This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft File: manifest.mft (raw, json) Hash identifier: PqCNDNVqFIsuc2p5OVOQHtABP/31WY2O8OCR+ENPJqo= Subject key identifier: 8D:55:52:E1:9E:C1:B5:11:70:31:8E:42:23:0E:EF:3C:9D:5A:CF:A4 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 24F3096784756F4D45E91D71D935B4CD38550CAF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft Manifest number: 0529 Signing time: Fri 12 Dec 2025 00:01:29 +0000 Manifest this update: Fri 12 Dec 2025 00:01:29 +0000 Manifest next update: Tue 16 Dec 2025 00:01:29 +0000 Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: SCeMMbGzGvv6HAuSJ/vGpNda2yOvxSSfh11EvOqxjbM=) 2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: hzCGH9Q4CLNRrJO5f/N6TRDpEwXwCSmryCh/GNlDLIY=) 3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: jprlQAJS43dxXhAV+PzgAj4W4F0a0m2+Vy/yPHjLOuQ=) 4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: 7afo5LLkt/dawCqL1w85c3A7fRQwHfF7kMp908Gn4G0=) 5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: 0KQBvN1RE7grhzO1NtsZeBZ2XnIodPRhm+tgqdVJlXU=) 6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: yLSDYWvtNqDhK1vNzzdPN4byDWZTEZsu8BW74vjYoHA=) 7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: IubZRpLe2W06JqfFrohT5K9ByEMF89/I45CBjLIp+UQ=) 8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: onFuUkONqK94T3a48Pkkw7Zj3Q2Ixpu+wEOZPWkUe5Y=) 9: 9d703748-f446-47a1-b0a7-5e3357f2e0d2.roa (hash: yHhTo2zzTs16il8tTHrPT+IjNjDaqMzdbXx4MKJFj8Q=) 10: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: QQ6hAsy5s2iXWDiBdUEQ7zt7IZfb0Qodd5GMwgKFG9o=) 11: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: Fs+4+GueFglWpfh7cWu79LMoO4jnwwFYswhH/hBBpRg=) 12: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: tUfvO1tfzBNVYGTeoObhXIC/xwxMuE3Y0IbH2s5grG4=) 13: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: vrOZ6fYSEHIvtLwk17aBzKsCW/DW0euoAv5ObsTTTxY=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 00:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f3:09:67:84:75:6f:4d:45:e9:1d:71:d9:35:b4:cd:38:55:0c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: Dec 12 00:01:29 2025 GMT Not After : Dec 16 00:01:29 2025 GMT Subject: serialNumber=8ba6d4f836354632cff9389f98c04adbf0f7a01635378effc2842019a05706a8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:09:60:43:da:27:10:09:60:3b:04:6f:b3: 54:5c:91:e2:f1:81:4f:fb:ce:b7:99:cb:06:2c:83: 78:22:ba:47:e4:04:27:f6:55:94:62:d1:dd:e6:17: 76:77:b3:7a:4f:2a:74:b7:7a:ad:a6:d9:af:24:7e: 53:a5:8c:9e:73:a6:82:7f:31:e8:20:1f:5a:0c:da: fe:d8:94:9b:2c:3a:d9:5e:bb:65:eb:6b:8b:3e:b5: 7c:cd:ad:fe:80:17:92:6d:51:b0:d3:dd:8a:77:bd: 15:c2:57:0f:2c:97:79:8c:d5:d4:e1:b2:9a:28:76: a1:44:86:a2:a8:c8:bc:6a:1b:47:a8:e3:65:81:dd: d3:70:8a:ea:b0:cb:24:30:2e:4f:2e:77:62:5e:17: 54:40:11:64:34:7b:92:62:a7:d7:65:71:92:0d:5d: a8:9f:56:5e:3b:77:01:83:73:77:d9:c5:6f:3a:7d: f2:da:d9:7c:79:34:bd:32:30:70:2a:cd:32:56:75: 00:94:30:f0:41:37:d8:c1:da:64:4d:1f:56:d3:6a: 00:7d:99:d3:63:ce:2d:5e:39:45:4d:02:66:bd:09: e4:ee:2f:c4:b6:39:67:28:81:6b:1f:36:fa:fc:49: 20:f3:17:27:c2:ba:68:a7:fd:6b:93:85:1e:ff:ae: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:55:52:E1:9E:C1:B5:11:70:31:8E:42:23:0E:EF:3C:9D:5A:CF:A4 X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d1:f9:4e:d7:bb:bd:5b:9d:30:95:3d:42:f5:cc:a7:7d:ea: c3:0d:4e:41:dd:58:7f:e1:e5:d9:d6:f3:00:f2:49:14:09:37: 8c:8e:a5:c4:a8:d7:d4:cb:b9:a5:aa:9c:db:96:bf:88:e3:ac: 8b:70:0d:d9:ac:c4:ac:14:34:55:63:f5:ba:fd:86:d9:c6:66: 0b:db:99:b3:e1:d9:b5:0c:9b:5f:17:e5:c5:56:07:c2:60:f7: c5:85:d5:95:b7:bc:88:69:99:ab:81:7d:28:57:12:9d:b5:37: 9a:7b:43:84:13:88:c5:1a:d6:21:26:b7:61:44:47:be:9e:bf: 37:b2:58:23:78:4f:fc:d7:8d:cf:be:fc:fe:54:77:89:05:18: 84:4d:e2:5f:fb:55:7e:e8:3f:34:91:49:06:20:4c:e8:cb:19: ae:a9:53:b7:70:42:d7:a0:9a:37:f5:a0:53:44:91:14:6b:fd: 75:9d:fb:b6:9e:11:14:3d:3e:64:73:75:cf:75:eb:b7:5c:99: ab:1d:47:33:8b:15:32:f4:7b:90:42:80:42:a7:ac:98:59:98: 02:dc:45:e8:d1:6a:75:22:b8:74:05:25:69:52:bd:68:f1:08: 5e:f1:57:80:fe:06:1b:5b:33:6a:61:40:9c:da:ad:28:f9:fa: 82:76:73:ce -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUJPMJZ4R1b01F6R1x2TW0zThVDK8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI1MTIxMjAwMDEyOVoX DTI1MTIxNjAwMDEyOVowejFJMEcGA1UEBRNAOGJhNmQ0ZjgzNjM1NDYzMmNmZjkz ODlmOThjMDRhZGJmMGY3YTAxNjM1Mzc4ZWZmYzI4NDIwMTlhMDU3MDZhODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV0JYEPaJxAJYDsEb7NUXJHi8YFP +863mcsGLIN4IrpH5AQn9lWUYtHd5hd2d7N6Typ0t3qtptmvJH5TpYyec6aCfzHo IB9aDNr+2JSbLDrZXrtl62uLPrV8za3+gBeSbVGw092Kd70VwlcPLJd5jNXU4bKa KHahRIaiqMi8ahtHqONlgd3TcIrqsMskMC5PLndiXhdUQBFkNHuSYqfXZXGSDV2o n1ZeO3cBg3N32cVvOn3y2tl8eTS9MjBwKs0yVnUAlDDwQTfYwdpkTR9W02oAfZnT Y84tXjlFTQJmvQnk7i/EtjlnKIFrHzb6/Ekg8xcnwrpop/1rk4Ue/67ROQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFI1VUuGewbURcDGOQiMO7zydWs+kMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1MGJlYzkyNjEvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvMDhjMmYyNjQtMjNm OS00OWZiLTlkNDMtZjhiNTBiZWM5MjYxL2E1YjAxYmRkLWNkZWItNGNmYy04Yzkz LTdlNzBjNWUwOTMwNi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAC3R+U7Xu71bnTCVPUL1zKd96sMNTkHd WH/h5dnW8wDySRQJN4yOpcSo19TLuaWqnNuWv4jjrItwDdmsxKwUNFVj9br9htnG ZgvbmbPh2bUMm18X5cVWB8Jg98WF1ZW3vIhpmauBfShXEp21N5p7Q4QTiMUa1iEm t2FER76evzeyWCN4T/zXjc++/P5Ud4kFGIRN4l/7VX7oPzSRSQYgTOjLGa6pU7dw Qtegmjf1oFNEkRRr/XWd+7aeERQ9PmRzdc9167dcmasdRzOLFTL0e5BCgEKnrJhZ mALcRejRanUiuHQFJWlSvWjxCF7xV4D+BhtbM2phQJzarSj5+oJ2c84= -----END CERTIFICATE-----Generated at Fri Dec 12 18:09:56 2025 by rpki-client