This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          L1gSW+LWz5/KEsASosE6yluBEo0dZzJWU0eVB6UlXl8=
Subject key identifier:   02:F5:C5:DD:59:50:99:93:4B:BF:00:87:45:37:81:BE:D2:95:13:62
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer:       /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial:       05F5462D5D545350BBA5213F88E384D6EF757746
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number:          0532
Signing time:             Sun 25 Jan 2026 00:16:14 +0000
Manifest this update:     Sun 25 Jan 2026 00:16:14 +0000
Manifest next update:     Thu 29 Jan 2026 00:16:14 +0000
Files and hashes:         1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: qIdRpmBdkt5j6LH5saLB37Zp94oHt1Bb24SAmi7FS78=)
                          2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: riQ4OigVMA/6ztt1jMjGMZbSAxv30F/DqUjq1/O/+NM=)
                          3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: E63/PRfPuiddezwGGylWnwb7tLNsK2qxydwE1fAIdv0=)
                          4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: P9InS/XVOLOk4R1ePBm1Szb3AzBdZtakRQCjb4eu2W8=)
                          5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: F+0zGGSMWuBzeFDDrUSsBgI7o2bwr7bXbZXYXS9wuKE=)
                          6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: OKpnsf6UGTaT1NG1RYx1qdBY9TSJQqRzfvmUIaNjoqw=)
                          7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 8YUGZL0iWHqRvW0nCojnvJIK483zfyTvdec+UOEcms4=)
                          8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: 3idRwkohe2nCD9Gbupe7DWsKMLQJv6wYpeNbU363pfw=)
                          9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: On+0gR7rheC8JXmZgCnkPgZfk3MmU3uambwQqBjhB40=)
                          10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: lNlFLZT08eoziDCTsqvWxLNo+sFuyOZGIrMshIQatbQ=)
                          11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: mr90+OuRqivi/gFgvBd4iqR2UjBX9ehfST4G9a6ekAc=)
                          12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: QXGSd+TQ+IuzPahzyTm8NSVacWTxuDI+gBi5F6Zjrnk=)
                          13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: HS1LLcEPS8/a/jky8LMQMmE/q7Zt1pCkXK1ygZRWkxo=)
                          14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: 5/dXc6JsS7wzh+Mc8Mc6k0FXXEJF+Hu41Zf5FEaxhMg=)
                          15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: DPPoux71lGrxQrMl9eg2Wg/DcwR5KcobcuR9JnfGEdE=)
                          16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: osPZlUv3k9bODbjWFQATaZ5WatToqhR98hXI3sVeu9o=)
                          17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: Az1/8UrHgQy8sjDu+TNvXAT1slP+3kq9IRvtH58qq4Y=)
                          18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: vhrKhW0gdXGOgfhTiPor954aks5vnlI1w6Ax+IPOHdw=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Jan 2026 00:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f5:46:2d:5d:54:53:50:bb:a5:21:3f:88:e3:84:d6:ef:75:77:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
        Validity
            Not Before: Jan 25 00:16:14 2026 GMT
            Not After : Jan 29 00:16:14 2026 GMT
        Subject: serialNumber=c73817bde1bc1dd93d546486194a1986b27c48499e5663a577e1360ed40fcfd3, CN=58810403-9ba0-403a-809b-c78252ab7f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:9d:be:80:ea:0d:d1:08:96:75:41:cc:c8:
                    8b:69:18:1c:c0:70:82:f2:8a:88:7d:77:bd:45:d2:
                    b6:97:3e:d7:45:53:78:6e:56:fb:a6:00:ab:91:29:
                    77:1a:42:cc:25:0f:66:10:9b:a9:6e:de:5a:cf:60:
                    4a:65:c5:69:1c:85:49:5c:fe:7b:21:ae:f6:d8:26:
                    45:b0:66:75:a0:69:7b:66:d7:71:b1:17:da:90:e4:
                    19:3a:88:c2:25:d3:e7:52:60:5a:88:94:fa:18:16:
                    d1:2a:1f:df:65:ea:83:39:f3:04:f1:6a:b3:3d:7d:
                    8b:c1:3d:a8:52:20:90:87:84:44:ec:c3:18:96:2c:
                    b8:4f:64:17:34:12:20:e6:6b:63:b5:43:e4:13:f0:
                    52:48:f6:b8:1a:a2:17:57:a2:c0:e9:4b:02:b8:98:
                    f9:22:88:4a:f7:31:7a:32:6d:cb:59:61:8a:6f:8c:
                    d2:04:71:3b:e3:72:1a:78:78:71:59:1f:23:28:5e:
                    2b:09:c9:b5:2f:5d:43:35:38:0a:c2:05:00:bf:f0:
                    b5:ee:8f:55:aa:32:34:3c:9d:47:8e:36:98:5e:05:
                    96:b0:77:4c:6f:d3:38:25:3e:73:30:c6:ce:ef:83:
                    45:d2:cb:0d:cc:51:cd:52:1a:13:da:a8:4d:6b:63:
                    69:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:F5:C5:DD:59:50:99:93:4B:BF:00:87:45:37:81:BE:D2:95:13:62
            X509v3 Authority Key Identifier:
                keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:fb:a3:ec:f1:1c:87:6d:f2:53:db:ab:86:c7:23:c9:93:d9:
         6e:94:23:85:b5:e5:8d:cf:5f:60:53:30:1e:8b:3b:27:00:7c:
         83:7e:6f:57:7d:4c:a5:af:c4:d9:cd:64:fd:a1:d2:dd:f1:aa:
         b8:15:7c:b0:b8:bb:e5:5d:98:4d:6f:34:45:54:a2:21:fa:d2:
         3c:8c:d3:9e:75:15:48:89:cd:d5:23:12:36:41:bb:fc:73:e5:
         17:3b:45:20:30:89:03:81:1b:87:55:2f:93:8d:43:eb:bd:c3:
         bb:68:9f:8f:9b:89:c4:63:5f:e2:50:32:5d:19:80:93:73:04:
         4e:e6:ca:ef:69:12:36:02:22:bf:ed:3e:0c:19:97:a6:4d:2f:
         b8:0d:b6:c5:b5:a3:1f:62:75:0d:2f:c5:60:0b:ff:b6:55:71:
         47:2d:b0:00:78:6d:81:13:9e:7d:70:98:61:c4:a2:34:ff:02:
         55:ce:59:e8:77:d7:9b:b0:18:1a:7a:13:a4:32:a8:34:25:00:
         6b:15:c9:c2:51:b7:f8:20:95:28:51:52:5d:3a:65:90:61:9e:
         2c:bd:0e:4e:db:4d:07:b6:0b:1d:83:d0:cc:61:7b:a8:1c:86:
         97:ec:82:28:58:aa:66:bb:4d:a1:de:a1:1a:bb:ec:ec:1e:65:
         49:08:e8:c8
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUBfVGLV1UU1C7pSE/iOOE1u91d0YwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTA5RUMwMDAwMTEwLwYDVQQFEygxNkY1MjRGOEUw
RUM3Q0FFMDc2OUM0MkU1MEZGQjNBMkI1NjRBNkFDMB4XDTI2MDEyNTAwMTYxNFoX
DTI2MDEyOTAwMTYxNFowejFJMEcGA1UEBRNAYzczODE3YmRlMWJjMWRkOTNkNTQ2
NDg2MTk0YTE5ODZiMjdjNDg0OTllNTY2M2E1NzdlMTM2MGVkNDBmY2ZkMzEtMCsG
A1UEAxMkNTg4MTA0MDMtOWJhMC00MDNhLTgwOWItYzc4MjUyYWI3ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqGdvoDqDdEIlnVBzMiLaRgcwHCC
8oqIfXe9RdK2lz7XRVN4blb7pgCrkSl3GkLMJQ9mEJupbt5az2BKZcVpHIVJXP57
Ia722CZFsGZ1oGl7ZtdxsRfakOQZOojCJdPnUmBaiJT6GBbRKh/fZeqDOfME8Wqz
PX2LwT2oUiCQh4RE7MMYliy4T2QXNBIg5mtjtUPkE/BSSPa4GqIXV6LA6UsCuJj5
IohK9zF6Mm3LWWGKb4zSBHE743IaeHhxWR8jKF4rCcm1L11DNTgKwgUAv/C17o9V
qjI0PJ1HjjaYXgWWsHdMb9M4JT5zMMbO74NF0ssNzFHNUhoT2qhNa2NpzQIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFAL1xd1ZUJmTS78Ah0U3gb7SlRNiMB8GA1UdIwQY
MBaAFBb1JPjg7HyuB2nELlD/s6K1ZKasMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF
BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw
b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9GdlVrLU9E
c2ZLNEhhY1F1VVAtem9yVmtwcXcuY2VyMH8GCCsGAQUFBwELBHMwcTBvBggrBgEF
BQcwC4ZjcnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29t
L3ZvbHVtZS9kYjlhMzcyYS0wOWJjLTRhMzItYmZlNC04YzQ4ZTVkYmQyMTkvbWFu
aWZlc3QubWZ0MIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnBraS1y
c3luYy51cy1lYXN0LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZGI5YTM3MmEtMDli
Yy00YTMyLWJmZTQtOGM0OGU1ZGJkMjE5LzZlY2IzY2NhLTQ4OGQtNDNiOS1hNTBi
LWQzN2MwYzU1YTllMS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYw
BKACBQAwDQYJKoZIhvcNAQELBQADggEBAGH7o+zxHIdt8lPbq4bHI8mT2W6UI4W1
5Y3PX2BTMB6LOycAfIN+b1d9TKWvxNnNZP2h0t3xqrgVfLC4u+VdmE1vNEVUoiH6
0jyM0551FUiJzdUjEjZBu/xz5Rc7RSAwiQOBG4dVL5ONQ+u9w7ton4+bicRjX+JQ
Ml0ZgJNzBE7myu9pEjYCIr/tPgwZl6ZNL7gNtsW1ox9idQ0vxWAL/7ZVcUctsAB4
bYETnn1wmGHEojT/AlXOWeh315uwGBp6E6QyqDQlAGsVycJRt/gglShRUl06ZZBh
niy9Dk7bTQe2Cx2D0Mxhe6gchpfsgihYqma7TaHeoRq77OweZUkI6Mg=
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:49:20 2026 by rpki-client