This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: 9JXnIqCNep0HjxP0B7dHbdAmfRsIEP40WetcTwYWdoA= Subject key identifier: 99:1F:9F:55:BF:B0:DB:75:2A:C6:76:66:BA:6D:DF:4F:F2:29:85:E6 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 41BE03644AA51E1EF845DA6D93B87D8060E17171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0516 Signing time: Mon 01 Dec 2025 00:03:17 +0000 Manifest this update: Mon 01 Dec 2025 00:03:17 +0000 Manifest next update: Fri 05 Dec 2025 00:03:17 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: rkE/avSYU9Qk32bxvj1+Peu6zdOJ4JFTCXgoNtjRR5M=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 00:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:be:03:64:4a:a5:1e:1e:f8:45:da:6d:93:b8:7d:80:60:e1:71:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 1 00:03:17 2025 GMT Not After : Dec 5 00:03:17 2025 GMT Subject: serialNumber=1dc1a2807f62bfdf18633ab669c6dbb75b645261548b7046b1adefa238ad6873, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:4a:c2:d7:89:94:bb:0a:a7:a8:a2:bf:71:24: 85:bd:e0:f4:1b:cc:92:b3:a7:ce:59:b0:63:cd:af: 44:53:23:eb:61:a9:e5:e8:8e:41:2b:93:80:c3:5c: d5:14:c3:87:bc:b7:01:e9:64:4a:86:42:8a:05:2b: 5c:8c:fa:ab:7b:a4:fb:bf:74:5c:05:da:d7:ab:fc: ae:19:d7:09:d5:cf:66:97:89:1e:eb:4b:f5:0f:69: 53:91:14:41:05:72:ef:48:89:74:d8:7e:91:2e:82: 63:9c:65:b6:a7:c6:9b:c9:0b:57:57:cf:c7:d2:69: 47:48:24:9d:09:97:21:78:e9:d2:5d:3c:2b:03:34: b0:5c:84:fd:0d:04:fa:62:33:7a:e6:0a:f3:8e:f8: 8c:e6:f2:c7:96:81:d6:89:40:2d:ed:86:42:59:72: 87:3c:62:f6:f5:e9:2f:89:bc:5b:8e:34:7f:4d:a0: 2c:14:cd:a9:0b:ae:58:bd:35:a6:39:0e:89:71:1f: 35:b0:56:a1:ac:31:19:c9:bc:af:13:e5:4a:42:d9: 44:d1:17:cc:05:44:73:41:38:68:32:f2:34:d8:80: c0:71:3b:b3:e7:a7:31:95:c7:2f:84:ec:7c:b3:1b: ba:30:bf:7c:cc:df:85:73:36:50:42:ef:b2:41:52: e0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1F:9F:55:BF:B0:DB:75:2A:C6:76:66:BA:6D:DF:4F:F2:29:85:E6 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:24:e6:4a:50:96:d7:52:22:4c:4f:f6:4e:dd:e8:7e:6b:db: 0c:eb:02:52:5b:e7:70:ce:aa:e0:2e:f8:13:8f:5b:45:fd:1c: 33:5f:bc:dd:d9:e9:f9:9a:3d:bb:9b:75:c1:c1:d4:60:3b:92: 2e:3c:1a:8f:7b:c4:7c:73:a8:9c:d5:4f:2a:7f:77:51:9a:7b: dc:b5:77:42:9d:d1:5b:ad:7e:7e:cb:76:44:fb:27:7a:05:1e: 0e:f4:31:19:9f:9c:4b:c5:cd:5c:a3:53:c4:df:b4:ac:3c:36: ff:e7:e4:7d:eb:a5:85:fa:e1:99:e0:90:fe:7e:bb:e1:fe:ec: 59:2d:d6:5b:eb:c8:07:f2:94:3b:c0:0d:67:df:94:fe:4c:aa: 50:21:d3:d0:9d:1b:9c:65:72:e0:c3:86:92:3f:8e:92:d2:61: 7a:f1:21:5b:9b:9c:3a:50:51:a9:c9:be:32:01:23:ea:ad:8b: d3:28:8d:c6:b2:4f:1b:e3:c7:5f:b9:c4:7e:19:3a:25:8e:79: 16:f0:aa:04:c2:8b:e5:5f:be:63:74:34:0f:0b:1c:0a:11:93: 26:28:9a:09:01:31:4a:1f:83:1a:0b:e7:d1:dd:2b:1e:8d:52: 1c:27:d1:f9:5c:fc:19:4d:d0:9f:37:0f:a2:61:e9:7a:1a:cb: 4a:d4:48:d2 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUQb4DZEqlHh74Rdptk7h9gGDhcXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwMTAwMDMxN1oX DTI1MTIwNTAwMDMxN1owejFJMEcGA1UEBRNAMWRjMWEyODA3ZjYyYmZkZjE4NjMz YWI2NjljNmRiYjc1YjY0NTI2MTU0OGI3MDQ2YjFhZGVmYTIzOGFkNjg3MzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UrC14mUuwqnqKK/cSSFveD0G8yS s6fOWbBjza9EUyPrYanl6I5BK5OAw1zVFMOHvLcB6WRKhkKKBStcjPqre6T7v3Rc BdrXq/yuGdcJ1c9ml4ke60v1D2lTkRRBBXLvSIl02H6RLoJjnGW2p8abyQtXV8/H 0mlHSCSdCZcheOnSXTwrAzSwXIT9DQT6YjN65grzjviM5vLHloHWiUAt7YZCWXKH PGL29ekvibxbjjR/TaAsFM2pC65YvTWmOQ6JcR81sFahrDEZybyvE+VKQtlE0RfM BURzQThoMvI02IDAcTuz56cxlccvhOx8sxu6ML98zN+FczZQQu+yQVLgOwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFJkfn1W/sNt1KsZ2Zrpt30/yKYXmMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAIEk5kpQltdSIkxP9k7d6H5r2wzrAlJb 53DOquAu+BOPW0X9HDNfvN3Z6fmaPbubdcHB1GA7ki48Go97xHxzqJzVTyp/d1Ga e9y1d0Kd0Vutfn7LdkT7J3oFHg70MRmfnEvFzVyjU8TftKw8Nv/n5H3rpYX64Zng kP5+u+H+7Fkt1lvryAfylDvADWfflP5MqlAh09CdG5xlcuDDhpI/jpLSYXrxIVub nDpQUanJvjIBI+qti9MojcayTxvjx1+5xH4ZOiWOeRbwqgTCi+VfvmN0NA8LHAoR kyYomgkBMUofgxoL59HdKx6NUhwn0flc/BlN0J83D6Jh6Xoay0rUSNI= -----END CERTIFICATE-----Generated at Mon Dec 1 12:36:14 2025 by rpki-client