This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: Cd8Q5CTpsBmj1Fap1watM92dPGbu8qj1Fej71NHK3ig=
Subject key identifier: 3C:C0:E6:7C:E0:28:49:94:3D:E9:67:31:3D:C0:05:6E:1E:2A:D7:5A
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 0E8BC129E2697239DE18C07515133BF64497ABC3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number: 0508
Signing time: Sun 14 Dec 2025 00:02:29 +0000
Manifest this update: Sun 14 Dec 2025 00:02:29 +0000
Manifest next update: Thu 18 Dec 2025 00:02:29 +0000
Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: qIdRpmBdkt5j6LH5saLB37Zp94oHt1Bb24SAmi7FS78=)
2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: riQ4OigVMA/6ztt1jMjGMZbSAxv30F/DqUjq1/O/+NM=)
3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: E63/PRfPuiddezwGGylWnwb7tLNsK2qxydwE1fAIdv0=)
4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: P9InS/XVOLOk4R1ePBm1Szb3AzBdZtakRQCjb4eu2W8=)
5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: F+0zGGSMWuBzeFDDrUSsBgI7o2bwr7bXbZXYXS9wuKE=)
6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: OKpnsf6UGTaT1NG1RYx1qdBY9TSJQqRzfvmUIaNjoqw=)
7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 8YUGZL0iWHqRvW0nCojnvJIK483zfyTvdec+UOEcms4=)
8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: 3idRwkohe2nCD9Gbupe7DWsKMLQJv6wYpeNbU363pfw=)
9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: Ki9by1Mx+8KDanhZgRtpmM/cLF1Muv1gky/XKFAhDDw=)
10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: lNlFLZT08eoziDCTsqvWxLNo+sFuyOZGIrMshIQatbQ=)
11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: mr90+OuRqivi/gFgvBd4iqR2UjBX9ehfST4G9a6ekAc=)
12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: QXGSd+TQ+IuzPahzyTm8NSVacWTxuDI+gBi5F6Zjrnk=)
13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: HS1LLcEPS8/a/jky8LMQMmE/q7Zt1pCkXK1ygZRWkxo=)
14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: 5/dXc6JsS7wzh+Mc8Mc6k0FXXEJF+Hu41Zf5FEaxhMg=)
15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: DPPoux71lGrxQrMl9eg2Wg/DcwR5KcobcuR9JnfGEdE=)
16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: osPZlUv3k9bODbjWFQATaZ5WatToqhR98hXI3sVeu9o=)
17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: Az1/8UrHgQy8sjDu+TNvXAT1slP+3kq9IRvtH58qq4Y=)
18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: vhrKhW0gdXGOgfhTiPor954aks5vnlI1w6Ax+IPOHdw=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Dec 2025 00:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:8b:c1:29:e2:69:72:39:de:18:c0:75:15:13:3b:f6:44:97:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Validity
Not Before: Dec 14 00:02:29 2025 GMT
Not After : Dec 18 00:02:29 2025 GMT
Subject: serialNumber=4fb9d96d9632f9a2029115454ac27d5d041f0cfe6d511334859d6f9f0b9e4716, CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:7b:a1:da:64:d2:31:58:10:d7:24:7a:54:
84:26:e2:f7:1e:96:33:ed:05:df:40:47:f4:84:36:
a6:02:c7:16:43:2d:20:9a:a9:c3:a7:d9:17:fc:16:
f3:dc:a5:c4:37:17:70:c1:b6:94:93:0d:27:97:57:
3e:15:46:cb:f5:6b:e1:86:c3:34:23:7f:a5:92:56:
a3:90:77:e3:b7:a4:aa:e7:ed:b2:34:29:1a:ca:eb:
f2:e9:a0:22:18:ba:4a:6a:8f:ba:61:50:05:5e:f1:
96:b9:26:2d:ea:d8:4b:2c:39:7b:e8:b8:67:20:d5:
3a:dc:c4:ba:c1:e3:7c:42:87:c1:11:3c:c2:26:e2:
1b:cd:57:d1:4a:59:09:38:58:50:1b:e3:12:42:a9:
6a:46:c2:a6:fd:d5:63:be:ef:3a:27:9c:fd:21:48:
6d:f6:f9:a2:6f:7a:13:30:91:74:cd:2f:34:19:6c:
da:48:fb:f6:f9:39:ff:94:a5:6b:8e:c4:f1:4e:62:
f1:7f:10:7b:16:6d:5e:e3:e2:65:c5:60:f4:f5:7e:
d1:fb:fa:dc:a3:76:88:f5:f3:40:25:15:79:f0:d9:
16:3d:2f:f8:c5:33:ca:c4:eb:6d:ad:46:c9:19:2f:
c8:0f:63:a7:50:81:2a:ed:a9:8a:0d:eb:fd:0b:75:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:E6:7C:E0:28:49:94:3D:E9:67:31:3D:C0:05:6E:1E:2A:D7:5A
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5c:e5:cd:09:09:89:a2:a7:95:40:8a:aa:ae:0b:19:76:94:
b1:4f:db:8f:8b:52:4b:c6:fd:f8:35:9e:5e:8a:8b:d2:48:43:
63:9f:b9:95:3c:cf:dd:a3:96:7f:a0:66:df:58:3c:fe:c2:8a:
e3:f8:70:c5:a7:63:b3:6e:1a:7e:17:79:4d:29:c9:6b:5a:91:
de:74:cc:91:8f:e1:0a:cb:7a:21:5d:37:8a:e2:f1:17:cf:c8:
15:71:94:15:4a:da:5e:78:ab:06:1d:f1:02:1c:a4:30:9f:3c:
9d:92:55:6c:21:4b:35:86:d7:0c:9c:4e:7a:6e:ce:c7:50:39:
5f:51:fb:70:f1:27:aa:a6:8d:2f:6c:6c:a9:e4:bc:5b:c8:5c:
69:16:52:48:3a:e5:7b:3e:3b:29:81:ac:22:47:7c:94:b2:9a:
09:d0:98:c4:90:82:03:fd:55:a6:45:5a:f6:50:b4:02:76:3f:
61:ae:47:a1:be:37:c9:71:ba:4f:76:5f:91:2b:f8:48:6a:eb:
8b:f1:ab:0c:0a:82:c2:11:e8:39:9b:03:f7:20:1e:94:ae:11:
84:5c:81:52:d8:98:fd:08:05:61:f4:f3:d8:90:2b:75:18:7f:
04:7b:a2:16:01:d1:58:fd:04:d3:e7:50:d9:47:c9:d2:ed:01:
b3:e4:fb:50
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUDovBKeJpcjneGMB1FRM79kSXq8MwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw
RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI1MTIxNDAwMDIyOVoX
DTI1MTIxODAwMDIyOVowejFJMEcGA1UEBRNANGZiOWQ5NmQ5NjMyZjlhMjAyOTEx
NTQ1NGFjMjdkNWQwNDFmMGNmZTZkNTExMzM0ODU5ZDZmOWYwYjllNDcxNjEtMCsG
A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hB7odpk0jFYENckelSEJuL3HpYz
7QXfQEf0hDamAscWQy0gmqnDp9kX/Bbz3KXENxdwwbaUkw0nl1c+FUbL9WvhhsM0
I3+lklajkHfjt6Sq5+2yNCkayuvy6aAiGLpKao+6YVAFXvGWuSYt6thLLDl76Lhn
INU63MS6weN8QofBETzCJuIbzVfRSlkJOFhQG+MSQqlqRsKm/dVjvu86J5z9IUht
9vmib3oTMJF0zS80GWzaSPv2+Tn/lKVrjsTxTmLxfxB7Fm1e4+JlxWD09X7R+/rc
o3aI9fNAJRV58NkWPS/4xTPKxOttrUbJGS/ID2OnUIEq7amKDev9C3VfvwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFDzA5nzgKEmUPelnMT3ABW4eKtdaMB8GA1UdIwQY
MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E
c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli
Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi
LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAH9c5c0JCYmip5VAiqquCxl2lLFP24+L
UkvG/fg1nl6Ki9JIQ2OfuZU8z92jln+gZt9YPP7CiuP4cMWnY7NuGn4XeU0pyWta
kd50zJGP4QrLeiFdN4ri8RfPyBVxlBVK2l54qwYd8QIcpDCfPJ2SVWwhSzWG1wyc
TnpuzsdQOV9R+3DxJ6qmjS9sbKnkvFvIXGkWUkg65Xs+OymBrCJHfJSymgnQmMSQ
ggP9VaZFWvZQtAJ2P2GuR6G+N8lxuk92X5Er+Ehq64vxqwwKgsIR6DmbA/cgHpSu
EYRcgVLYmP0IBWH089iQK3UYfwR7ohYB0Vj9BNPnUNlHydLtAbPk+1A=
-----END CERTIFICATE-----
Generated at Sun Dec 14 21:34:53 2025 by rpki-client