This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          i9bFBa3EqjYyVmlHUCRm0aps/a5w2z4FA2Gmsseew3M=
Subject key identifier:   3F:78:6A:22:C8:79:47:5B:86:B5:0C:0A:D6:82:7D:3D:96:9E:D1:02
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       3F71F36D9A9ABCDD87EFEC53EC453CE0D306A8AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number:          056C
Signing time:             Sun 15 Feb 2026 20:38:07 +0000
Manifest this update:     Sun 15 Feb 2026 20:38:07 +0000
Manifest next update:     Thu 19 Feb 2026 20:38:07 +0000
Files and hashes:         1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: SCeMMbGzGvv6HAuSJ/vGpNda2yOvxSSfh11EvOqxjbM=)
                          2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: hzCGH9Q4CLNRrJO5f/N6TRDpEwXwCSmryCh/GNlDLIY=)
                          3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: jprlQAJS43dxXhAV+PzgAj4W4F0a0m2+Vy/yPHjLOuQ=)
                          4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: 7afo5LLkt/dawCqL1w85c3A7fRQwHfF7kMp908Gn4G0=)
                          5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: 0KQBvN1RE7grhzO1NtsZeBZ2XnIodPRhm+tgqdVJlXU=)
                          6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: yLSDYWvtNqDhK1vNzzdPN4byDWZTEZsu8BW74vjYoHA=)
                          7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: IubZRpLe2W06JqfFrohT5K9ByEMF89/I45CBjLIp+UQ=)
                          8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: onFuUkONqK94T3a48Pkkw7Zj3Q2Ixpu+wEOZPWkUe5Y=)
                          9: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: 97oBLGiBeHgP5i+Hb+ir5CaiE8WLEfbvbE8FYSr1CoU=)
                          10: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: Fs+4+GueFglWpfh7cWu79LMoO4jnwwFYswhH/hBBpRg=)
                          11: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: ntuPLViiaJGatIFvogVdq5Wl8TdNZ2/N5+5/fg06tSQ=)
                          12: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: vrOZ6fYSEHIvtLwk17aBzKsCW/DW0euoAv5ObsTTTxY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Feb 2026 20:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:71:f3:6d:9a:9a:bc:dd:87:ef:ec:53:ec:45:3c:e0:d3:06:a8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Feb 15 20:38:07 2026 GMT
            Not After : Feb 19 20:38:07 2026 GMT
        Subject: serialNumber=7f412d2e2bbf6d84f74d942058cbb884ec7c1444e8ed93561ea9c2e9aa4576a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:b2:76:77:43:a8:cd:f7:1d:7b:b6:2b:38:
                    26:91:72:d9:7a:96:cb:64:9c:b2:f0:5e:76:44:1d:
                    bc:28:20:18:80:f7:f5:0a:e6:b8:85:f9:1a:4c:86:
                    09:65:e8:a5:f6:3a:d2:e0:12:42:dd:e8:dc:f5:91:
                    2d:92:dd:75:fc:f8:7c:b9:e1:41:96:d9:f0:c3:cf:
                    40:75:77:e0:85:67:1d:d1:99:02:b4:4f:12:29:f9:
                    c9:58:47:76:57:49:d8:40:d7:11:85:ed:41:47:ca:
                    c9:87:7a:a4:5f:58:6c:4b:3d:2a:c0:47:c9:c1:f9:
                    ca:62:59:6d:7f:77:62:f7:a8:61:90:5a:32:a2:da:
                    ba:db:73:87:79:d1:d5:6b:98:08:93:8c:c9:e6:f7:
                    ee:20:e4:c1:b5:0e:a1:7e:47:e5:ba:63:db:0e:23:
                    6d:5d:e6:a0:dc:46:27:55:fc:fa:ea:bc:33:09:c1:
                    16:7f:7e:c9:d2:65:85:26:43:f5:6b:2d:5e:f9:11:
                    f2:a1:44:f6:58:fd:67:08:34:91:73:bd:fd:8c:2d:
                    46:4d:8e:8d:a4:32:42:41:dc:57:4e:f7:35:0a:6b:
                    2a:55:d3:bf:11:21:78:2b:71:ad:66:bd:98:d8:cf:
                    97:3e:bf:06:6c:f4:b9:d0:a1:39:e3:89:28:b9:79:
                    2f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:78:6A:22:C8:79:47:5B:86:B5:0C:0A:D6:82:7D:3D:96:9E:D1:02
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:89:d1:c5:22:a0:02:c3:2d:a9:8c:c6:fd:ed:0f:b9:6b:
         9a:26:b2:e8:e9:dd:46:3d:3c:d6:dc:b1:3b:ef:05:ed:4a:aa:
         9b:88:e2:7e:8f:2f:14:61:f0:7d:26:44:29:c7:fb:92:37:34:
         de:13:7b:30:ab:40:67:58:1d:57:b0:3f:68:cf:91:e4:c8:be:
         bf:c7:ba:28:cf:e5:5c:95:c6:05:7a:41:a4:e3:49:61:01:c6:
         61:37:24:77:b3:87:3c:93:d1:ff:22:df:3f:ca:48:20:22:cc:
         c5:7f:d6:d1:3c:67:af:6a:56:1e:30:6b:9c:6b:c0:af:1a:8d:
         d2:c2:2a:91:8c:6d:7f:9d:ba:bb:b1:99:e5:24:b2:f8:96:97:
         43:62:78:6b:ac:d6:ef:ce:46:00:15:78:e3:a5:f6:b9:07:1b:
         03:63:19:ac:c4:8e:9e:78:42:9d:94:d8:9c:23:b7:6e:31:04:
         6c:36:d0:31:b2:32:19:68:93:82:fc:34:0e:9a:51:fb:04:f7:
         26:ad:05:0d:6f:bb:c9:50:d1:68:c1:f3:cc:f3:0c:c3:41:ab:
         60:21:f1:9d:53:5e:73:84:65:a9:e6:7e:ce:58:2a:bd:31:80:
         ca:cb:67:3e:dd:55:6e:96:01:82:83:9c:62:18:14:a7:49:0f:
         9f:45:09:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 16 08:07:14 2026 by rpki-client