This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          AmL14SdBwBnPjsau19lubWgTSWszpZ0V+d3IvwDgbs8=
Subject key identifier:   DD:9A:A1:65:16:8F:44:BF:A2:A4:69:D6:0E:25:80:D4:7E:7F:F2:EE
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer:       /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial:       0C74D1759E51DDDEE4D5DC51B1DEFFC1469BF91B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number:          05B7
Signing time:             Tue 10 Feb 2026 00:01:26 +0000
Manifest this update:     Tue 10 Feb 2026 00:01:26 +0000
Manifest next update:     Sat 14 Feb 2026 00:01:26 +0000
Files and hashes:         1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 1brAOLwqTsf8cd8JNo2rU1I21HuOEDfvTttsyHDgjng=)
                          2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
                          3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: JRXJ76EhN1hTBPJiUCV0pPwXjtlo/Df5evwhbIWEB1c=)
                          4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: Op4Pxjv4bi/CyLc0yEqiMNSWXCCmLL5vj/qBevLlyto=)
                          5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: /viX8+pzxtBqPVItYbjRQ8va9EDiRwR/Zgb8KuMClDo=)
                          6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: IE/QQxiERKhi3QbfE3eOEseq4RILf1okL7GJghbd8cE=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Feb 2026 00:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:74:d1:75:9e:51:dd:de:e4:d5:dc:51:b1:de:ff:c1:46:9b:f9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Validity
            Not Before: Feb 10 00:01:26 2026 GMT
            Not After : Feb 14 00:01:26 2026 GMT
        Subject: serialNumber=bf59580b61ae249cdf97b4c14e315760085d863f0a350fed1ab3cdfa3c7afeb2, CN=bb9a9116-f615-462e-a680-5266b327e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:83:e0:df:09:79:46:06:02:4d:ad:9f:43:
                    34:ec:f3:7d:24:a8:3d:12:04:99:0b:2d:d9:d3:bb:
                    8d:ea:97:f9:86:41:3a:b5:db:5c:fd:52:93:6c:8a:
                    f3:a2:69:9b:05:4d:d6:b9:58:09:5f:cf:d8:70:b4:
                    dd:31:85:30:7b:13:2a:59:fc:89:ff:98:ca:33:63:
                    2b:66:f9:bc:b0:29:ce:31:fc:df:ea:05:6c:89:5a:
                    90:ae:2c:9a:c6:6c:27:f5:db:7a:f7:34:19:fb:ed:
                    39:cb:dd:9c:95:a3:3f:25:a4:74:90:72:b0:ed:04:
                    cd:2c:fe:7c:da:85:3d:70:e7:43:dc:2d:50:e9:6d:
                    b8:ca:08:0c:9c:c0:1e:a1:2e:e8:00:f0:39:ad:44:
                    60:9b:65:ce:16:5f:d7:b0:09:d3:8a:5a:99:27:88:
                    a6:93:a7:4f:42:44:4d:14:70:bb:b0:a5:76:7d:69:
                    bd:0d:0f:fb:f5:d4:64:73:e3:06:bf:14:d0:e7:26:
                    1e:3c:a8:e0:ae:b4:5b:1b:0e:95:8a:0a:1d:d3:d2:
                    98:0a:fb:a5:68:61:71:50:39:1d:c1:98:ac:96:42:
                    76:38:b3:46:23:25:45:ed:c9:62:54:0e:a8:de:6d:
                    e7:6d:c5:33:a5:b0:12:3d:23:df:b5:62:85:d5:aa:
                    52:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9A:A1:65:16:8F:44:BF:A2:A4:69:D6:0E:25:80:D4:7E:7F:F2:EE
            X509v3 Authority Key Identifier:
                keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:70:c3:76:bc:b5:a2:55:ed:28:93:70:d4:34:04:b9:44:0d:
         50:db:89:b2:86:a8:9f:3e:d3:97:b2:fc:41:21:0f:3a:c3:45:
         72:16:73:67:85:f3:ab:9e:30:97:fb:ad:f3:cc:39:98:ba:bc:
         da:b6:6e:32:97:7e:ed:38:cb:e5:0f:83:99:fe:d2:d4:ce:dc:
         c7:50:4d:00:db:c9:cd:72:75:7e:af:c7:26:ce:86:18:82:b9:
         fe:dc:eb:2b:35:52:c8:b3:81:2f:01:f2:63:eb:65:27:38:41:
         9d:18:a1:54:b2:f6:b6:e9:a7:8f:10:60:9d:6f:2c:8b:00:db:
         50:70:fc:a1:cb:d9:39:1a:9e:cd:60:8f:a2:85:9c:b1:fb:05:
         4d:6f:bf:ee:2c:fe:09:27:a3:35:be:a0:fb:75:3d:8f:54:fd:
         56:0f:90:a5:0e:65:d9:37:bc:a9:a6:d4:08:fc:63:77:0d:bc:
         6a:06:18:15:a5:fd:1a:9f:51:4e:21:6a:7e:6e:82:a8:e8:7b:
         aa:db:73:b5:cf:24:54:4c:21:0a:62:d1:b0:0b:a7:19:87:a1:
         7a:aa:b7:65:3d:4b:1a:95:54:2b:55:5c:8f:db:01:09:25:ae:
         7d:eb:5a:0a:e7:7b:1b:4a:75:92:22:de:ad:a6:40:b2:ca:0c:
         40:21:c1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 06:12:06 2026 by rpki-client