This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft File: manifest.mft (raw, json) Hash identifier: SlLlYDsA4daXnDiLbTi6awxkwUjoxnpopVsilzFzJPM= Subject key identifier: A0:8F:8A:D6:DA:A8:28:50:29:E2:8B:6E:10:C9:EF:2B:F7:BE:25:E8 Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Certificate serial: 67D2AF82B216AD76DB13C99ABC428BEF741CC6BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft Manifest number: 0514 Signing time: Sat 29 Nov 2025 00:02:52 +0000 Manifest this update: Sat 29 Nov 2025 00:02:52 +0000 Manifest next update: Wed 03 Dec 2025 00:02:52 +0000 Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=) 2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=) 3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=) 4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: 4vB9lxwrGw46IB2apWsAuzd4hOK6ohIGqTQdBUY4pQE=) 5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=) 6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=) 7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=) 8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=) 9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=) 10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=) 11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=) 12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=) 13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=) 14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=) 15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=) 16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=) 17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=) 18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=) 19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=) 20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=) 21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=) 22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Dec 2025 00:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d2:af:82:b2:16:ad:76:db:13:c9:9a:bc:42:8b:ef:74:1c:c6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D Validity Not Before: Nov 29 00:02:52 2025 GMT Not After : Dec 3 00:02:52 2025 GMT Subject: serialNumber=fea146bfc8e67c186a405b11f79ff70c3284616e62c12660376fdcb4e2fccc26, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:c3:7f:2a:4f:42:eb:51:04:de:07:f8:46: db:a6:66:c0:68:a7:9f:5f:34:b5:d0:cc:db:f1:c7: dc:7c:13:58:68:48:72:8b:72:7c:0f:f4:cc:df:eb: 4d:cf:d1:b9:87:05:14:b0:0b:c7:3a:eb:bc:18:ee: 7c:18:87:43:39:04:c1:ef:3b:34:e0:73:1b:ab:58: 75:6d:79:4c:5f:b7:de:02:ba:dc:da:51:75:5f:af: 7c:cd:aa:bd:12:17:b7:5b:03:6c:3a:b4:70:c1:64: 5d:36:ea:5f:52:de:22:f9:af:7c:8a:39:48:c1:f9: fe:90:5b:c6:96:2f:68:f5:22:45:88:89:9f:5e:a0: eb:76:0a:c8:cf:6c:0f:d0:bd:ae:a5:0e:6b:02:76: f1:d6:3a:79:e4:13:8c:6f:62:54:fe:15:50:c1:49: 3d:d0:f0:f6:bd:05:23:3d:8f:f9:8e:1b:3e:a1:4b: d8:5d:b8:f0:36:61:fb:b5:f3:88:38:94:36:04:38: 9d:3d:9c:4c:80:4e:89:01:a1:96:29:b3:f4:39:cf: 91:43:52:7e:58:11:00:af:5f:c2:92:85:37:99:97: d1:08:bb:50:09:d2:a4:04:e0:70:75:03:a0:5d:35: ba:89:91:c6:10:7d:a2:91:4a:0d:d6:4f:a0:74:61: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:8A:D6:DA:A8:28:50:29:E2:8B:6E:10:C9:EF:2B:F7:BE:25:E8 X509v3 Authority Key Identifier: keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:51:77:d8:52:13:50:89:ab:eb:67:e6:ee:cd:2f:5d:c3:c5: bb:d1:ba:d4:64:11:51:a9:0e:c9:e7:a8:c2:0f:0c:4d:c1:b5: d5:13:cd:01:18:d4:45:55:b3:bc:50:82:a8:41:9c:e5:af:fd: 39:21:f1:8d:d3:95:c6:46:72:a3:6c:cf:29:64:cb:bc:08:0d: db:b8:b2:17:3a:fd:b8:b6:98:e7:6e:6a:06:11:54:e1:0e:bc: 5a:6f:05:bf:4f:b1:31:03:45:c2:90:60:82:2c:cf:cf:10:ef: 87:93:bb:38:dd:01:b1:f5:78:2c:73:bb:f6:b6:2b:af:4a:98: 84:bb:5b:56:1b:8d:fe:7c:1b:7a:e9:86:c7:df:75:8c:40:97: 0c:c8:55:c6:42:f4:6f:05:fd:0a:46:33:62:5c:91:fe:49:83: 5a:c4:a3:cd:18:19:f4:97:8d:15:a6:f9:c2:69:78:5a:20:c5: be:01:b1:88:78:8f:b4:f6:ca:9d:a9:4a:8a:c1:64:83:b9:47: de:ac:aa:96:ce:86:db:15:d1:39:f6:86:c1:6f:d1:3b:db:6c: ed:af:36:fe:30:e8:91:d1:36:ee:73:3c:f7:84:e3:73:b8:20: 41:86:f9:4c:fd:c0:82:61:af:9d:24:c0:59:f1:ed:f0:ab:a3: 42:8d:88:e3 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUZ9KvgrIWrXbbE8mavEKL73Qcxr4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjA5MDQwMDAxMTEwLwYDVQQFEyhCQ0U5QkExMTI5 MkY4NDc1MTJDMEE4NDEyRTUxRTZFM0JBMEQ5OTFEMB4XDTI1MTEyOTAwMDI1MloX DTI1MTIwMzAwMDI1MlowejFJMEcGA1UEBRNAZmVhMTQ2YmZjOGU2N2MxODZhNDA1 YjExZjc5ZmY3MGMzMjg0NjE2ZTYyYzEyNjYwMzc2ZmRjYjRlMmZjY2MyNjEtMCsG A1UEAxMkMTY4NDExMWUtMzFjMS00MmU2LThmMjAtZmM5YWI4YjVjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifDfypPQutRBN4H+EbbpmbAaKef XzS10Mzb8cfcfBNYaEhyi3J8D/TM3+tNz9G5hwUUsAvHOuu8GO58GIdDOQTB7zs0 4HMbq1h1bXlMX7feArrc2lF1X698zaq9Ehe3WwNsOrRwwWRdNupfUt4i+a98ijlI wfn+kFvGli9o9SJFiImfXqDrdgrIz2wP0L2upQ5rAnbx1jp55BOMb2JU/hVQwUk9 0PD2vQUjPY/5jhs+oUvYXbjwNmH7tfOIOJQ2BDidPZxMgE6JAaGWKbP0Oc+RQ1J+ WBEAr1/CkoU3mZfRCLtQCdKkBOBwdQOgXTW6iZHGEH2ikUoN1k+gdGEr6QIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKCPitbaqChQKeKLbhDJ7yv3viXoMB8GA1UdIwQY MBaAFLzpuhEpL4R1EsCoQS5R5uO6DZkdMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi92T202RVNr dmhIVVN3S2hCTGxIbTQ3b05tUjAuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t L3ZvbHVtZS9iZDQ4YTFmYS0zNDcxLTRhYjItODUwOC1hZDM2Yjk2ODEzZTQvbWFu aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvYmQ0OGExZmEtMzQ3 MS00YWIyLTg1MDgtYWQzNmI5NjgxM2U0LzIyMGNlZTBjLTYwMDItNDA5YS04MTk0 LTM4ZTIxNmMwMDk2Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw BKACBQAwDQYJKoZIhvcNAQELBQADggEBAHVRd9hSE1CJq+tn5u7NL13DxbvRutRk EVGpDsnnqMIPDE3BtdUTzQEY1EVVs7xQgqhBnOWv/Tkh8Y3TlcZGcqNszylky7wI Ddu4shc6/bi2mOduagYRVOEOvFpvBb9PsTEDRcKQYIIsz88Q74eTuzjdAbH1eCxz u/a2K69KmIS7W1Ybjf58G3rphsffdYxAlwzIVcZC9G8F/QpGM2Jckf5Jg1rEo80Y GfSXjRWm+cJpeFogxb4BsYh4j7T2yp2pSorBZIO5R96sqpbOhtsV0Tn2hsFv0Tvb bO2vNv4w6JHRNu5zPPeE43O4IEGG+Uz9wIJhr50kwFnx7fCro0KNiOM= -----END CERTIFICATE-----Generated at Sat Nov 29 21:34:02 2025 by rpki-client