This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          kseYzIuuOA5zzpcSD6RGekP5+YloZdVCNV+AijC5VOc=
Subject key identifier:   A3:0F:B7:42:B1:1A:0A:E1:FF:30:6E:B0:79:D3:64:83:90:08:F0:A1
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       76BFE386BFCAC4A24FEB21BA3A27D936EB546D29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          050C
Signing time:             Fri 21 Nov 2025 00:01:24 +0000
Manifest this update:     Fri 21 Nov 2025 00:01:24 +0000
Manifest next update:     Tue 25 Nov 2025 00:01:24 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: OLtTvNyfGLI3ewOAquCGXs5IkhDH2CWQFWS9PBGEpOc=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Nov 2025 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bf:e3:86:bf:ca:c4:a2:4f:eb:21:ba:3a:27:d9:36:eb:54:6d:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Nov 21 00:01:24 2025 GMT
            Not After : Nov 25 00:01:24 2025 GMT
        Subject: serialNumber=085a0c8bfcece83a9a0346662a963539c7f4a8e70456e0ca031e6a57a9a7702a, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:50:c3:65:44:2e:b2:61:5a:f3:a3:de:36:
                    48:df:e6:29:b8:86:2a:8a:6b:4f:e0:49:61:32:d0:
                    13:b5:17:42:98:1b:a6:11:65:4f:0f:f9:9f:fc:d4:
                    5b:41:b9:9e:65:ef:f7:25:32:45:41:46:b6:43:8b:
                    fe:5d:07:ca:9b:b9:40:8e:92:75:1f:8e:7f:33:46:
                    51:6c:ae:f3:d5:5d:83:f5:6e:6d:a4:8c:2f:fa:97:
                    99:37:7c:36:54:9d:16:0b:3e:e6:b2:b1:19:8f:a4:
                    d4:98:02:d4:f1:67:1f:d1:04:50:25:a1:4a:96:0d:
                    d9:3d:a3:91:1f:c7:bb:9d:04:89:02:b0:04:b6:8a:
                    12:fc:da:33:9f:04:fe:38:6b:69:2f:1f:0f:cd:52:
                    63:be:94:f8:55:f8:cf:89:b0:2e:24:bb:84:e2:8a:
                    e8:3c:19:90:66:05:9c:f0:f0:f5:8b:6d:0b:06:47:
                    f6:c1:60:20:d4:42:87:94:06:71:82:24:2a:59:06:
                    6e:73:5e:f6:ff:24:f9:24:f9:c5:cc:40:83:08:d6:
                    cc:4b:b6:7b:ca:78:b4:ce:06:3a:0d:9a:5f:b2:77:
                    a6:8b:88:b9:56:ed:a5:26:49:81:65:35:8f:67:f6:
                    27:d3:57:90:80:6a:76:a7:01:ea:c8:d7:db:a3:89:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0F:B7:42:B1:1A:0A:E1:FF:30:6E:B0:79:D3:64:83:90:08:F0:A1
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0f:f8:4a:94:e2:e4:39:12:0a:7e:4e:54:8d:35:54:95:51:
         8f:91:68:42:bb:fe:c4:a0:31:87:ff:0a:7f:2b:3b:86:c1:52:
         ab:03:e7:7d:a8:ee:ae:bf:d5:e9:fe:ae:d0:22:c5:73:b6:76:
         66:fe:14:53:5c:0f:f5:72:6a:5a:9a:a6:c0:7f:5c:60:92:1b:
         72:0e:1e:76:0d:78:60:a7:07:6a:3c:5b:2b:7f:c2:3a:d0:dc:
         f3:f9:30:1a:42:ab:41:86:d8:e3:db:03:b4:85:8d:c8:5a:a9:
         7f:fe:94:1d:5d:bf:4a:c2:75:9c:b1:dc:f8:14:b0:85:b9:e0:
         3a:9a:f2:6c:5b:55:30:7b:36:44:2a:e1:10:99:bf:d4:f3:cf:
         a6:ba:9e:f9:02:98:cc:b4:bd:65:1d:0d:ac:ab:c1:35:06:2c:
         70:77:6b:71:84:d2:14:16:49:cd:3d:45:f4:1e:d2:e1:83:74:
         bc:2f:5b:c4:89:d6:8a:da:65:9f:7c:0a:fb:5a:1a:1f:4d:df:
         18:e2:17:7c:d1:f9:a7:67:67:62:db:d0:64:2b:10:66:80:73:
         31:ac:56:5d:53:92:23:b4:06:cc:82:47:aa:bf:cd:94:71:3b:
         fa:8c:9a:31:9b:48:0b:21:df:2a:09:9e:75:6e:34:ce:2b:73:
         4d:09:f6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 17:55:20 2025 by rpki-client