This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          HAsSgPUZVkmYpYJsZa7UoiF/df6qRjEd/X3z6lpnQOQ=
Subject key identifier:   8E:B7:F8:D8:9D:F0:B2:F3:AD:DB:E1:91:3F:5F:C6:E8:F4:7D:79:F8
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer:       /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial:       706AB0FB7B0F11365273D146E9DE772A31DC7E61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number:          050B
Signing time:             Thu 20 Nov 2025 00:01:15 +0000
Manifest this update:     Thu 20 Nov 2025 00:01:15 +0000
Manifest next update:     Mon 24 Nov 2025 00:01:15 +0000
Files and hashes:         1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=)
                          2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=)
                          3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=)
                          4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: Wi4So+XYn+RSIwChyBHlu9xkekL53PrAFHBQs7SPos4=)
                          5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=)
                          6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=)
                          7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=)
                          8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=)
                          9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=)
                          10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=)
                          11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=)
                          12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=)
                          13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=)
                          14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=)
                          15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=)
                          16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=)
                          17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=)
                          18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=)
                          19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=)
                          20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=)
                          21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=)
                          22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Nov 2025 00:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6a:b0:fb:7b:0f:11:36:52:73:d1:46:e9:de:77:2a:31:dc:7e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
        Validity
            Not Before: Nov 20 00:01:15 2025 GMT
            Not After : Nov 24 00:01:15 2025 GMT
        Subject: serialNumber=1f5fafb59f784836f0ec30928fda0d7c119e0b9d04f573569090c61c9bfd4ed7, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:1d:62:14:96:43:75:bc:c7:91:92:50:a2:
                    aa:4d:61:cc:16:89:71:16:a9:ab:9c:fc:22:33:38:
                    1c:f8:b6:c7:cd:83:f6:a8:8f:4b:03:2e:be:85:1d:
                    91:fc:83:3f:6e:d1:f1:a1:f7:0b:70:05:b4:ea:f1:
                    75:d5:1f:94:51:c2:1a:7b:1c:e5:fb:43:53:58:04:
                    fd:23:5a:c7:9d:31:5f:ed:c6:98:15:94:c4:14:e0:
                    1c:60:0a:83:b2:ef:b1:51:4a:d8:7c:05:cd:52:36:
                    6b:2d:b2:9d:97:e2:21:eb:af:99:97:b7:56:b6:72:
                    95:da:54:c5:fd:df:1f:fb:bf:1f:7c:7f:cb:be:0f:
                    5f:c0:44:84:26:ad:5b:0e:5a:d7:6a:ee:39:63:00:
                    5d:49:3c:be:d5:a6:96:ff:f2:04:c8:3a:8e:b3:a2:
                    91:aa:e4:5c:08:d0:f6:f6:09:76:e1:3a:42:74:2b:
                    9b:b6:48:f0:a6:ec:de:f0:5d:55:3b:49:29:68:74:
                    bf:b8:f7:65:b2:c6:da:9f:79:bb:32:08:be:ca:24:
                    ee:b7:d0:3c:8a:a0:3f:ff:56:79:1b:79:ce:ff:04:
                    09:11:d3:4e:3b:92:53:d3:ac:26:40:e0:87:a7:1d:
                    de:eb:0b:18:ea:ed:ca:b6:c3:00:e7:d6:93:94:d7:
                    ab:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:F8:D8:9D:F0:B2:F3:AD:DB:E1:91:3F:5F:C6:E8:F4:7D:79:F8
            X509v3 Authority Key Identifier:
                keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:87:d8:a6:2e:d1:1a:a0:c9:4b:95:ff:5e:59:bd:4d:fa:90:
         2d:f4:39:41:ea:10:16:0c:d8:dc:79:bc:ce:3c:4b:96:22:6e:
         c0:52:ad:44:31:b8:82:1f:1e:99:42:12:ea:74:4d:01:ff:42:
         b4:a5:b3:8f:bb:cb:c5:0a:1a:05:d1:be:91:18:70:5f:c1:5c:
         bb:0d:a8:71:a3:a5:d2:44:2a:3d:b5:3f:1e:35:35:ac:b5:e2:
         b0:90:4d:cb:23:ee:d0:3a:87:24:27:4a:4e:f6:6f:bc:7c:fa:
         47:b1:d8:34:9a:b9:fe:e7:0f:6c:23:93:1c:4e:05:cc:23:cc:
         44:44:28:9c:0d:2b:6b:c6:f6:d7:39:24:f8:43:a5:bb:7c:d3:
         91:4f:3c:27:1c:9b:ce:b3:83:fc:1f:5e:c4:9d:5a:3d:d4:fa:
         c8:8b:70:32:f3:b3:f9:86:db:60:aa:4f:c8:9e:9b:fe:a5:49:
         d6:04:e2:b5:48:2e:91:21:ae:39:32:99:05:0c:1a:8a:66:5c:
         dc:90:ad:01:87:4e:db:f8:e7:94:78:13:bb:61:71:28:26:8c:
         f7:44:4c:16:09:c2:f0:b8:69:0b:c2:8f:3f:f6:01:dc:ff:0e:
         91:58:29:a6:d9:cf:11:0b:c3:07:e7:1b:8d:d7:e2:62:c2:d1:
         18:e4:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 18:30:08 2025 by rpki-client