This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: 10TYF2hTM0lcWdACjzab9MD7hLgWO+ka5NX7dELDWCE=
Subject key identifier: 65:56:06:E0:C0:C9:0F:95:D6:3B:3F:2E:27:40:98:AF:B4:94:29:76
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 1F36C6608C76DA08FE344E895694BAC97A3D3328
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 052A
Signing time: Sat 20 Dec 2025 00:09:05 +0000
Manifest this update: Sat 20 Dec 2025 00:09:05 +0000
Manifest next update: Wed 24 Dec 2025 00:09:05 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: MBCm/wpjWTCynLBAAXlhwqpHi+4pATpa9VJ7w3ENyd0=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: W5s2+KsThmK2t/kTEoDyc0qk5t8nWR8Vcr0OHIME7gY=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: c17fhgjxh5ypha6wDggmGnkJbV7BM0BtHP/ABFBoUSA=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: CNy33lvFVRD+mSD8JJeY7w+m3uy4j1Q7IRyDV4kVRuc=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 55JqWeNnPUgIMiCbIulJEhJREuoglf7zd0Hdhdnk7JI=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: nX53gsp63aFe1Zk0fvuz7gf9dNGw1Q0a6vNdlF04HMM=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: n1kg4tDD9KCpPUv6L5rqRkioae0zUB8A2YrnCFiHVJ0=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: rgmgKkFA/1ZuGJ4QRcU97a/WiPe2lq2P1GX24tqN91U=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: DuZi0/kBsFkmGULcNt4xmJZ4I8aFDcP0+xR9g1RHy40=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: N/cY7SofU7BQTjSpADixy6DLuAFs/nCWf8HWg3e5lnI=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: mnMvQYdAbSRRbDZHXyfM/f8XdM80z72GugupasAKoQg=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: iHgVMCQkVpqqh3egN8945TcYU7izcrnduLWWQD583q4=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 00:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:36:c6:60:8c:76:da:08:fe:34:4e:89:56:94:ba:c9:7a:3d:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Dec 20 00:09:05 2025 GMT
Not After : Dec 24 00:09:05 2025 GMT
Subject: serialNumber=dd8cd2e12bde0cd4e57c5d0e20bd46a5e9683c5eaf241c18469ac75f121b2f2f, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:eb:18:6d:ef:47:f3:6b:0f:49:58:9f:b7:
40:91:31:c0:f8:7a:1c:87:80:ab:a5:32:77:e6:8b:
eb:33:d4:8b:fd:ff:89:45:e7:83:ad:09:6b:07:19:
58:8f:71:45:cd:7a:b5:7d:49:2e:e4:b8:6b:5f:68:
f7:2f:f1:2e:a9:ba:99:93:c0:71:1d:12:9e:7f:a2:
5d:c1:b3:45:ac:bb:93:13:7a:c8:fe:9f:a7:ff:5a:
5b:63:3e:2f:91:f7:4f:c7:e5:f3:b0:5f:4a:88:2d:
aa:6d:97:ea:e3:9e:9c:6c:ec:a0:10:c3:1c:f1:5f:
fe:9e:b4:98:fd:f6:28:40:63:68:ee:87:7f:e7:48:
ea:a2:9d:a8:79:c2:52:b9:52:bc:c3:e9:81:e2:98:
88:22:b5:9a:54:a6:77:20:50:25:36:77:b7:b8:83:
ea:8f:ba:f9:ad:64:be:7f:25:d3:03:a3:e3:3e:b7:
6f:1f:30:91:0b:c3:e7:22:b0:e6:68:5b:86:d7:30:
2a:a1:bf:ff:3e:aa:68:3a:40:36:7c:2b:ee:90:f8:
8b:59:26:20:bc:10:fd:a6:14:60:67:e1:c1:b8:c7:
44:10:9a:cb:58:d8:7f:5b:01:b4:56:6b:5f:23:94:
5b:ec:4f:ee:24:9b:0f:2e:4d:5e:04:43:b2:f2:08:
2f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:56:06:E0:C0:C9:0F:95:D6:3B:3F:2E:27:40:98:AF:B4:94:29:76
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ac:67:a4:f9:45:2d:39:90:bf:8b:ab:97:df:bb:7d:98:84:
0d:96:57:2b:79:a9:a8:03:a3:83:29:ae:52:40:51:ea:13:3b:
fb:82:79:01:d7:0e:29:a5:cc:3f:28:9f:75:dd:49:01:2f:01:
7e:cf:1c:67:c4:9e:f6:65:51:5d:6c:c4:10:a3:a2:f9:e2:56:
d0:66:15:1a:e3:f5:84:bb:28:f7:dc:38:d0:e3:9c:d2:59:75:
bb:26:3f:8f:02:db:3f:97:ca:79:cf:9c:8d:0e:95:cb:db:47:
ac:b8:3e:51:78:57:d2:7f:e2:55:13:1f:33:d3:eb:11:2b:e3:
34:e8:36:25:15:c1:75:95:e0:b2:c1:2c:46:44:5e:d6:64:85:
e9:af:72:2b:f3:ae:e4:3b:96:70:ff:8c:cf:54:3a:00:66:c4:
2d:85:12:26:37:57:4c:6a:c2:d6:61:61:0c:87:0e:b6:67:27:
a1:71:c6:0c:4d:a6:8a:99:00:40:46:49:6c:0a:61:e9:9f:73:
f2:94:33:46:d1:f7:95:99:41:07:ea:fe:f5:81:2a:f5:45:a0:
20:a8:5e:ff:86:16:32:6c:55:d8:e8:eb:c7:e9:2f:37:3f:2f:
b5:23:83:3b:e6:c3:9c:29:f7:86:e5:b7:00:2e:33:d1:b7:0f:
4c:69:b3:35
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUHzbGYIx22gj+NE6JVpS6yXo9MygwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5
MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIyMDAwMDkwNVoX
DTI1MTIyNDAwMDkwNVowejFJMEcGA1UEBRNAZGQ4Y2QyZTEyYmRlMGNkNGU1N2M1
ZDBlMjBiZDQ2YTVlOTY4M2M1ZWFmMjQxYzE4NDY5YWM3NWYxMjFiMmYyZjEtMCsG
A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG7rGG3vR/NrD0lYn7dAkTHA+Hoc
h4CrpTJ35ovrM9SL/f+JReeDrQlrBxlYj3FFzXq1fUku5LhrX2j3L/EuqbqZk8Bx
HRKef6JdwbNFrLuTE3rI/p+n/1pbYz4vkfdPx+XzsF9KiC2qbZfq456cbOygEMMc
8V/+nrSY/fYoQGNo7od/50jqop2oecJSuVK8w+mB4piIIrWaVKZ3IFAlNne3uIPq
j7r5rWS+fyXTA6PjPrdvHzCRC8PnIrDmaFuG1zAqob//PqpoOkA2fCvukPiLWSYg
vBD9phRgZ+HBuMdEEJrLWNh/WwG0VmtfI5Rb7E/uJJsPLk1eBEOy8ggvGQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFGVWBuDAyQ+V1js/LidAmK+0lCl2MB8GA1UdIwQY
MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr
dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3
MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0
LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBALGsZ6T5RS05kL+Lq5ffu32YhA2WVyt5
qagDo4MprlJAUeoTO/uCeQHXDimlzD8on3XdSQEvAX7PHGfEnvZlUV1sxBCjovni
VtBmFRrj9YS7KPfcONDjnNJZdbsmP48C2z+XynnPnI0OlcvbR6y4PlF4V9J/4lUT
HzPT6xEr4zToNiUVwXWV4LLBLEZEXtZkhemvcivzruQ7lnD/jM9UOgBmxC2FEiY3
V0xqwtZhYQyHDrZnJ6FxxgxNpoqZAEBGSWwKYemfc/KUM0bR95WZQQfq/vWBKvVF
oCCoXv+GFjJsVdjo68fpLzc/L7Ujgzvmw5wp94bltwAuM9G3D0xpszU=
-----END CERTIFICATE-----
Generated at Sat Dec 20 13:53:15 2025 by rpki-client