This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: MIMlqTugTjlUgrfKtsIRT4aiNjmJmQ8R+Q8l3K0YL+0=
Subject key identifier: DB:FD:10:DD:16:B7:DF:13:B8:37:D4:94:2D:07:98:5B:CA:C9:4A:56
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 367EEA721BDB2197BF07587F5C65E6A25F04E149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number: 05AF
Signing time: Mon 02 Feb 2026 00:19:16 +0000
Manifest this update: Mon 02 Feb 2026 00:19:16 +0000
Manifest next update: Fri 06 Feb 2026 00:19:16 +0000
Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: Ec9yoc8XlFaWXMZFhzL25iaR7B8NrPrUkaSnL71ozDM=)
2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Feb 2026 00:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7e:ea:72:1b:db:21:97:bf:07:58:7f:5c:65:e6:a2:5f:04:e1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Feb 2 00:19:16 2026 GMT
Not After : Feb 6 00:19:16 2026 GMT
Subject: serialNumber=1978b992b51c3e54e0e9e82839750842acb90b1f4641c18b4f4f0d4e0a3d6d7e, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:61:5a:c9:6a:88:df:13:6f:b9:77:61:e9:12:
d1:fa:4d:b7:2e:3b:fb:b4:0c:41:fb:9f:9b:df:c6:
76:37:c7:86:48:4b:75:5a:60:2d:b2:ff:86:bb:19:
9a:3e:18:98:3a:9c:ba:d1:95:6c:bb:ee:7d:ab:f6:
bf:a0:be:87:5d:de:1c:70:4c:c8:ed:7d:44:02:e9:
a2:f9:b0:b1:fa:26:50:01:ed:25:2b:cd:96:60:6f:
b2:f5:88:25:19:02:e8:98:69:58:07:4b:6b:97:f8:
13:a4:d6:c6:f8:41:ef:e1:f3:69:98:7f:9b:a3:84:
e6:66:8b:fa:5e:11:55:9d:72:32:c9:a5:ef:91:8e:
aa:12:61:3b:51:ea:5d:db:d7:14:09:84:4e:b9:a1:
75:12:4d:ea:6b:56:c4:35:b8:a5:62:8e:79:ba:f7:
eb:50:c1:ff:1f:5c:d2:28:f5:f4:b5:79:ff:71:78:
05:73:8c:95:e7:dc:16:5e:66:a9:7d:92:71:9e:1c:
4d:c8:2b:ab:70:6a:90:bb:f1:7b:f3:cb:19:ce:00:
50:73:da:37:07:16:f6:02:2f:1f:63:e7:1e:9e:d5:
cd:ef:a3:bc:3d:2a:71:df:1c:a3:bc:a6:7d:69:0c:
17:47:81:a5:9a:c9:06:e5:1d:4f:82:70:b4:32:fe:
b3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FD:10:DD:16:B7:DF:13:B8:37:D4:94:2D:07:98:5B:CA:C9:4A:56
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:da:74:86:00:00:58:aa:73:12:12:d5:ee:ed:a5:c5:ae:51:
68:64:3a:3b:bd:b9:f8:c2:08:c2:6f:0f:97:16:c5:6d:cd:f0:
f2:93:fe:14:94:0b:13:89:3b:98:aa:2d:ee:2d:26:7e:e7:a8:
e6:c5:38:25:cf:80:37:81:45:80:bc:a8:b5:3d:c2:e2:89:2d:
16:5e:5a:b9:39:91:d7:34:1c:07:81:a8:52:02:ff:68:33:bd:
c0:0f:c7:3e:a3:01:a5:43:71:0e:0d:61:3e:80:21:f7:1e:41:
9e:8e:19:af:45:e6:42:55:70:71:99:d1:ae:2e:69:f5:6f:cf:
c0:3a:22:13:c7:aa:24:e4:11:cc:db:01:35:29:6a:04:b1:08:
37:f9:6b:8f:ed:c6:66:32:88:df:11:f6:0f:eb:c8:86:10:c9:
2a:38:07:56:d2:3d:43:f2:20:fe:ae:ba:8f:2e:1d:ea:c9:6b:
3c:8a:f4:a4:97:29:b0:8f:83:c7:47:25:a6:0c:2c:34:19:a9:
80:d8:23:99:d8:29:e3:e5:aa:ac:74:db:9b:cc:24:78:c1:e7:
13:d9:0f:58:a1:c0:f4:2e:ae:3f:2d:86:21:27:ed:61:78:99:
29:53:ea:cd:3e:22:d5:22:49:9b:81:db:52:c0:73:e2:de:9f:
2d:7c:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:35:51 2026 by rpki-client