This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          lSKCROXCPutMYc+g7DMqWUhwCKx1Tmcu552M+PFeZxc=
Subject key identifier:   47:43:D8:44:92:4D:FA:AB:10:AA:48:63:6C:9A:BF:D8:22:A5:30:0C
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer:       /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial:       029C8FEB6DC36FCD10C1862AFF7A04EFBE757013
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number:          05A1
Signing time:             Mon 19 Jan 2026 00:14:54 +0000
Manifest this update:     Mon 19 Jan 2026 00:14:54 +0000
Manifest next update:     Fri 23 Jan 2026 00:14:54 +0000
Files and hashes:         1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: FjmFiKE6rDzUEgiJGmKyPJZrZN3mn67N9W4aSIgkyTg=)
                          2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
                          3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
                          4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
                          5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
                          6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Jan 2026 00:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9c:8f:eb:6d:c3:6f:cd:10:c1:86:2a:ff:7a:04:ef:be:75:70:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Validity
            Not Before: Jan 19 00:14:54 2026 GMT
            Not After : Jan 23 00:14:54 2026 GMT
        Subject: serialNumber=6d5d5e67ff992b19c1de1ba821fbea51939cb767aded42d7a637a22d6c4ef8cf, CN=bb9a9116-f615-462e-a680-5266b327e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e0:e2:0d:b0:41:49:6c:2f:e0:0a:af:b3:86:
                    a4:2d:0e:87:68:dc:8c:3e:54:8e:82:88:54:ef:19:
                    f0:3a:7e:07:04:eb:94:e0:07:8c:fd:4b:00:df:90:
                    a4:4c:3f:ac:f4:93:3b:e8:6f:81:be:2d:09:64:66:
                    db:c6:13:ec:f8:65:31:f4:97:04:d2:fe:41:e8:62:
                    44:04:5a:0f:09:c5:20:d6:78:7a:9a:f0:f4:94:17:
                    a9:dd:5a:d3:9f:1d:cb:b1:21:a3:60:d9:27:d7:10:
                    cc:d2:e6:55:31:f6:e3:a8:17:39:67:49:2b:bd:4b:
                    86:a3:ad:91:86:4c:d1:f2:a8:fa:12:b3:4b:6c:23:
                    75:61:d6:58:33:4c:c2:5e:f0:b3:99:60:09:8a:1a:
                    45:47:d4:d8:46:4d:62:05:6f:ce:2d:f5:d4:69:97:
                    5a:76:3a:62:f1:69:6b:85:86:7f:06:7c:b3:d8:be:
                    ca:c6:07:7a:ab:da:99:d8:60:98:4a:d2:ae:91:05:
                    a2:e5:aa:2b:57:9e:dd:d4:21:fe:df:ed:d9:ce:10:
                    d2:31:04:86:e0:f5:fa:60:ab:1b:12:0c:72:55:37:
                    06:80:3e:cf:b4:41:e0:dc:09:ee:5b:b7:57:1b:2d:
                    f7:e9:52:e1:e2:3f:47:bd:57:a6:ca:4d:8c:83:89:
                    00:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:43:D8:44:92:4D:FA:AB:10:AA:48:63:6C:9A:BF:D8:22:A5:30:0C
            X509v3 Authority Key Identifier:
                keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:91:e5:91:a0:69:57:e0:28:43:62:d0:ab:c0:10:93:b6:e7:
         4e:a4:89:94:99:30:b0:fc:3e:f4:04:fa:9a:cc:6d:10:e2:f0:
         78:16:f1:4b:fd:b6:64:38:92:12:13:b0:57:8a:6f:a8:a6:0a:
         20:03:f5:49:be:e5:f5:be:8f:4b:ad:29:85:e1:4e:d4:2b:fd:
         4c:fe:d1:8e:de:a9:2e:ac:31:0a:78:5d:3c:f3:d3:92:ba:ed:
         43:ee:d5:b1:87:46:d7:96:66:ec:b2:43:c6:8c:a4:f9:eb:45:
         34:16:e8:64:fe:51:65:5b:1d:e2:0c:17:50:de:21:80:a4:ba:
         9c:ca:fd:db:ae:54:5b:94:43:c0:d6:20:f4:69:3e:73:de:4e:
         9e:e0:0d:66:bc:c0:50:ed:b2:67:77:91:f6:8b:a5:ca:c8:0a:
         6a:e4:df:7d:c3:eb:c6:6b:4c:5d:9e:a4:60:fb:8b:99:bc:31:
         d2:cc:41:b6:4a:22:13:9e:68:95:67:70:37:46:17:f7:72:74:
         e6:5c:b3:8a:98:32:1e:c8:46:8b:91:17:c8:eb:bd:3e:2e:34:
         39:d1:36:19:db:b4:2e:1d:0f:4d:2b:19:b3:cf:c3:4d:a9:08:
         91:fb:98:09:d4:26:6d:38:bd:66:c7:c6:d3:12:9d:00:21:76:
         f9:5b:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----