This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: bGsRTVdjSmfUi9gvfh7bAAL1iKwcZGEKl5Y+o2C8Z34=
Subject key identifier: 34:F4:5E:70:0C:E6:CC:15:F3:CF:54:03:CF:2C:42:9D:19:8A:40:51
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 45B88E0CF1DD09F6637109623D45FDBD5841086E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number: 05AE
Signing time: Sun 01 Feb 2026 00:18:45 +0000
Manifest this update: Sun 01 Feb 2026 00:18:45 +0000
Manifest next update: Thu 05 Feb 2026 00:18:45 +0000
Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: mIfX50X3zNSPADhyxU1KGOFkrz0oLEPFrk+a1xfJ23E=)
2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Feb 2026 00:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b8:8e:0c:f1:dd:09:f6:63:71:09:62:3d:45:fd:bd:58:41:08:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Feb 1 00:18:45 2026 GMT
Not After : Feb 5 00:18:45 2026 GMT
Subject: serialNumber=96df3050135af939d081142aba249a5b42e7b5d63d2c82b19b5f1664c854553b, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:82:04:a1:60:e9:01:0e:e6:d5:eb:93:14:79:
bf:3f:e4:f0:cf:2f:22:c0:70:83:a0:5a:f3:31:1c:
4c:70:54:f8:12:d1:39:d0:21:e6:bf:dc:64:52:ae:
25:98:5b:d1:18:dd:18:43:75:56:84:4b:69:54:89:
40:2b:8e:4d:52:aa:fe:dd:ae:91:07:38:ac:32:e4:
25:cc:60:11:22:2b:95:d8:ee:1f:b7:7e:2e:94:64:
e5:55:b5:8a:be:14:9f:94:ed:4c:82:0c:d3:6e:18:
04:44:48:55:53:da:24:53:f1:f2:86:1e:5d:fe:3d:
9a:e8:7f:f1:74:fd:2e:74:4e:83:d4:b9:16:1c:60:
62:02:14:c0:1d:6e:fc:4b:12:5f:45:d2:ef:a9:a5:
58:ab:88:64:20:85:0b:16:07:fd:13:61:1b:84:51:
26:8f:26:c9:9f:8b:b1:c6:c5:a7:85:83:69:4a:e9:
29:5c:94:bf:18:16:48:3a:6a:fb:5b:c8:49:39:ab:
a6:ca:97:8b:ee:dd:e1:e0:2b:b8:bb:34:f5:2c:58:
c5:be:86:59:8a:b8:32:28:9d:8b:e3:c6:a3:4a:95:
d0:29:13:1a:f1:72:6d:1a:e7:cc:53:b9:02:3f:c1:
f0:dd:42:69:c2:03:81:b0:e6:d3:19:c5:9d:0d:fd:
1a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:5E:70:0C:E6:CC:15:F3:CF:54:03:CF:2C:42:9D:19:8A:40:51
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0b:a3:95:89:41:d6:6a:06:14:e2:30:25:68:32:6e:45:f5:
a3:8d:33:10:ba:16:d8:6a:1e:cd:3d:81:fd:32:41:17:db:21:
8e:44:0d:74:da:14:c4:41:7a:dc:b8:51:70:6f:43:19:45:46:
6c:e2:41:bf:46:c5:4f:ee:54:83:cf:f2:1a:c7:54:de:d7:7e:
46:0a:08:57:48:d6:0e:ab:e0:9a:6d:84:16:ec:cf:af:7d:9a:
dd:7a:36:77:b2:03:2f:3c:13:86:de:6a:91:63:5f:90:0c:e3:
30:bf:24:ab:22:b4:af:a5:46:cf:c0:d9:47:69:ce:12:49:a2:
2a:ee:b7:3c:b7:eb:11:41:45:2e:63:ee:f5:1c:b4:8c:57:bd:
2e:0b:4b:54:98:f3:03:4b:41:dd:24:81:e0:2c:a6:5c:78:02:
a5:89:6a:3c:77:7f:d3:7d:65:2c:12:29:ca:d3:2c:f2:b8:2a:
b0:8c:53:07:0f:ba:8e:84:6e:fe:e3:34:10:72:fb:3c:b3:5b:
0c:4b:73:f6:a9:2b:68:39:7b:86:23:d7:de:dd:66:75:b1:6a:
64:7f:07:84:41:8d:ad:6e:c5:3f:a9:9b:7f:1b:4f:05:9d:67:
91:04:b8:7f:c3:54:4d:eb:93:c8:90:b3:b7:36:76:17:af:d6:
c5:c7:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 1 21:52:38 2026 by rpki-client