This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 1z9Bwe2UKFi0kiGsN7WUMew042CbLFK8l+T0CoHiof0=
Subject key identifier: 1B:02:9A:D3:FA:E2:1E:97:E9:CA:70:1F:CA:0B:B7:B2:41:97:F7:CB
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer: /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial: 683A1DF47924CFF2EA39C95199D143DFB66191DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number: 05B1
Signing time: Wed 04 Feb 2026 00:19:48 +0000
Manifest this update: Wed 04 Feb 2026 00:19:48 +0000
Manifest next update: Sun 08 Feb 2026 00:19:48 +0000
Files and hashes: 1: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: imDdHyuwWeKKZbVDDX2xp7v3ASPCJsGuiPynanpTIRE=)
2: 381fc6e6-5d49-41bc-b584-d9437c68e3cd.roa (hash: S1Ao7Ed2lEOUChf0wwWlihVPVCgDd6ngfsHWkEG+//M=)
3: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: Tu8KJsB24gvGTIUjn+HPIkPOVBYVMazosJy1Qzbh6a8=)
4: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: FS1vyz0XLamDOjQ21vOD06OkgWtvhJ7UwSqPGE+oQcg=)
5: cc2f7093-21a6-400f-9db1-93c2fe02bc1c.roa (hash: 58PnTQblNII2sxrHD4qKI/6eE/pKAhirfUgxfDJkXS8=)
6: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: cQc2HrAbBAfe1GL6X0izbfHrnYW3gH/cqRPzedsr7F8=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Feb 2026 00:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3a:1d:f4:79:24:cf:f2:ea:39:c9:51:99:d1:43:df:b6:61:91:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918806F0000, serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Validity
Not Before: Feb 4 00:19:48 2026 GMT
Not After : Feb 8 00:19:48 2026 GMT
Subject: serialNumber=3e3657fa5efa3645156e63b44ab5bc2a52372946f364013856bb721ae9396213, CN=bb9a9116-f615-462e-a680-5266b327e0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:54:16:37:1c:b8:b2:52:e6:44:84:21:07:57:
b0:66:8f:5f:61:93:2c:03:ed:6b:7a:30:79:77:85:
8d:fb:41:1e:5d:b6:c2:ae:55:08:78:c2:75:0d:e6:
d1:23:bd:9c:5d:66:de:66:61:4d:b3:26:cb:4c:94:
56:ca:a4:6b:f3:2d:aa:c3:4b:f9:d7:e9:b3:36:bf:
78:df:d5:40:06:44:0b:f1:37:0c:7d:3c:a3:a5:1f:
cf:89:1c:43:9d:63:4c:0b:a8:60:66:50:0c:3f:2a:
b6:ad:35:5c:2f:02:67:a0:62:0f:00:c0:81:29:50:
d8:9a:03:aa:38:e6:fb:df:40:3f:d4:f7:e7:19:05:
0e:82:5f:3a:4e:5b:ef:df:1c:98:66:75:67:0b:55:
fa:53:0a:b6:c9:7a:57:0b:a2:b5:f1:f2:2a:26:b2:
33:24:4d:dc:d9:b1:80:ac:d8:ae:35:09:5a:9a:63:
dc:a3:b0:6d:7b:49:ce:0f:aa:eb:30:a8:8b:1b:7d:
b6:e8:03:27:8f:f3:97:42:0d:6f:b3:75:3e:c0:d7:
c7:cb:2a:5d:dd:12:ff:04:75:9f:65:fe:ec:2c:4b:
42:b1:40:36:49:03:db:e6:6f:fd:27:00:9e:a9:c9:
4b:ef:12:37:24:ea:45:53:27:60:78:0b:d9:d7:dd:
43:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:02:9A:D3:FA:E2:1E:97:E9:CA:70:1F:CA:0B:B7:B2:41:97:F7:CB
X509v3 Authority Key Identifier:
keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dd:2a:e4:a1:d1:0f:9f:72:fb:43:53:3d:79:45:6a:37:7f:
b8:4c:63:9e:2e:de:69:60:f1:83:db:dd:8d:3e:d2:4b:ed:b3:
48:fe:57:4f:fe:08:10:87:ae:93:c1:50:0c:e1:fc:f9:16:a2:
ed:63:37:81:51:9c:90:90:cb:72:7a:b3:18:9b:06:15:3a:63:
4b:8b:d0:59:17:2e:eb:31:a5:a9:28:6e:af:ba:d8:5a:56:9a:
51:21:06:bb:bf:4c:3f:ac:2d:58:62:76:3c:33:80:72:b5:69:
50:93:6b:8c:09:75:72:b1:9e:dd:79:9c:8a:2e:68:df:ce:b9:
ae:34:79:81:49:eb:5c:32:10:60:73:04:43:65:8c:51:e3:7b:
d6:3c:a3:7f:64:11:c5:1e:13:eb:ee:a7:fd:99:6e:66:1a:3e:
18:54:6a:b4:1a:a2:f5:fc:e6:cf:2f:11:a0:91:e1:56:4f:ab:
b0:f1:10:f9:fb:df:fb:03:01:d9:86:ea:91:38:22:58:2e:13:
de:58:f2:5d:d8:58:92:f0:81:55:3b:27:71:d3:69:18:ac:96:
75:cd:46:13:13:40:2b:87:9e:d1:f3:a3:c2:58:4f:aa:05:7b:
cd:58:f4:5b:cc:7b:b7:e1:82:97:c9:4e:a8:53:ea:a8:e9:bc:
55:4c:b8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 16:29:04 2026 by rpki-client