This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: rFFdYUDgsyfiullo9lPEW9rfy4zop0KYZcLxWe8C8+I= Subject key identifier: 4B:5F:B9:6C:7F:9F:29:F9:72:53:63:93:DC:00:B7:3C:A5:EB:A4:5F Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 515E92548165DE586B35C48B66A958D70AEF7CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0515 Signing time: Sun 30 Nov 2025 00:03:08 +0000 Manifest this update: Sun 30 Nov 2025 00:03:08 +0000 Manifest next update: Thu 04 Dec 2025 00:03:08 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: BpI0kebFqnXRU6UY7cknB6AkqzWmzZqsvbAP3dX+LbM=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 04 Dec 2025 00:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:5e:92:54:81:65:de:58:6b:35:c4:8b:66:a9:58:d7:0a:ef:7c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Nov 30 00:03:08 2025 GMT Not After : Dec 4 00:03:08 2025 GMT Subject: serialNumber=0993232a06078ae8c731e7e958754e18016264eb9b5cb52b4442081f83c01cc7, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:52:1c:9f:c3:cb:61:3c:56:ee:87:ad:b0: 6f:e7:f0:4c:2b:73:33:0c:d5:7a:0c:b8:d6:34:ff: ec:46:70:bb:bc:35:bf:f0:b9:a0:ee:63:04:fc:30: af:de:7f:f9:b0:1a:cb:21:13:5b:1a:ba:56:21:28: c5:1e:b3:dc:fe:96:35:76:34:76:57:f4:57:1e:a6: 78:c7:6b:9f:8c:69:b4:4c:de:0e:54:17:f9:70:7e: b4:6d:6f:b0:ff:41:62:d6:c8:ee:ef:9e:b8:70:ed: a5:08:22:c8:de:cd:b6:33:a9:57:e2:6e:98:3b:91: 4e:dc:6b:ee:e2:2b:dd:a7:71:d9:9f:dc:f8:0a:63: 8d:91:4a:ad:05:3c:29:80:c3:71:65:3a:3d:72:50: f7:7b:7a:24:a2:8b:c1:12:3f:1b:e0:20:c3:7f:50: 61:7e:65:c6:ac:26:a5:53:04:0d:34:35:e0:5d:40: 35:19:f3:c0:78:b8:32:ff:fb:83:01:17:e1:fd:cc: d6:84:a2:a8:5f:f2:1c:9b:e4:73:89:32:10:67:06: 3d:d7:75:f9:68:8f:6c:40:f1:a7:78:68:b1:c5:c9: e7:9a:00:8a:ac:bd:58:23:3b:4f:1e:ca:e6:fa:7b: d1:9d:00:31:0c:4a:d9:b9:7d:0f:06:b1:8b:27:85: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5F:B9:6C:7F:9F:29:F9:72:53:63:93:DC:00:B7:3C:A5:EB:A4:5F X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2e:71:56:f6:85:21:16:c6:e9:bf:ae:bc:91:c5:10:6b:d7: 74:8f:da:1a:17:01:fa:3e:85:82:6a:7f:6a:a1:0e:94:19:c6: 6e:33:16:2a:6b:bb:ec:3c:b1:ae:3d:23:f2:7a:36:81:bf:f9: b5:76:06:90:4d:4c:54:9b:0c:36:21:b5:3e:b1:6c:53:20:82: 3a:c7:9e:6f:02:e5:2c:b8:14:38:42:1d:d5:83:7f:84:7c:a8: 75:c2:2e:f4:4c:42:92:0a:d3:72:7f:14:d6:ca:ab:1d:d5:96: a4:8f:59:f6:40:59:89:75:88:1a:1c:ab:26:b8:d7:90:4c:be: d4:01:6e:a8:67:46:a3:e4:50:2c:eb:68:80:55:fb:10:4e:78: 62:0f:b5:d6:75:43:7b:e7:62:ba:ed:72:21:dc:c6:da:d2:33: 14:77:e4:6c:a8:7b:fe:9c:87:fe:09:b2:1e:e5:d9:cd:a4:be: 8c:82:04:52:b6:39:7b:a7:09:54:88:77:aa:6c:b5:99:92:44: 34:ac:45:0e:f2:c1:12:71:6a:2f:81:a7:36:31:2f:69:0c:70: 3d:5f:56:0f:08:95:06:9a:aa:b2:80:aa:47:53:d0:af:49:97: 7d:3c:aa:1a:ba:a7:80:39:60:8e:fe:ce:3c:36:3e:db:f1:92: 9b:61:58:23 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUUV6SVIFl3lhrNcSLZqlY1wrvfKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTEzMDAwMDMwOFoX DTI1MTIwNDAwMDMwOFowejFJMEcGA1UEBRNAMDk5MzIzMmEwNjA3OGFlOGM3MzFl N2U5NTg3NTRlMTgwMTYyNjRlYjliNWNiNTJiNDQ0MjA4MWY4M2MwMWNjNzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WZSHJ/Dy2E8Vu6HrbBv5/BMK3Mz DNV6DLjWNP/sRnC7vDW/8Lmg7mME/DCv3n/5sBrLIRNbGrpWISjFHrPc/pY1djR2 V/RXHqZ4x2ufjGm0TN4OVBf5cH60bW+w/0Fi1sju7564cO2lCCLI3s22M6lX4m6Y O5FO3Gvu4ivdp3HZn9z4CmONkUqtBTwpgMNxZTo9clD3e3okoovBEj8b4CDDf1Bh fmXGrCalUwQNNDXgXUA1GfPAeLgy//uDARfh/czWhKKoX/Icm+RziTIQZwY913X5 aI9sQPGneGixxcnnmgCKrL1YIztPHsrm+nvRnQAxDErZuX0PBrGLJ4XPUwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFEtfuWx/nyn5clNjk9wAtzyl66RfMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAE4ucVb2hSEWxum/rryRxRBr13SP2hoX Afo+hYJqf2qhDpQZxm4zFipru+w8sa49I/J6NoG/+bV2BpBNTFSbDDYhtT6xbFMg gjrHnm8C5Sy4FDhCHdWDf4R8qHXCLvRMQpIK03J/FNbKqx3VlqSPWfZAWYl1iBoc qya415BMvtQBbqhnRqPkUCzraIBV+xBOeGIPtdZ1Q3vnYrrtciHcxtrSMxR35Gyo e/6ch/4Jsh7l2c2kvoyCBFK2OXunCVSId6pstZmSRDSsRQ7ywRJxai+BpzYxL2kM cD1fVg8IlQaaqrKAqkdT0K9Jl308qhq6p4A5YI7+zjw2PtvxkpthWCM= -----END CERTIFICATE-----Generated at Sun Nov 30 11:47:22 2025 by rpki-client