This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 1h9zjEkDTT+CsYBoaFQJofh6ycJaR7gQZmc0iSlNxOM=
Subject key identifier: 03:63:D1:03:1A:FB:B6:98:F5:19:E0:2B:71:66:C7:0C:05:3B:DB:59
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 27F2F5145D3DFEF5675071D8940D5134E41308D4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number: 05BC
Signing time: Sun 15 Feb 2026 00:02:33 +0000
Manifest this update: Sun 15 Feb 2026 00:02:33 +0000
Manifest next update: Thu 19 Feb 2026 00:02:33 +0000
Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: IUS7lMcBWwmctHleQ45weSqCf5SY7ctmk2oM66JmUEY=)
2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: JRXJ76EhN1hTBPJiUCV0pPwXjtlo/Df5evwhbIWEB1c=)
4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: Op4Pxjv4bi/CyLc0yEqiMNSWXCCmLL5vj/qBevLlyto=)
5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: /viX8+pzxtBqPVItYbjRQ8va9EDiRwR/Zgb8KuMClDo=)
6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: IE/QQxiERKhi3QbfE3eOEseq4RILf1okL7GJghbd8cE=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Feb 2026 00:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f2:f5:14:5d:3d:fe:f5:67:50:71:d8:94:0d:51:34:e4:13:08:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Feb 15 00:02:33 2026 GMT
Not After : Feb 19 00:02:33 2026 GMT
Subject: serialNumber=86c59c680a0d2efbe0e6779efb15e9c3ebc361e7436aa813df26c84ba0bbfd11, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:00:e7:a1:6e:25:52:23:19:66:ab:62:65:
62:4a:7b:81:07:f1:6c:25:ab:24:51:8a:28:8a:9f:
74:70:8b:2a:15:0e:6e:a3:19:9c:ce:d5:de:11:de:
55:4c:14:72:65:92:7c:b8:94:2c:9e:d2:8c:b2:88:
fd:38:df:a0:c4:4f:72:d6:06:7d:2b:f8:6e:76:70:
61:e1:b8:77:bd:91:6b:e2:95:fb:7e:b3:41:87:ac:
6a:5b:1a:a8:20:6d:07:ec:79:e9:23:f1:83:12:bb:
9e:9a:3e:b7:77:ba:ee:f3:9f:1c:05:d9:6f:d0:aa:
21:b8:ef:3a:03:db:bb:30:ed:ca:5e:fb:cc:e5:f9:
c3:f6:d1:c7:5e:5c:2d:77:b6:a6:19:6f:32:fe:66:
d5:02:ff:af:3a:1f:e1:0f:5b:07:17:7a:9d:c5:27:
c6:07:75:7e:bf:33:23:df:06:16:a0:fa:6a:0d:a3:
7c:5b:17:8c:86:a7:fa:01:1b:18:a1:97:1a:2f:27:
05:6f:63:42:ea:59:1c:72:12:71:fd:7a:6c:4b:58:
c3:c0:b6:3f:a4:e0:70:ea:7e:90:b0:12:1b:22:f3:
eb:92:04:fb:9b:4d:5f:f3:98:54:6b:d0:f8:b4:32:
53:de:71:5a:b9:ec:d3:ec:d0:60:92:f2:62:ee:e9:
e0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:63:D1:03:1A:FB:B6:98:F5:19:E0:2B:71:66:C7:0C:05:3B:DB:59
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c3:01:7b:54:9b:16:48:5b:46:18:93:5f:30:93:94:24:29:
d3:1c:42:44:79:a8:79:60:c3:26:be:12:e0:fd:da:38:fd:2c:
77:75:45:c9:99:2e:fc:30:58:bd:f8:bf:00:d6:d8:4c:bf:af:
9f:6d:ea:2f:1b:75:05:68:ea:bc:2c:30:d1:f9:c8:33:39:a3:
59:bf:b2:91:bd:1f:a0:1e:05:32:c6:7f:22:1c:8e:5c:33:e4:
15:e7:6f:98:ce:88:c2:b7:81:bb:c5:d6:16:c5:04:2d:77:da:
ae:d6:5a:13:a3:72:94:72:ea:51:d3:dc:c5:a8:44:15:41:20:
4f:1b:0c:50:b9:bf:3e:c5:c7:ec:04:77:db:b0:04:de:dc:4f:
13:4a:b2:52:ab:6b:ec:d4:37:4e:97:f4:e5:77:01:e5:63:da:
00:29:55:98:61:ee:93:7b:47:c3:6c:42:d5:53:92:cd:10:6d:
c2:ec:b4:19:c1:b9:f2:af:db:de:43:40:4f:fb:5e:4c:68:bb:
e9:a1:38:0f:ce:f9:d1:9f:4a:b2:c7:a6:b0:ff:70:42:f9:e5:
aa:4f:34:ce:02:8a:29:2b:cd:ff:5a:52:84:23:da:b9:02:68:
a6:9b:ec:1e:28:17:e3:4f:c9:af:26:56:07:04:2d:d5:5a:40:
80:ce:0e:15
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUJ/L1FF09/vVnUHHYlA1RNOQTCNQwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4
ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDIxNTAwMDIzM1oX
DTI2MDIxOTAwMDIzM1owejFJMEcGA1UEBRNAODZjNTljNjgwYTBkMmVmYmUwZTY3
NzllZmIxNWU5YzNlYmMzNjFlNzQzNmFhODEzZGYyNmM4NGJhMGJiZmQxMTEtMCsG
A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAwA56FuJVIjGWarYmViSnuBB/Fs
JaskUYooip90cIsqFQ5uoxmcztXeEd5VTBRyZZJ8uJQsntKMsoj9ON+gxE9y1gZ9
K/hudnBh4bh3vZFr4pX7frNBh6xqWxqoIG0H7HnpI/GDEruemj63d7ru858cBdlv
0KohuO86A9u7MO3KXvvM5fnD9tHHXlwtd7amGW8y/mbVAv+vOh/hD1sHF3qdxSfG
B3V+vzMj3wYWoPpqDaN8WxeMhqf6ARsYoZcaLycFb2NC6lkcchJx/XpsS1jDwLY/
pOBw6n6QsBIbIvPrkgT7m01f85hUa9D4tDJT3nFauezT7NBgkvJi7ungrwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFANj0QMa+7aY9RngK3FmxwwFO9tZMB8GA1UdIwQY
MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp
QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi
NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm
LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBACjDAXtUmxZIW0YYk18wk5QkKdMcQkR5
qHlgwya+EuD92jj9LHd1RcmZLvwwWL34vwDW2Ey/r59t6i8bdQVo6rwsMNH5yDM5
o1m/spG9H6AeBTLGfyIcjlwz5BXnb5jOiMK3gbvF1hbFBC132q7WWhOjcpRy6lHT
3MWoRBVBIE8bDFC5vz7Fx+wEd9uwBN7cTxNKslKra+zUN06X9OV3AeVj2gApVZhh
7pN7R8NsQtVTks0QbcLstBnBufKv295DQE/7Xkxou+mhOA/O+dGfSrLHprD/cEL5
5apPNM4Ciikrzf9aUoQj2rkCaKab7B4oF+NPya8mVgcELdVaQIDODhU=
-----END CERTIFICATE-----
Generated at Sun Feb 15 20:46:43 2026 by rpki-client