This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: T76bADk4oId+t+sebswu1OzgBWyhBdIcNut73D76LnE= Subject key identifier: 60:37:60:E2:CE:3F:69:BE:91:BE:9D:E4:05:EC:77:9F:1A:03:85:D0 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 046F19131AECB0C675C4C583CE8DFC24FBD42963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0517 Signing time: Tue 02 Dec 2025 00:03:28 +0000 Manifest this update: Tue 02 Dec 2025 00:03:28 +0000 Manifest next update: Sat 06 Dec 2025 00:03:28 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: VZs3N21C9jgdtKTZEcEPIcHY+KxrlLTjO4XNRUy5rTI=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 00:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:6f:19:13:1a:ec:b0:c6:75:c4:c5:83:ce:8d:fc:24:fb:d4:29:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 2 00:03:28 2025 GMT Not After : Dec 6 00:03:28 2025 GMT Subject: serialNumber=c296bc8062b8c13c0a2029275c0c2be945f0b93482379387bfe14c7794152e03, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9e:0c:c8:f0:4a:2f:73:1c:2c:7f:ab:8a:d4: 52:52:85:1d:af:00:fc:66:cc:da:a5:8a:11:d7:74: ee:cc:31:fd:10:92:36:71:ca:3e:1f:13:e5:03:b4: bb:2a:8d:60:08:0e:95:5f:39:3f:ee:a5:51:83:5e: b0:fd:e1:2e:86:0d:5c:06:79:c8:f7:3a:45:53:91: 88:4d:2c:62:62:4d:35:e8:c5:16:49:24:55:c3:e4: 5e:ad:1e:3f:0a:b3:8c:30:a2:4e:d5:f0:fb:37:51: 6c:42:a2:c4:61:3c:0d:a5:80:b6:7a:c9:e7:7e:95: c0:3a:f0:c3:d9:ee:df:ca:06:15:71:e9:8e:78:4d: e6:b8:a5:df:44:cf:f6:3d:d8:4b:a3:d8:ea:b9:21: 5a:00:61:c6:d9:40:cb:b0:40:95:00:2e:27:0f:20: 3b:71:c7:ee:3e:9a:74:6a:d8:27:25:8d:d1:9c:32: b3:30:da:af:ad:31:54:b3:90:6f:9b:a7:a2:12:c3: 83:43:fa:85:35:eb:d6:24:70:e5:fd:9c:f9:01:68: 01:74:e4:71:36:53:0f:f7:e5:dd:2e:fe:b1:0c:91: 94:9c:6b:f7:d7:17:93:5a:aa:ae:e1:ed:42:20:26: 2d:59:b9:5f:fb:57:40:d7:7e:ff:a7:ca:c3:86:31: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:37:60:E2:CE:3F:69:BE:91:BE:9D:E4:05:EC:77:9F:1A:03:85:D0 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:63:9b:aa:f4:92:b9:d6:f0:e7:4f:96:e8:e1:3c:28:f3:31: 02:c1:a6:15:2f:ac:42:06:77:e0:fc:98:3d:86:b8:6c:8e:f1: 7a:d1:d6:c4:ef:b3:03:cb:8b:80:0b:e2:5c:ce:87:89:d3:24: 28:53:6d:1d:ce:74:ea:57:61:b6:dc:d2:04:69:65:8c:af:7b: 53:7d:9f:f0:93:99:95:41:2e:b8:8b:8d:10:42:97:de:af:b6: a6:af:3c:27:68:8b:57:44:a5:03:8b:da:94:41:b8:ba:f0:71: 6d:da:17:df:2b:d4:24:66:f5:34:73:7a:a5:79:b6:70:1c:26: ff:52:46:08:5b:68:b4:60:5f:15:f9:66:59:1c:90:b9:ac:d3: 05:26:b6:80:3d:a6:39:0f:dc:c7:7f:63:b3:6f:28:b3:69:69: ff:cc:45:5a:18:7f:08:c2:29:c5:fa:34:3a:29:b0:b7:bf:e1: 20:94:09:5d:2f:40:93:a1:75:cc:39:5b:69:38:be:ec:13:2f: 59:21:89:31:bd:62:3d:37:e3:6a:66:5d:69:83:f7:0e:b4:22: 2d:a0:86:b1:84:63:a7:2d:04:63:cc:ff:67:2d:25:f4:45:91: 37:22:f6:15:54:bf:07:ca:87:d4:af:9c:9d:e4:3a:ca:93:5d: 6f:0a:01:b7 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUBG8ZExrssMZ1xMWDzo38JPvUKWMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIwMjAwMDMyOFoX DTI1MTIwNjAwMDMyOFowejFJMEcGA1UEBRNAYzI5NmJjODA2MmI4YzEzYzBhMjAy OTI3NWMwYzJiZTk0NWYwYjkzNDgyMzc5Mzg3YmZlMTRjNzc5NDE1MmUwMzEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZ4MyPBKL3McLH+ritRSUoUdrwD8 ZszapYoR13TuzDH9EJI2cco+HxPlA7S7Ko1gCA6VXzk/7qVRg16w/eEuhg1cBnnI 9zpFU5GITSxiYk016MUWSSRVw+RerR4/CrOMMKJO1fD7N1FsQqLEYTwNpYC2esnn fpXAOvDD2e7fygYVcemOeE3muKXfRM/2PdhLo9jquSFaAGHG2UDLsECVAC4nDyA7 ccfuPpp0atgnJY3RnDKzMNqvrTFUs5Bvm6eiEsODQ/qFNevWJHDl/Zz5AWgBdORx NlMP9+XdLv6xDJGUnGv31xeTWqqu4e1CICYtWblf+1dA137/p8rDhjF4jwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFGA3YOLOP2m+kb6d5AXsd58aA4XQMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAERjm6r0krnW8OdPlujhPCjzMQLBphUv rEIGd+D8mD2GuGyO8XrR1sTvswPLi4AL4lzOh4nTJChTbR3OdOpXYbbc0gRpZYyv e1N9n/CTmZVBLriLjRBCl96vtqavPCdoi1dEpQOL2pRBuLrwcW3aF98r1CRm9TRz eqV5tnAcJv9SRghbaLRgXxX5ZlkckLms0wUmtoA9pjkP3Md/Y7NvKLNpaf/MRVoY fwjCKcX6NDopsLe/4SCUCV0vQJOhdcw5W2k4vuwTL1khiTG9Yj0342pmXWmD9w60 Ii2ghrGEY6ctBGPM/2ctJfRFkTci9hVUvwfKh9SvnJ3kOsqTXW8KAbc= -----END CERTIFICATE-----Generated at Wed Dec 3 00:54:01 2025 by rpki-client