This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          lS9qpqPw8wO+GV9ts8Im0wQ8nEppSswcts5Td/WoQyU=
Subject key identifier:   1B:C9:76:70:C4:C9:61:F7:11:58:1A:89:F3:CF:E2:9C:38:C1:D1:57
Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7
Certificate issuer:       /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
Certificate serial:       0A56B0D91207F0636FE8D00460B85339562AE15E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
Manifest number:          0555
Signing time:             Sun 25 Jan 2026 00:18:55 +0000
Manifest this update:     Sun 25 Jan 2026 00:18:55 +0000
Manifest next update:     Thu 29 Jan 2026 00:18:55 +0000
Files and hashes:         1: 2e40ee0b-9aa9-4919-a079-9712212e127c.roa (hash: SCeMMbGzGvv6HAuSJ/vGpNda2yOvxSSfh11EvOqxjbM=)
                          2: 32bf2c39-b536-43d0-b557-f68d8ee64091.roa (hash: hzCGH9Q4CLNRrJO5f/N6TRDpEwXwCSmryCh/GNlDLIY=)
                          3: 3d1fb1c7-6140-4c57-928f-1a59586f9e2b.roa (hash: jprlQAJS43dxXhAV+PzgAj4W4F0a0m2+Vy/yPHjLOuQ=)
                          4: 40956690-3661-49f2-8ebc-2fa5a47a98ad.roa (hash: 7afo5LLkt/dawCqL1w85c3A7fRQwHfF7kMp908Gn4G0=)
                          5: 4cb3e9f9-46a2-41eb-a4b7-75b53d791f33.roa (hash: 0KQBvN1RE7grhzO1NtsZeBZ2XnIodPRhm+tgqdVJlXU=)
                          6: 55d6cbae-8b7f-45a9-8d9b-458d10a9b1ca.roa (hash: yLSDYWvtNqDhK1vNzzdPN4byDWZTEZsu8BW74vjYoHA=)
                          7: 565f9740-389f-45ac-956e-b96e19889315.roa (hash: IubZRpLe2W06JqfFrohT5K9ByEMF89/I45CBjLIp+UQ=)
                          8: 840736df-cd98-4b5b-a4f2-5615993fc74d.roa (hash: onFuUkONqK94T3a48Pkkw7Zj3Q2Ixpu+wEOZPWkUe5Y=)
                          9: 9d703748-f446-47a1-b0a7-5e3357f2e0d2.roa (hash: yHhTo2zzTs16il8tTHrPT+IjNjDaqMzdbXx4MKJFj8Q=)
                          10: a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl (hash: OoUqBLMjarXOoH3vdhZFeG6s3xyNy6J6B5VmynhONq4=)
                          11: b51d6a60-7601-45c2-8839-f2002dfa8409.roa (hash: Fs+4+GueFglWpfh7cWu79LMoO4jnwwFYswhH/hBBpRg=)
                          12: c18b0845-fc95-41d6-b476-af4e1e466849.roa (hash: tUfvO1tfzBNVYGTeoObhXIC/xwxMuE3Y0IbH2s5grG4=)
                          13: e5ffe65e-7287-4628-8759-7c141866ee12.roa (hash: vrOZ6fYSEHIvtLwk17aBzKsCW/DW0euoAv5ObsTTTxY=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Jan 2026 00:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:b0:d9:12:07:f0:63:6f:e8:d0:04:60:b8:53:39:56:2a:e1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7
        Validity
            Not Before: Jan 25 00:18:55 2026 GMT
            Not After : Jan 29 00:18:55 2026 GMT
        Subject: serialNumber=045ccd3e0cb303a36fa96c50aee0f4b060a2f901beeeda471958ba660af6c5c9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:25:1b:2b:9b:d8:0b:ac:7f:4a:cb:c3:80:bd:
                    05:65:48:21:ca:28:e2:12:56:7f:c2:e2:31:ca:0f:
                    17:6f:07:8e:78:a9:a3:96:3c:fc:e1:1a:b9:36:a8:
                    5e:95:0e:26:3f:5a:e0:c1:5d:f3:02:9a:c3:80:c8:
                    bc:6c:e1:56:fe:0c:5f:79:46:01:4b:f8:39:33:87:
                    d6:1d:2b:33:31:6f:39:59:97:72:b1:89:69:35:2c:
                    e9:55:e0:c3:79:f0:7b:68:b8:c8:a5:a3:9b:92:90:
                    82:c1:8f:07:7a:97:37:2f:6e:71:45:f3:00:6d:25:
                    0e:38:c0:81:5d:10:e6:7b:55:aa:aa:ba:6a:9e:a8:
                    ed:ed:39:a0:b0:be:eb:19:eb:2e:29:93:2f:22:f6:
                    9c:08:a5:dc:55:4f:cb:76:5c:6e:d0:61:0d:02:a4:
                    ed:b4:5b:69:ba:ef:a0:17:4e:46:25:b7:bb:91:e1:
                    44:2d:e7:38:78:ce:a5:d4:66:b0:1f:b9:3c:81:91:
                    84:fc:a7:14:7b:9e:8f:25:7e:0b:56:d1:62:63:73:
                    4a:bf:6d:8d:fa:61:ee:1a:cd:a0:8f:6b:1f:f0:83:
                    20:01:8b:29:56:e5:47:dd:a0:45:c5:11:dc:3b:07:
                    4e:85:da:8a:d8:e7:32:f4:e0:12:f7:45:34:cc:bd:
                    a2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C9:76:70:C4:C9:61:F7:11:58:1A:89:F3:CF:E2:9C:38:C1:D1:57
            X509v3 Authority Key Identifier:
                keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:8d:f2:aa:15:81:90:a9:13:77:35:6d:1a:3b:c5:e3:ea:47:
         f4:0c:ff:d4:fc:64:f8:31:06:8e:19:36:05:6f:a2:14:36:72:
         c9:1c:6c:af:94:c0:19:79:4e:8b:bd:1f:44:5f:3e:51:b2:1b:
         f3:93:7a:73:71:0c:90:b0:99:16:2c:58:dd:0d:5e:a4:88:18:
         e8:17:4e:66:36:5f:32:19:73:37:58:79:b5:35:11:d6:ee:34:
         6a:69:31:d2:40:ca:46:dd:66:d6:b6:c9:bf:3d:5d:3c:43:c8:
         33:e7:f0:d9:2d:ca:c4:f0:96:e5:d9:0e:6f:53:ee:60:54:77:
         4f:70:bc:7e:d7:35:64:41:7f:3d:97:66:ba:42:28:c0:85:4b:
         fd:a3:d8:40:1d:91:c7:99:a7:f6:fe:9f:96:11:14:93:64:c8:
         48:24:15:47:35:4d:cc:5d:d9:f1:39:f6:7a:a3:4b:03:98:3b:
         6c:79:a6:75:4c:26:bb:46:76:ca:28:54:aa:dd:62:39:c6:49:
         d2:30:46:91:5d:b4:64:9b:ad:12:00:5a:f7:16:f1:3a:8a:9b:
         f6:9f:6b:f4:f5:fa:db:95:a8:42:8d:dc:bd:ab:9f:76:66:3a:
         bb:2a:07:65:6e:c9:c0:3f:fc:31:8c:f7:6f:72:3d:51:c9:49:
         68:d9:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:20:20 2026 by rpki-client