This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: wAQ8WaXN+C9A6amwoKAQsX0VSy8TPltIqgTcjYj+DO4= Subject key identifier: 83:45:7E:5A:93:41:B8:DD:B3:06:AD:4D:8D:01:54:67:E2:42:35:2A Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 1382C3CB3823BC69AFD85A54D70439B3425E7088 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0520 Signing time: Wed 10 Dec 2025 00:01:36 +0000 Manifest this update: Wed 10 Dec 2025 00:01:36 +0000 Manifest next update: Sun 14 Dec 2025 00:01:36 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: MBCm/wpjWTCynLBAAXlhwqpHi+4pATpa9VJ7w3ENyd0=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: rQbNjdQJC3sJ4bliGCJBeHYXTky9EGpQuTbp2TB71jY=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: W5s2+KsThmK2t/kTEoDyc0qk5t8nWR8Vcr0OHIME7gY=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: k9VUaSFIBWczREEolGL8iCJU/lWv2kAqJYZ+UaMK0FU=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: A3EMEtAoLbWvo2+AU4wcz5LV+4FiZiLxrLSRIqLxB1Y=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: CNy33lvFVRD+mSD8JJeY7w+m3uy4j1Q7IRyDV4kVRuc=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: Q0oMp8ZPk9UZcsIR9g6UcmJjZKdMd1/UNJTA2+LxKxw=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 2kSCvroZg2jUdhJrRXEd6bpE68S4hIOVSrqhsjKg4Rk=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: 55JqWeNnPUgIMiCbIulJEhJREuoglf7zd0Hdhdnk7JI=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: nX53gsp63aFe1Zk0fvuz7gf9dNGw1Q0a6vNdlF04HMM=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: ZYZG8cDggGOScTpdb7p8ZIw+Y1ZbbJ0TIUBkEXnJp1Y=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: NebmV0kA/vdDwwxk2EOE4U6J80Xe14LeKDXdwnAwWfU=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: n1kg4tDD9KCpPUv6L5rqRkioae0zUB8A2YrnCFiHVJ0=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: rgmgKkFA/1ZuGJ4QRcU97a/WiPe2lq2P1GX24tqN91U=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: DuZi0/kBsFkmGULcNt4xmJZ4I8aFDcP0+xR9g1RHy40=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: yWi4vmYUMO0k3bGWU58+1DwpumVOkC/H5jR6owzOWJE=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: N/cY7SofU7BQTjSpADixy6DLuAFs/nCWf8HWg3e5lnI=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: mnMvQYdAbSRRbDZHXyfM/f8XdM80z72GugupasAKoQg=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: 5cTt1+vhncnDYsyS0iAO+sczddXxNbUExaXXLGjcsik=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: iHgVMCQkVpqqh3egN8945TcYU7izcrnduLWWQD583q4=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:c3:cb:38:23:bc:69:af:d8:5a:54:d7:04:39:b3:42:5e:70:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Dec 10 00:01:36 2025 GMT Not After : Dec 14 00:01:36 2025 GMT Subject: serialNumber=f2d90d19f1e431d8fbf456aa51bccfaefb72789f539ce181e45a6b68b5dff2ff, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8f:1f:cf:bf:5f:b4:db:d7:4e:53:17:04:e1: 7c:2e:ad:1d:1e:ab:b5:95:75:21:98:6a:0f:70:93: 3b:2e:5b:f6:89:33:da:4e:f4:83:e1:d2:91:be:ca: db:31:ed:9d:25:9b:f4:4f:67:b6:6a:d6:07:01:9d: e3:57:7e:5c:2e:af:a7:70:67:c1:3b:ee:9b:10:12: 1c:90:4a:58:43:ed:e2:fe:58:32:cf:69:64:ec:38: 89:b6:94:69:de:42:5f:78:8f:98:ac:0a:70:13:ec: d9:ea:e3:73:33:52:76:41:7c:a2:e7:18:4e:29:e9: af:46:a8:82:87:1f:30:80:44:6c:06:1d:07:19:28: b8:7a:39:de:72:06:00:6b:0a:a0:50:ff:d6:f2:91: b9:62:8c:e6:30:ef:f5:12:de:f1:01:ac:0e:d8:79: ba:3d:b2:18:f7:de:3e:18:ee:1c:6d:a2:a0:e6:e2: 36:0c:8e:31:a5:b4:05:c2:1e:fd:c0:bf:a2:fa:73: e2:7a:f5:9f:49:f2:5b:16:2a:f9:4c:0e:77:c6:ad: d4:9d:a5:c5:1d:38:20:0b:ba:95:75:bb:b2:f3:c5: ee:1a:86:a2:7c:a2:ca:15:51:c1:7b:77:db:c8:b4: 6f:92:af:09:8d:8c:2f:4c:be:b5:24:21:2f:13:06: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:45:7E:5A:93:41:B8:DD:B3:06:AD:4D:8D:01:54:67:E2:42:35:2A X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:26:0c:5d:8d:cf:72:f4:41:4f:64:6a:ec:fb:06:8e:4a:28: 1f:aa:ff:57:0d:9f:a9:58:65:07:6b:41:44:47:19:e4:e8:6e: 2a:1b:2c:56:51:2c:4b:05:d9:59:be:5a:03:00:54:ba:01:c5: 97:51:66:95:39:2b:ec:0d:f6:51:f6:d1:6c:f6:f3:52:2c:15: 70:2d:8f:f2:7e:0c:62:f3:c7:85:4c:82:a6:38:a3:93:59:4c: c1:48:00:08:be:60:1a:ad:74:47:c0:47:f4:81:80:08:3e:14: 8a:61:c9:29:a5:17:17:12:58:f8:37:5b:51:cf:bc:10:bb:76: 79:ea:03:6a:61:c6:be:4d:32:96:b3:11:b8:db:3b:65:ae:31: d0:73:60:6f:09:70:af:ff:00:35:49:89:68:fb:fd:7a:4c:79: a4:4f:73:86:cd:d5:86:14:ab:22:57:84:3d:dc:e0:47:6c:37: 6f:21:44:b6:fc:b5:64:a9:ab:d3:26:2e:2f:80:cb:0b:6f:81: 09:fd:62:93:cd:5d:ea:a3:25:e8:4c:87:b6:fe:57:8f:77:ac: ca:5d:27:61:9e:a8:7f:8f:ca:67:99:f5:aa:e8:d8:66:26:42: 8b:f1:e8:55:a6:af:c6:ed:ee:0e:21:af:05:f5:96:24:01:9f: 3c:7a:88:11 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUE4LDyzgjvGmv2FpU1wQ5s0JecIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTIxMDAwMDEzNloX DTI1MTIxNDAwMDEzNlowejFJMEcGA1UEBRNAZjJkOTBkMTlmMWU0MzFkOGZiZjQ1 NmFhNTFiY2NmYWVmYjcyNzg5ZjUzOWNlMTgxZTQ1YTZiNjhiNWRmZjJmZjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto8fz79ftNvXTlMXBOF8Lq0dHqu1 lXUhmGoPcJM7Llv2iTPaTvSD4dKRvsrbMe2dJZv0T2e2atYHAZ3jV35cLq+ncGfB O+6bEBIckEpYQ+3i/lgyz2lk7DiJtpRp3kJfeI+YrApwE+zZ6uNzM1J2QXyi5xhO KemvRqiChx8wgERsBh0HGSi4ejnecgYAawqgUP/W8pG5YozmMO/1Et7xAawO2Hm6 PbIY994+GO4cbaKg5uI2DI4xpbQFwh79wL+i+nPievWfSfJbFir5TA53xq3UnaXF HTggC7qVdbuy88XuGoaifKLKFVHBe3fbyLRvkq8JjYwvTL61JCEvEwb3+QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFINFflqTQbjdswatTY0BVGfiQjUqMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAB8mDF2Nz3L0QU9kauz7Bo5KKB+q/1cN n6lYZQdrQURHGeTobiobLFZRLEsF2Vm+WgMAVLoBxZdRZpU5K+wN9lH20Wz281Is FXAtj/J+DGLzx4VMgqY4o5NZTMFIAAi+YBqtdEfAR/SBgAg+FIphySmlFxcSWPg3 W1HPvBC7dnnqA2phxr5NMpazEbjbO2WuMdBzYG8JcK//ADVJiWj7/XpMeaRPc4bN 1YYUqyJXhD3c4EdsN28hRLb8tWSpq9MmLi+AywtvgQn9YpPNXeqjJehMh7b+V493 rMpdJ2GeqH+PymeZ9aro2GYmQovx6FWmr8bt7g4hrwX1liQBnzx6iBE= -----END CERTIFICATE-----Generated at Wed Dec 10 10:54:35 2025 by rpki-client