This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: Pxx7OyGerY85v2OhOLU9A60lhz05W9UsPMF4OB8FwJI=
Subject key identifier: 8C:79:A4:BA:9E:61:E8:3D:8B:59:12:4B:98:A1:6B:3A:52:05:5F:F2
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 24529EACCE2BCAB9FD3AC990E80B5854A310E09F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number: 05B0
Signing time: Tue 03 Feb 2026 00:19:31 +0000
Manifest this update: Tue 03 Feb 2026 00:19:31 +0000
Manifest next update: Sat 07 Feb 2026 00:19:31 +0000
Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: g5JV+jKwyQs3XdIsOeQpN+N/Je86E58nQhAIiBfarcM=)
2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 07 Feb 2026 00:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:52:9e:ac:ce:2b:ca:b9:fd:3a:c9:90:e8:0b:58:54:a3:10:e0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Feb 3 00:19:31 2026 GMT
Not After : Feb 7 00:19:31 2026 GMT
Subject: serialNumber=6540e8abb9522ee516bf2d9649d8585347ab9fd628509cdeeff7eaa9b6716393, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:91:e8:33:1e:b2:d2:e5:3f:25:b5:43:74:
77:52:79:16:82:38:f2:69:2f:b9:35:95:dc:e2:43:
6d:d6:86:ae:96:6d:fb:ab:ef:0b:ba:4c:53:5d:0e:
8a:78:f1:37:d7:82:fe:64:97:c9:0e:88:5e:56:e1:
3f:35:28:aa:c3:d2:d0:61:82:41:22:66:91:91:2b:
fd:df:81:3f:5c:6f:b7:d0:1c:c8:06:a5:33:93:a1:
02:18:8c:5c:af:60:ec:95:b1:b1:df:fe:37:e6:63:
44:00:5e:c1:21:ca:eb:d2:dc:a6:e3:df:e8:82:81:
67:cd:c3:61:04:1a:36:5f:99:56:2e:fc:32:04:39:
48:28:79:d8:d7:d3:7f:ad:01:c8:0a:8b:59:51:e5:
d0:df:6c:45:e6:0d:bb:d8:27:d9:5b:54:7a:4f:b0:
aa:58:3b:69:de:f6:82:1d:22:af:4c:f0:43:12:9b:
e1:d0:64:7e:08:20:a9:9e:3e:d8:af:61:e9:14:c0:
21:1b:75:00:d8:2d:71:a8:5f:5a:dc:de:b7:32:c1:
d3:f1:72:24:ab:aa:e5:22:b4:d2:06:61:d6:91:3d:
07:79:a2:e9:04:63:7a:a4:89:db:c3:9e:8c:e3:11:
37:1e:9b:ac:4e:43:1c:d9:02:b8:13:c6:ee:ed:55:
8a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:79:A4:BA:9E:61:E8:3D:8B:59:12:4B:98:A1:6B:3A:52:05:5F:F2
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:03:35:26:f8:b8:93:c8:41:67:a2:6b:d9:fa:0b:32:c2:25:
d5:ae:5d:94:9b:52:08:8a:32:07:6e:43:48:ee:d0:e6:9d:54:
81:14:19:db:72:a4:f1:42:aa:77:ab:fa:9d:2c:3c:22:ce:1c:
58:e8:dc:4c:4d:33:95:92:78:c1:5c:a5:47:bc:3d:07:40:52:
86:e9:04:7e:bf:b3:bf:01:f4:1b:a4:7e:df:e7:31:49:40:ca:
20:ee:69:bd:2d:10:f4:68:3b:e8:5c:6d:0c:0b:1b:86:06:f6:
df:ee:11:97:f0:86:cb:53:d1:af:d6:aa:6e:ef:9c:79:93:cb:
3f:c1:5d:e8:17:50:fb:2e:96:bd:05:78:19:e2:26:ed:77:50:
0e:6a:ab:47:79:c3:c8:9f:2a:24:07:a5:8c:da:0a:39:1e:9b:
06:f8:b7:ca:ea:00:d0:cc:1b:1e:65:73:76:d2:57:ee:0d:fd:
19:57:e0:98:42:08:50:53:62:8c:12:5a:2f:0e:b9:3e:4a:51:
79:56:93:b8:c6:ea:bc:1f:7b:c0:25:6b:43:1c:89:c7:9b:f6:
0d:73:c5:ea:65:ad:0c:a8:89:96:2d:7d:7b:05:dc:cd:4a:71:
a2:d8:55:6b:3c:2b:ac:e3:19:6e:c2:f2:0b:77:d0:1e:c4:1b:
71:2f:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 13:59:30 2026 by rpki-client