This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: lS9qpqPw8wO+GV9ts8Im0wQ8nEppSswcts5Td/WoQyU=
Subject key identifier: 1B:C9:76:70:C4:C9:61:F7:11:58:1A:89:F3:CF:E2:9C:38:C1:D1:57
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial: 0A56B0D91207F0636FE8D00460B85339562AE15E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number: 0555
Signing time: Sun 25 Jan 2026 00:18:55 +0000
Manifest this update: Sun 25 Jan 2026 00:18:55 +0000
Manifest next update: Thu 29 Jan 2026 00:18:55 +0000
Files and hashes: 1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: SCeMMbGzGvv6HAuSJ/vGpNda2yOvxSSfh11EvOqxjbM=)
2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: hzCGH9Q4CLNRrJO5f/N6TRDpEwXwCSmryCh/GNlDLIY=)
3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: jprlQAJS43dxXhAV+PzgAj4W4F0a0m2+Vy/yPHjLOuQ=)
4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: 7afo5LLkt/dawCqL1w85c3A7fRQwHfF7kMp908Gn4G0=)
5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: 0KQBvN1RE7grhzO1NtsZeBZ2XnIodPRhm+tgqdVJlXU=)
6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: yLSDYWvtNqDhK1vNzzdPN4byDWZTEZsu8BW74vjYoHA=)
7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: IubZRpLe2W06JqfFrohT5K9ByEMF89/I45CBjLIp+UQ=)
8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: onFuUkONqK94T3a48Pkkw7Zj3Q2Ixpu+wEOZPWkUe5Y=)
9: 9d703748-f446-47a1-b0a7-5e3357f2e0d2.roa (hash: yHhTo2zzTs16il8tTHrPT+IjNjDaqMzdbXx4MKJFj8Q=)
10: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: OoUqBLMjarXOoH3vdhZFeG6s3xyNy6J6B5VmynhONq4=)
11: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: Fs+4+GueFglWpfh7cWu79LMoO4jnwwFYswhH/hBBpRg=)
12: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: tUfvO1tfzBNVYGTeoObhXIC/xwxMuE3Y0IbH2s5grG4=)
13: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: vrOZ6fYSEHIvtLwk17aBzKsCW/DW0euoAv5ObsTTTxY=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 29 Jan 2026 00:18:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:56:b0:d9:12:07:f0:63:6f:e8:d0:04:60:b8:53:39:56:2a:e1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Validity
Not Before: Jan 25 00:18:55 2026 GMT
Not After : Jan 29 00:18:55 2026 GMT
Subject: serialNumber=045ccd3e0cb303a36fa96c50aee0f4b060a2f901beeeda471958ba660af6c5c9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:25:1b:2b:9b:d8:0b:ac:7f:4a:cb:c3:80:bd:
05:65:48:21:ca:28:e2:12:56:7f:c2:e2:31:ca:0f:
17:6f:07:8e:78:a9:a3:96:3c:fc:e1:1a:b9:36:a8:
5e:95:0e:26:3f:5a:e0:c1:5d:f3:02:9a:c3:80:c8:
bc:6c:e1:56:fe:0c:5f:79:46:01:4b:f8:39:33:87:
d6:1d:2b:33:31:6f:39:59:97:72:b1:89:69:35:2c:
e9:55:e0:c3:79:f0:7b:68:b8:c8:a5:a3:9b:92:90:
82:c1:8f:07:7a:97:37:2f:6e:71:45:f3:00:6d:25:
0e:38:c0:81:5d:10:e6:7b:55:aa:aa:ba:6a:9e:a8:
ed:ed:39:a0:b0:be:eb:19:eb:2e:29:93:2f:22:f6:
9c:08:a5:dc:55:4f:cb:76:5c:6e:d0:61:0d:02:a4:
ed:b4:5b:69:ba:ef:a0:17:4e:46:25:b7:bb:91:e1:
44:2d:e7:38:78:ce:a5:d4:66:b0:1f:b9:3c:81:91:
84:fc:a7:14:7b:9e:8f:25:7e:0b:56:d1:62:63:73:
4a:bf:6d:8d:fa:61:ee:1a:cd:a0:8f:6b:1f:f0:83:
20:01:8b:29:56:e5:47:dd:a0:45:c5:11:dc:3b:07:
4e:85:da:8a:d8:e7:32:f4:e0:12:f7:45:34:cc:bd:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:76:70:C4:C9:61:F7:11:58:1A:89:F3:CF:E2:9C:38:C1:D1:57
X509v3 Authority Key Identifier:
keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8d:f2:aa:15:81:90:a9:13:77:35:6d:1a:3b:c5:e3:ea:47:
f4:0c:ff:d4:fc:64:f8:31:06:8e:19:36:05:6f:a2:14:36:72:
c9:1c:6c:af:94:c0:19:79:4e:8b:bd:1f:44:5f:3e:51:b2:1b:
f3:93:7a:73:71:0c:90:b0:99:16:2c:58:dd:0d:5e:a4:88:18:
e8:17:4e:66:36:5f:32:19:73:37:58:79:b5:35:11:d6:ee:34:
6a:69:31:d2:40:ca:46:dd:66:d6:b6:c9:bf:3d:5d:3c:43:c8:
33:e7:f0:d9:2d:ca:c4:f0:96:e5:d9:0e:6f:53:ee:60:54:77:
4f:70:bc:7e:d7:35:64:41:7f:3d:97:66:ba:42:28:c0:85:4b:
fd:a3:d8:40:1d:91:c7:99:a7:f6:fe:9f:96:11:14:93:64:c8:
48:24:15:47:35:4d:cc:5d:d9:f1:39:f6:7a:a3:4b:03:98:3b:
6c:79:a6:75:4c:26:bb:46:76:ca:28:54:aa:dd:62:39:c6:49:
d2:30:46:91:5d:b4:64:9b:ad:12:00:5a:f7:16:f1:3a:8a:9b:
f6:9f:6b:f4:f5:fa:db:95:a8:42:8d:dc:bd:ab:9f:76:66:3a:
bb:2a:07:65:6e:c9:c0:3f:fc:31:8c:f7:6f:72:3d:51:c9:49:
68:d9:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:44:13 2026 by rpki-client