This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          Pxx7OyGerY85v2OhOLU9A60lhz05W9UsPMF4OB8FwJI=
Subject key identifier:   8C:79:A4:BA:9E:61:E8:3D:8B:59:12:4B:98:A1:6B:3A:52:05:5F:F2
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer:       /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial:       24529EACCE2BCAB9FD3AC990E80B5854A310E09F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number:          05B0
Signing time:             Tue 03 Feb 2026 00:19:31 +0000
Manifest this update:     Tue 03 Feb 2026 00:19:31 +0000
Manifest next update:     Sat 07 Feb 2026 00:19:31 +0000
Files and hashes:         1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: g5JV+jKwyQs3XdIsOeQpN+N/Je86E58nQhAIiBfarcM=)
                          2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
                          3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
                          4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
                          5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
                          6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Feb 2026 00:19:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:52:9e:ac:ce:2b:ca:b9:fd:3a:c9:90:e8:0b:58:54:a3:10:e0:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Validity
            Not Before: Feb  3 00:19:31 2026 GMT
            Not After : Feb  7 00:19:31 2026 GMT
        Subject: serialNumber=6540e8abb9522ee516bf2d9649d8585347ab9fd628509cdeeff7eaa9b6716393, CN=bb9a9116-f615-462e-a680-5266b327e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:91:e8:33:1e:b2:d2:e5:3f:25:b5:43:74:
                    77:52:79:16:82:38:f2:69:2f:b9:35:95:dc:e2:43:
                    6d:d6:86:ae:96:6d:fb:ab:ef:0b:ba:4c:53:5d:0e:
                    8a:78:f1:37:d7:82:fe:64:97:c9:0e:88:5e:56:e1:
                    3f:35:28:aa:c3:d2:d0:61:82:41:22:66:91:91:2b:
                    fd:df:81:3f:5c:6f:b7:d0:1c:c8:06:a5:33:93:a1:
                    02:18:8c:5c:af:60:ec:95:b1:b1:df:fe:37:e6:63:
                    44:00:5e:c1:21:ca:eb:d2:dc:a6:e3:df:e8:82:81:
                    67:cd:c3:61:04:1a:36:5f:99:56:2e:fc:32:04:39:
                    48:28:79:d8:d7:d3:7f:ad:01:c8:0a:8b:59:51:e5:
                    d0:df:6c:45:e6:0d:bb:d8:27:d9:5b:54:7a:4f:b0:
                    aa:58:3b:69:de:f6:82:1d:22:af:4c:f0:43:12:9b:
                    e1:d0:64:7e:08:20:a9:9e:3e:d8:af:61:e9:14:c0:
                    21:1b:75:00:d8:2d:71:a8:5f:5a:dc:de:b7:32:c1:
                    d3:f1:72:24:ab:aa:e5:22:b4:d2:06:61:d6:91:3d:
                    07:79:a2:e9:04:63:7a:a4:89:db:c3:9e:8c:e3:11:
                    37:1e:9b:ac:4e:43:1c:d9:02:b8:13:c6:ee:ed:55:
                    8a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:79:A4:BA:9E:61:E8:3D:8B:59:12:4B:98:A1:6B:3A:52:05:5F:F2
            X509v3 Authority Key Identifier:
                keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:03:35:26:f8:b8:93:c8:41:67:a2:6b:d9:fa:0b:32:c2:25:
         d5:ae:5d:94:9b:52:08:8a:32:07:6e:43:48:ee:d0:e6:9d:54:
         81:14:19:db:72:a4:f1:42:aa:77:ab:fa:9d:2c:3c:22:ce:1c:
         58:e8:dc:4c:4d:33:95:92:78:c1:5c:a5:47:bc:3d:07:40:52:
         86:e9:04:7e:bf:b3:bf:01:f4:1b:a4:7e:df:e7:31:49:40:ca:
         20:ee:69:bd:2d:10:f4:68:3b:e8:5c:6d:0c:0b:1b:86:06:f6:
         df:ee:11:97:f0:86:cb:53:d1:af:d6:aa:6e:ef:9c:79:93:cb:
         3f:c1:5d:e8:17:50:fb:2e:96:bd:05:78:19:e2:26:ed:77:50:
         0e:6a:ab:47:79:c3:c8:9f:2a:24:07:a5:8c:da:0a:39:1e:9b:
         06:f8:b7:ca:ea:00:d0:cc:1b:1e:65:73:76:d2:57:ee:0d:fd:
         19:57:e0:98:42:08:50:53:62:8c:12:5a:2f:0e:b9:3e:4a:51:
         79:56:93:b8:c6:ea:bc:1f:7b:c0:25:6b:43:1c:89:c7:9b:f6:
         0d:73:c5:ea:65:ad:0c:a8:89:96:2d:7d:7b:05:dc:cd:4a:71:
         a2:d8:55:6b:3c:2b:ac:e3:19:6e:c2:f2:0b:77:d0:1e:c4:1b:
         71:2f:9e:4c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUJFKerM4ryrn9OsmQ6AtYVKMQ4J8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODgwNkYwMDAwMTEwLwYDVQQFEyhFN0NBREE1RjA4
ODFENzdCRUE0OEIwNzY4QTM3NjZCNTAwNjVBRjA4MB4XDTI2MDIwMzAwMTkzMVoX
DTI2MDIwNzAwMTkzMVowejFJMEcGA1UEBRNANjU0MGU4YWJiOTUyMmVlNTE2YmYy
ZDk2NDlkODU4NTM0N2FiOWZkNjI4NTA5Y2RlZWZmN2VhYTliNjcxNjM5MzEtMCsG
A1UEAxMkYmI5YTkxMTYtZjYxNS00NjJlLWE2ODAtNTI2NmIzMjdlMGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGuR6DMestLlPyW1Q3R3UnkWgjjy
aS+5NZXc4kNt1oaulm37q+8LukxTXQ6KePE314L+ZJfJDoheVuE/NSiqw9LQYYJB
ImaRkSv934E/XG+30BzIBqUzk6ECGIxcr2DslbGx3/435mNEAF7BIcrr0tym49/o
goFnzcNhBBo2X5lWLvwyBDlIKHnY19N/rQHICotZUeXQ32xF5g272CfZW1R6T7Cq
WDtp3vaCHSKvTPBDEpvh0GR+CCCpnj7Yr2HpFMAhG3UA2C1xqF9a3N63MsHT8XIk
q6rlIrTSBmHWkT0HeaLpBGN6pInbw56M4xE3HpusTkMc2QK4E8bu7VWKDQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFIx5pLqeYeg9i1kSS5ihazpSBV/yMB8GA1UdIwQY
MBaAFOfK2l8Igdd76kiwdoo3ZrUAZa8IMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi81OHJhWHdp
QjEzdnFTTEIyaWpkbXRRQmxyd2cuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS83MDhhYWZhZi0wMGI0LTQ4NWItODU0Yy0wYjMyY2EzMGY1N2IvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNzA4YWFmYWYtMDBi
NC00ODViLTg1NGMtMGIzMmNhMzBmNTdiLzEyZTU5MDAxLTM1YWMtNGFiZi04NThm
LTM3Yjk1NWEyNGIzZi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGYDNSb4uJPIQWeia9n6CzLCJdWuXZSb
UgiKMgduQ0ju0OadVIEUGdtypPFCqner+p0sPCLOHFjo3ExNM5WSeMFcpUe8PQdA
UobpBH6/s78B9Bukft/nMUlAyiDuab0tEPRoO+hcbQwLG4YG9t/uEZfwhstT0a/W
qm7vnHmTyz/BXegXUPsulr0FeBniJu13UA5qq0d5w8ifKiQHpYzaCjkemwb4t8rq
ANDMGx5lc3bSV+4N/RlX4JhCCFBTYowSWi8OuT5KUXlWk7jG6rwfe8Ala0Mciceb
9g1zxeplrQyoiZYtfXsF3M1KcaLYVWs8K6zjGW7C8gt30B7EG3Evnkw=
-----END CERTIFICATE-----
Generated at Tue Feb 3 15:56:50 2026 by rpki-client