CN=58810403-9ba0-403a-809b-c78252ab7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:91:6b:02:5a:f0:9e:cc:a4:1c:9a:a4:b3:6b:
                    54:35:cc:c3:69:1d:e4:cb:3d:9f:eb:68:bc:2e:07:
                    91:fa:e2:ea:dc:32:ea:10:66:85:ef:52:2a:82:88:
                    98:cb:1e:69:e3:00:3e:94:e2:18:37:97:02:91:1f:
                    4a:dd:5a:db:70:a9:38:d6:e9:c0:ad:30:38:d7:14:
                    b5:cb:1e:50:fa:b5:6a:21:da:36:85:0f:98:0e:b5:
                    45:25:66:9b:56:8c:8d:ae:16:ae:06:31:d3:c3:9d:
                    bc:94:d6:f4:a2:d5:43:52:37:20:5d:f8:fc:d1:5c:
                    0b:2d:25:16:bb:0c:42:79:25:3c:d8:e4:c4:32:88:
                    11:87:10:f2:85:49:8d:5a:ee:0d:ea:7e:61:20:cb:
                    82:58:d6:d7:c5:e6:14:16:dc:ec:3e:88:5d:05:a5:
                    f6:f1:ff:7d:48:b8:40:5c:39:50:9a:10:65:28:77:
                    b2:2e:6f:2a:1e:dd:d8:c6:56:31:29:9f:f5:18:74:
                    09:ab:e7:42:1f:2c:fd:7a:dc:39:c6:90:c9:c8:a3:
                    9f:d9:56:9e:e1:46:99:4c:a5:7d:aa:26:7f:96:2b:
                    83:01:cf:31:72:1e:28:77:ed:ff:a7:ac:b8:cc:59:
                    9a:39:24:15:e0:0f:15:d7:f2:38:7e:d5:42:bd:15:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CC:87:C6:25:86:C2:C8:33:68:59:42:D4:9E:2F:92:19:40:FA:77
            X509v3 Authority Key Identifier:
                keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:4e:51:c4:e5:8a:cd:86:7d:d4:1f:96:12:46:36:5c:23:
         80:27:01:eb:4c:c6:1a:94:2b:6d:42:65:de:2e:a2:fc:30:e8:
         03:37:2c:80:be:a6:3d:d8:7a:c7:ed:3d:38:71:ce:a4:f8:4a:
         8e:0a:94:29:c0:8e:32:fa:2f:d7:90:3e:df:76:1e:63:0e:8e:
         cf:5e:bb:c6:41:9a:be:ff:97:47:f0:09:cb:06:e8:25:bb:76:
         dc:29:4c:5f:f8:2b:c4:87:cb:03:66:27:5d:e2:cd:1a:7e:b7:
         22:97:d3:91:7c:7c:1c:4b:64:98:1f:1a:15:17:a3:9a:dd:71:
         c6:2a:e9:62:fd:57:c7:7f:59:dd:31:d9:a8:20:5d:90:19:17:
         6b:96:6f:0a:ff:8c:05:60:67:fe:46:b1:aa:36:84:b8:11:c0:
         ea:83:94:25:b8:01:bc:78:c0:96:f6:dc:72:f7:fa:0c:af:d8:
         26:92:04:15:51:55:24:d9:57:94:a7:36:6c:80:40:ed:3c:60:
         94:93:26:34:e8:18:cd:6d:e6:a4:27:21:ee:4b:60:e5:49:a2:
         ed:c6:be:65:83:f4:3f:dc:6a:ac:d1:d3:90:98:5c:ef:23:04:
         f5:ab:c5:63:1a:81:a8:2b:be:9b:81:14:70:7e:25:73:3c:b9:
         e1:ac:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:31:48 2026 by rpki-client