This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          CtJ6q0prhUN8IAKQzWHgWui4q+VxV+22Eq+LC49FgOE=
Subject key identifier:   7F:D3:EE:B3:EA:18:33:9F:57:68:84:5A:7E:1D:73:93:ED:D2:A8:5E
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       6F86A00F852A61A28BB322D23DA4CCF91E6885BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          050F
Signing time:             Mon 24 Nov 2025 00:01:55 +0000
Manifest this update:     Mon 24 Nov 2025 00:01:55 +0000
Manifest next update:     Fri 28 Nov 2025 00:01:55 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 9gF1DUYJUcNAJYqCfi1dh6WgX2qiOB3vX5MrHGe2lbw=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Nov 2025 00:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:86:a0:0f:85:2a:61:a2:8b:b3:22:d2:3d:a4:cc:f9:1e:68:85:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Nov 24 00:01:55 2025 GMT
            Not After : Nov 28 00:01:55 2025 GMT
        Subject: serialNumber=74c02969c6a40716e5acf06aaf0738633fe575ef871087ab97e7c6ad90b95049, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6d:60:e0:9e:76:4c:52:d9:08:03:cf:92:72:
                    fc:cf:57:7d:b4:08:05:59:b4:b6:0a:a1:1a:9e:74:
                    41:c2:fa:17:e9:ac:54:ea:8c:1d:a4:05:a4:34:ad:
                    be:03:da:24:6f:34:f6:51:a2:2e:6a:bc:05:93:23:
                    6a:38:8e:20:0c:1e:6b:7f:7a:24:77:3d:91:ab:90:
                    e0:3c:90:67:77:24:07:f5:62:3c:3f:ff:3b:89:ec:
                    84:a6:d2:d2:75:68:85:13:1d:07:b2:17:14:ed:07:
                    fe:bb:70:27:fb:85:dc:c7:59:3e:4f:1d:9e:0f:5e:
                    86:7f:59:fb:33:c5:9a:ad:6a:0c:15:a2:46:b0:1c:
                    d7:5d:78:76:0b:29:7b:7f:f9:38:a0:08:ea:f2:59:
                    be:a1:26:18:ff:fc:44:ba:c0:c2:b3:fe:a0:20:c9:
                    12:3b:36:53:1c:eb:f0:b1:9a:da:c7:19:48:b5:be:
                    5c:d6:bb:6e:08:d3:b6:d1:7e:5a:a2:6f:d2:4f:cb:
                    67:54:4d:b5:20:0a:e6:1d:4b:f3:2b:77:7d:a3:09:
                    a8:95:73:fe:06:02:87:ec:a6:15:29:3f:8a:13:2c:
                    28:4a:d7:ec:a6:76:dd:a9:8d:a5:5a:ab:a7:f5:0d:
                    fc:e5:52:d7:36:ee:d8:42:1d:24:8c:36:f4:02:54:
                    c6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D3:EE:B3:EA:18:33:9F:57:68:84:5A:7E:1D:73:93:ED:D2:A8:5E
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:33:f4:35:f4:4c:ca:3f:e3:7f:2b:eb:9c:91:61:91:9e:
         a1:d3:8b:4f:db:ad:36:e1:dc:06:9f:5c:ce:e6:c1:12:73:37:
         df:8f:99:14:70:a0:b9:18:99:97:d8:a7:0a:fd:ff:2d:8f:ec:
         13:77:86:c1:3e:15:46:4e:2a:8c:cd:53:73:1a:65:b1:ac:09:
         98:ae:8f:f1:35:a7:2e:43:96:06:22:1e:69:ff:e8:83:4e:e2:
         6f:25:2e:f1:68:57:fd:40:05:c0:66:6c:ea:ac:26:de:94:86:
         6d:e0:97:1b:1c:97:27:f0:d2:3b:52:ff:39:fa:cf:07:d1:c9:
         57:56:07:c2:a0:e5:bb:e6:87:7a:19:04:4f:a7:bb:88:bb:6b:
         3d:4b:90:d2:47:2c:06:55:53:69:1d:16:4f:0b:b3:50:86:da:
         09:b3:29:0b:9e:3c:96:c2:34:ef:0b:5e:22:da:01:7b:7d:bf:
         ec:c8:21:66:2c:9d:9f:ef:a6:12:68:51:09:cd:e7:52:57:cd:
         f2:de:cf:05:67:67:1c:d5:4a:67:c6:f4:28:df:ca:db:20:87:
         43:fa:81:20:67:13:53:8d:4c:1b:3a:c6:7b:20:e3:2d:30:a0:
         91:c3:44:82:27:ec:68:7c:53:d3:3a:6f:b1:b7:a3:94:8a:25:
         fb:ba:16:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 19:26:38 2025 by rpki-client