This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: LoL6FvHn7av8Q0kZDAFXCGE7jH7K9mjrQy5pD0y2L8A=
Subject key identifier: 95:3D:A6:58:24:10:CA:73:21:C6:A1:7C:D6:63:A3:9F:33:DE:9F:EC
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 13512EAF58DE9F4508023822BB1E9C8C7D846318
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 051D
Signing time: Sun 07 Dec 2025 00:00:57 +0000
Manifest this update: Sun 07 Dec 2025 00:00:57 +0000
Manifest next update: Thu 11 Dec 2025 00:00:57 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: MBCm/wpjWTCynLBAAXlhwqpHi+4pATpa9VJ7w3ENyd0=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: W5s2+KsThmK2t/kTEoDyc0qk5t8nWR8Vcr0OHIME7gY=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: z6hf364ynFE1UseoDMy+1vIxAvwd+Y8BOxEZVM8hGgI=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: CNy33lvFVRD+mSD8JJeY7w+m3uy4j1Q7IRyDV4kVRuc=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 55JqWeNnPUgIMiCbIulJEhJREuoglf7zd0Hdhdnk7JI=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: nX53gsp63aFe1Zk0fvuz7gf9dNGw1Q0a6vNdlF04HMM=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: n1kg4tDD9KCpPUv6L5rqRkioae0zUB8A2YrnCFiHVJ0=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: rgmgKkFA/1ZuGJ4QRcU97a/WiPe2lq2P1GX24tqN91U=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: DuZi0/kBsFkmGULcNt4xmJZ4I8aFDcP0+xR9g1RHy40=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: N/cY7SofU7BQTjSpADixy6DLuAFs/nCWf8HWg3e5lnI=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: mnMvQYdAbSRRbDZHXyfM/f8XdM80z72GugupasAKoQg=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: iHgVMCQkVpqqh3egN8945TcYU7izcrnduLWWQD583q4=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 00:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:51:2e:af:58:de:9f:45:08:02:38:22:bb:1e:9c:8c:7d:84:63:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Dec 7 00:00:57 2025 GMT
Not After : Dec 11 00:00:57 2025 GMT
Subject: serialNumber=ea36b7aacbc7f88d515a203fbbed3e9e08374141a9b50da15cae8da018337f20, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:f5:4d:dd:af:5e:0c:a2:95:e7:1e:02:28:
68:9a:64:df:5f:ba:07:5b:c3:65:b5:24:5d:64:dc:
50:c6:34:a6:73:31:9d:61:9a:96:2b:12:10:9b:2e:
ac:7f:fe:38:6b:4a:1a:b1:66:40:5f:b1:e8:23:a6:
b5:ce:85:61:ea:03:5e:be:43:a8:23:ef:8e:f4:99:
f4:66:a0:05:d4:62:53:f7:16:ef:a0:b4:ab:49:2a:
86:22:b4:7a:5e:f8:45:c1:09:e1:34:a8:11:d2:77:
e8:fc:ec:31:ab:5b:6f:b8:ea:46:83:65:6e:31:03:
94:35:7c:97:89:98:f3:f4:54:60:64:fe:c2:25:6d:
0c:6d:40:08:4c:ff:a6:83:3b:79:7d:76:d7:88:62:
bb:a8:de:e0:d8:25:70:4f:c7:13:d1:86:e8:81:e7:
e9:0e:04:cc:d1:0d:28:39:06:74:ef:a0:1f:bc:5d:
ad:2f:26:53:49:bc:d3:ff:ed:ec:7a:97:67:00:d6:
ad:7a:20:60:4f:48:93:9f:94:15:e9:02:a6:a7:e5:
d6:ac:0b:ea:a8:ae:87:a2:7d:67:cb:8d:dc:c4:6c:
67:fb:f0:1f:17:07:80:30:96:8c:d6:41:57:57:5e:
35:47:c0:33:37:e0:d9:2c:e2:c1:ea:a2:c7:d0:7e:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3D:A6:58:24:10:CA:73:21:C6:A1:7C:D6:63:A3:9F:33:DE:9F:EC
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:73:2f:d3:54:2f:c7:96:4b:7e:ac:d9:d9:60:ec:44:95:
6a:b0:81:50:4b:42:a9:b9:04:15:c6:e3:43:56:19:5a:a0:55:
09:8d:95:7d:72:3d:9c:a6:fb:88:fc:97:a2:2f:50:0d:58:1b:
fe:12:5a:e5:3f:1e:7b:4d:ab:de:73:57:b8:c9:f8:a4:63:bd:
b4:96:ed:b8:68:03:a5:0e:d8:15:62:8e:31:c5:07:59:bb:9f:
ba:08:e0:49:75:b0:a6:18:0d:12:0e:dd:f7:9e:40:14:e0:0e:
bd:77:76:8e:f2:eb:51:bb:fa:6e:6f:12:ec:fb:c6:b6:73:bb:
d8:52:19:ad:53:4d:21:01:24:47:3d:eb:b1:9b:00:e9:61:fc:
e1:47:2a:09:17:9e:99:7b:d2:1b:84:5a:44:51:48:8b:7a:b3:
43:02:36:dc:ec:fa:7d:ce:fd:ce:74:da:50:37:9b:33:b7:86:
3c:1e:3e:da:b8:01:5e:93:54:b3:3b:9c:17:27:68:b5:da:f7:
c2:c9:a1:7a:ce:fe:35:ef:9f:a4:2a:b7:43:67:08:15:40:4a:
f4:10:2e:1c:58:a9:62:42:46:ad:c1:00:cd:f8:de:81:c1:78:
b4:5f:7d:0f:ad:59:c5:94:20:7d:d1:19:84:2a:b7:0f:7c:76:
c9:f2:d8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 08:36:26 2025 by rpki-client