This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          ZUKUKfGku0eAx+QlTxNQmORKb4XyALtQijIRyFYTRHU=
Subject key identifier:   6B:9C:14:F1:B6:CC:75:28:DE:8C:27:48:35:66:B3:87:E4:87:9C:52
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer:       /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial:       4CA69440E43F4FC49FFCE354A8926F5CEE6CBE27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number:          05B2
Signing time:             Thu 05 Feb 2026 00:20:18 +0000
Manifest this update:     Thu 05 Feb 2026 00:20:18 +0000
Manifest next update:     Mon 09 Feb 2026 00:20:18 +0000
Files and hashes:         1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: wlFHzd3x/xHs2KG9hJKlbxcHNycZZ6SQe3FV8r4xwUg=)
                          2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
                          3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
                          4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
                          5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
                          6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Feb 2026 00:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a6:94:40:e4:3f:4f:c4:9f:fc:e3:54:a8:92:6f:5c:ee:6c:be:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Validity
            Not Before: Feb  5 00:20:18 2026 GMT
            Not After : Feb  9 00:20:18 2026 GMT
        Subject: serialNumber=437bc0be26174e04a11a4864dc34a439a860238300df86ba25c56df31e50468f, CN=bb9a9116-f615-462e-a680-5266b327e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:b8:c5:83:9f:e6:49:43:a7:f6:8d:41:98:
                    0b:bc:dc:65:94:50:c4:37:c0:ba:8d:37:22:55:9f:
                    11:18:27:97:9b:3e:2d:b6:e6:80:be:98:77:d9:6f:
                    74:dd:87:c0:27:41:2f:bb:e6:fc:64:68:cb:0f:fa:
                    35:f8:e3:6c:fb:86:71:bc:88:93:25:cf:b7:ff:b2:
                    cf:69:ee:fc:b6:c2:cf:d2:71:95:36:0d:19:af:25:
                    9f:f4:d3:48:db:38:5e:5c:a9:5a:40:3c:d3:fa:30:
                    a2:5e:3b:d7:f9:10:7a:4a:40:18:5a:0f:6d:1c:5d:
                    f6:88:00:ad:7f:cf:15:f8:6a:83:b2:bb:31:38:07:
                    54:19:8c:ad:69:20:bd:c9:5a:93:a4:de:eb:ea:24:
                    73:01:30:f6:95:4c:1b:2f:e0:55:dd:e5:b2:31:48:
                    7d:4c:35:4f:d1:47:22:e0:61:31:87:59:fd:e3:4c:
                    9c:90:c8:a1:d1:d0:eb:c4:01:b8:a6:6e:8c:f3:45:
                    19:a7:69:d7:43:92:34:86:37:d7:89:a6:a8:df:12:
                    3a:61:b7:f9:de:3b:f3:ad:a8:bd:d7:63:42:33:ce:
                    f3:03:7a:7f:ec:c6:36:6b:08:da:8d:0d:f6:83:84:
                    ee:70:c9:ea:9f:49:c3:8b:60:cb:f8:d3:1d:da:4b:
                    6d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9C:14:F1:B6:CC:75:28:DE:8C:27:48:35:66:B3:87:E4:87:9C:52
            X509v3 Authority Key Identifier:
                keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f1:4c:62:bb:2b:3e:e3:01:f2:7f:63:1b:ef:66:8b:63:e9:
         c6:15:fa:47:af:73:06:f6:99:a4:e5:c0:11:81:d4:d4:50:bd:
         dc:00:99:12:ec:db:66:c0:b7:2f:6b:fd:c6:9d:2a:3b:25:95:
         d5:db:09:2f:24:ea:9d:e7:71:f3:7a:cd:0f:a9:90:60:36:29:
         50:04:c8:aa:1f:ab:09:a7:48:d1:0b:05:cd:c3:0d:ab:27:ad:
         8b:71:81:d9:46:d7:f4:37:fc:d9:7d:4c:6a:08:9a:45:82:e6:
         ed:50:59:04:3d:38:10:78:2e:d5:a5:fb:a2:8a:a9:37:e3:cc:
         8d:d7:e8:dc:6c:85:b6:7e:3f:80:39:f2:05:4c:f8:c9:2b:06:
         fd:7b:e2:e5:cb:0a:60:81:7f:a8:54:70:59:f1:c9:d4:7f:4a:
         0b:c1:22:bc:61:34:10:42:de:dd:9f:8a:09:ca:37:5e:be:43:
         0f:5b:d5:2e:d6:9d:d3:c8:86:17:77:0e:12:da:89:03:0a:ad:
         a8:b1:f6:c9:7a:d4:da:09:9e:68:1a:1f:7f:08:4e:9f:93:8c:
         f0:0b:13:f5:78:da:89:42:a0:5c:26:e8:a7:96:db:38:b9:7e:
         02:27:85:e6:27:97:3a:e4:5f:36:7d:1f:2b:c7:67:59:d0:12:
         a4:55:09:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 17:05:44 2026 by rpki-client