This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: qO9VN1YLi+4jhdfZ6nzhFxnSeqA65ZVlnkochWKOs3o=
Subject key identifier: 06:22:7C:3F:5D:99:95:16:A4:7A:68:7A:15:A4:83:D9:C4:04:7D:91
Authority key identifier: BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
Certificate issuer: /CN=A91609040001/serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Certificate serial: 75E55A14CDA02AD96B4EAE415473EF743F48FB68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
Manifest number: 0510
Signing time: Tue 25 Nov 2025 00:02:12 +0000
Manifest this update: Tue 25 Nov 2025 00:02:12 +0000
Manifest next update: Sat 29 Nov 2025 00:02:12 +0000
Files and hashes: 1: 177c9702-ee39-42d1-b76f-6cee77f4fb45.roa (hash: IZjqCDuu48x7AjQOOlR475AlABLppx+n0KPWP3mbyaw=)
2: 197500e2-3802-44b2-a561-ca3dad01e209.roa (hash: LMkOhR8oitnpWIWwo+ff7iHTil9wckIVvZSko8EEekQ=)
3: 1dffeac8-b779-49ef-ba27-58bc19891e60.roa (hash: JGG4dTO8UJf/vYGc8fwxTAOM1h6nEPP82EI/7Dv4FHU=)
4: 220cee0c-6002-409a-8194-38e216c0096c.crl (hash: mOIYOuxJ8a0HKYArYRKgSOE/jFEb9pMZo2whErgAmKQ=)
5: 22707524-2248-48ea-815f-578f49b19436.roa (hash: fe034WnBtuFinRptIYu7rq19OozfzbkZbEFpFjLILHE=)
6: 22d6913e-5f3d-4f99-9a60-48579f471838.roa (hash: tvlz6rdf6o1VhTj9MN74UhRyGtkmPrUWF+QfcAN2XXk=)
7: 245fa4eb-6d0d-4df7-9e2d-29a7d39adcb9.roa (hash: 77L/bNHp8w4yFCp+OLzg5ldZu/g8b3ZjRhypYKOpX2o=)
8: 3684e50c-c50f-4ebb-b327-e0759241197e.roa (hash: 4627E3Mj815EcaXkX3BTu4n4/Fyc8pjeRhwmHUjWB4E=)
9: 3b8557c0-d5ee-4f9d-80ac-e41a37ffff27.roa (hash: IkDmY2VrM+MUCXVE/KGDwQp38xJerke+gZfTRPzKW38=)
10: 42932dd4-2720-47b3-a472-fc2c8a50a46c.roa (hash: 1LQDJZsx6Ih/p1JXbixCJFIni4NstX9kTQqLItMf6Bo=)
11: 43fd8687-12d4-49b5-9958-8536ce8160b4.roa (hash: uqGyuI64MyoSB2aCcDH4ZYFIVtRIimLKr+qLtdzGGDc=)
12: 6b15abb6-10b7-4ecd-9947-c96012f824c6.roa (hash: YDEb1HZpmKP7sx/WuOw3OFG2ObkpXND2FyRZjfR2dvk=)
13: 7b26d410-17d7-4310-bb58-41c465f8eef2.roa (hash: iZ5upg9JhYgqzuisO9iMHg6o3uglr67eIAFDAVOMJFQ=)
14: 882a767c-0faf-4e71-a224-ecec47d98fcb.roa (hash: zj3uaCJ1OVw76COdDaPaPY8yFlOeR+/ReGZ6syX0RDg=)
15: 8c170584-7c9b-414b-8cba-a934a0a79bbe.roa (hash: qeiN2jY48ldTzPZErmuiZOmp5qE9mu9/GnZEk7z/YWM=)
16: 9e37f855-48bf-420a-a86c-5eeb4fc1f790.roa (hash: UaHt+4lelzGalTP6o6RTVxgEfhRYbwB09w3EQYZfbmg=)
17: adf75e2e-9d2c-4718-a49d-ad44079b266b.roa (hash: sbGSBiN+e2Ag51zrXc1UwPae+VvT58VQo1yXZWqJMvI=)
18: cb2e5a8c-21f1-4679-a372-617732fc3ea6.roa (hash: Z9np75TZ9Xp1a9ECxf2+DE3mfvCD/7fxNnuBJSZrfSo=)
19: cebef322-460c-4f6e-8a8a-2f4b41debd9b.roa (hash: 8YU7fg0zlfz3zh4wwfhvDooXzSoHUcM3m57KVGTCELU=)
20: d953b731-7921-47dd-abf3-b7b8cc367900.roa (hash: aXN/Mp7fby5XcX6lsymhb6JcsHglVTPldRt7Y8yfOuw=)
21: e32c9cbd-a241-4df6-99bb-e7d15abe4b3b.roa (hash: 9OizPigUZE6/PAl/qV5jIptlHQkQvMFcwl8vNkU9a3A=)
22: fcd6adab-06f0-4676-9568-6d4d48f7658c.roa (hash: 7qFv7/S4ZCYOk7ry4v77f24Y1St+2VgNdsB9gS3rrXk=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 29 Nov 2025 00:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e5:5a:14:cd:a0:2a:d9:6b:4e:ae:41:54:73:ef:74:3f:48:fb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91609040001, serialNumber=BCE9BA11292F847512C0A8412E51E6E3BA0D991D
Validity
Not Before: Nov 25 00:02:12 2025 GMT
Not After : Nov 29 00:02:12 2025 GMT
Subject: serialNumber=411511713a0e539e74ee65bfbf58a2031426d5e9d981a4a52bc331bbaeb727fb, CN=1684111e-31c1-42e6-8f20-fc9ab8b5cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:7f:63:97:12:40:0b:86:60:d2:6d:1a:cd:
12:ed:60:e2:b9:7a:ac:a1:70:7d:64:c8:61:87:e3:
d3:9b:a7:77:70:c3:bd:ab:07:d8:2c:d2:33:65:3f:
90:01:95:c8:77:40:82:c3:50:77:9c:9b:32:1f:de:
a0:5b:05:6c:ab:45:32:1c:0c:96:e6:53:c0:b6:dc:
69:5d:72:09:cf:69:56:c9:00:23:54:c5:b6:0d:18:
4c:ff:5e:11:c9:8d:26:28:f2:76:b7:6c:e2:29:60:
50:dd:c7:c6:34:c0:4e:7a:a8:30:d3:83:6c:83:90:
74:0a:b8:53:36:ea:d0:df:6b:dc:97:60:7a:57:8f:
9a:ac:97:63:c0:f8:1b:4a:86:83:a6:80:0a:9a:a6:
48:10:c2:d3:16:62:1d:4d:4b:19:b5:2a:95:c4:a1:
57:1b:86:c2:91:30:40:43:a1:95:f4:60:15:bd:24:
85:3b:fc:b6:bc:c4:04:c5:c7:99:7e:16:7c:69:17:
77:6a:5f:08:79:b5:9c:95:d9:cf:84:59:13:15:86:
5f:cc:10:d7:35:66:8c:4b:c2:9d:c7:2f:2f:37:d6:
75:ba:2d:bf:73:f5:ea:5f:b7:36:b1:2e:66:a3:ed:
6d:64:6a:54:8c:d9:57:26:a7:71:9c:a8:36:a3:d2:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:22:7C:3F:5D:99:95:16:A4:7A:68:7A:15:A4:83:D9:C4:04:7D:91
X509v3 Authority Key Identifier:
keyid:BC:E9:BA:11:29:2F:84:75:12:C0:A8:41:2E:51:E6:E3:BA:0D:99:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOm6ESkvhHUSwKhBLlHm47oNmR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/bd48a1fa-3471-4ab2-8508-ad36b96813e4/220cee0c-6002-409a-8194-38e216c0096c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:c9:01:ff:e4:a5:17:92:ca:ce:90:75:f7:6d:26:6f:7d:4b:
71:26:dd:c0:5f:91:42:d6:3b:fb:cf:69:e7:08:90:0b:f5:5e:
fe:0c:82:8f:bd:aa:bf:86:a6:8d:50:aa:79:02:66:b4:5e:28:
3e:58:eb:60:30:c3:ff:9a:89:b4:f8:eb:8b:2d:fc:24:1d:2a:
79:0e:ec:08:ca:b9:17:b8:94:70:57:49:88:92:5f:2a:52:95:
70:fc:6c:51:05:8e:61:22:62:48:13:aa:70:f7:46:a2:44:ce:
e1:79:2c:ee:fd:c1:f0:c9:40:20:48:dc:18:e8:fe:8c:86:c9:
af:23:37:25:d2:7d:8a:b0:c0:ab:6f:c1:6f:77:35:51:1b:7b:
e8:58:a8:a8:2a:04:2a:0a:39:c0:3d:45:0b:db:c3:be:68:61:
8d:7d:e5:1a:76:f4:56:c6:c5:dd:64:72:61:d3:a0:5a:50:9a:
0c:9f:3d:ea:74:c4:b3:24:73:68:56:8e:33:bd:ef:08:4d:82:
cf:09:96:11:e5:d0:6d:c0:76:c4:6e:8a:6d:2d:15:0f:a8:ae:
9d:3e:da:b6:8a:08:63:95:85:7f:52:df:a2:42:66:6b:50:c5:
be:81:2f:32:4d:52:be:e1:49:30:f9:ae:38:6d:d3:5e:4e:ab:
2e:29:56:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 20:51:52 2025 by rpki-client