This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: Zwqrxp69/O+1K/goP18Qmsj3s9HoM4H8/Wpi7+g8hg8=
Subject key identifier: 1E:85:DF:9A:F8:A7:F9:80:74:64:F5:BF:51:D4:2C:7D:1C:97:A5:C5
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 60FAA0CF4886D033FB1B060A322C23421A6865FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number: 04FF
Signing time: Sat 06 Dec 2025 00:00:34 +0000
Manifest this update: Sat 06 Dec 2025 00:00:34 +0000
Manifest next update: Wed 10 Dec 2025 00:00:34 +0000
Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: qIdRpmBdkt5j6LH5saLB37Zp94oHt1Bb24SAmi7FS78=)
2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: riQ4OigVMA/6ztt1jMjGMZbSAxv30F/DqUjq1/O/+NM=)
3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: E63/PRfPuiddezwGGylWnwb7tLNsK2qxydwE1fAIdv0=)
4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: P9InS/XVOLOk4R1ePBm1Szb3AzBdZtakRQCjb4eu2W8=)
5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: F+0zGGSMWuBzeFDDrUSsBgI7o2bwr7bXbZXYXS9wuKE=)
6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: OKpnsf6UGTaT1NG1RYx1qdBY9TSJQqRzfvmUIaNjoqw=)
7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 8YUGZL0iWHqRvW0nCojnvJIK483zfyTvdec+UOEcms4=)
8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: 3idRwkohe2nCD9Gbupe7DWsKMLQJv6wYpeNbU363pfw=)
9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: pXwnh1t8kWqEX5qYs+LNgSiviUVDzrefkNSssTYsDgo=)
10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: lNlFLZT08eoziDCTsqvWxLNo+sFuyOZGIrMshIQatbQ=)
11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: mr90+OuRqivi/gFgvBd4iqR2UjBX9ehfST4G9a6ekAc=)
12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: QXGSd+TQ+IuzPahzyTm8NSVacWTxuDI+gBi5F6Zjrnk=)
13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: HS1LLcEPS8/a/jky8LMQMmE/q7Zt1pCkXK1ygZRWkxo=)
14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: 5/dXc6JsS7wzh+Mc8Mc6k0FXXEJF+Hu41Zf5FEaxhMg=)
15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: DPPoux71lGrxQrMl9eg2Wg/DcwR5KcobcuR9JnfGEdE=)
16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: osPZlUv3k9bODbjWFQATaZ5WatToqhR98hXI3sVeu9o=)
17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: Dei/6svXt+51pdm6lUXVjwEwVwFlx2Op735Bnb84+5o=)
18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: vhrKhW0gdXGOgfhTiPor954aks5vnlI1w6Ax+IPOHdw=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:fa:a0:cf:48:86:d0:33:fb:1b:06:0a:32:2c:23:42:1a:68:65:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Validity
Not Before: Dec 6 00:00:34 2025 GMT
Not After : Dec 10 00:00:34 2025 GMT
Subject: serialNumber=aa873a643ab315927f80e69b894f20ecb6e26543a0201102f1e1678fa058b82e, CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:07:1c:85:83:87:77:32:25:d7:0c:f4:33:
19:b8:e4:e1:e1:21:da:5b:34:12:2b:6d:76:5d:64:
56:6c:79:00:b1:3b:ef:2a:5c:45:8d:60:e4:79:07:
b3:d1:4a:6d:3d:6e:b5:b3:18:ee:b9:df:e5:16:91:
3e:f5:84:f2:82:dc:a5:12:56:8a:c9:d1:76:eb:f4:
5d:e0:d2:36:47:04:7d:5a:09:ba:68:fb:9b:b6:6e:
e6:bc:5f:ec:67:a4:fb:9b:0f:52:12:40:9e:7a:8a:
a6:0f:93:94:94:46:a6:c6:87:19:07:6b:b3:3f:fd:
94:e5:fd:4d:80:c4:ff:15:31:89:e5:d2:e4:e5:17:
da:ea:b3:78:23:38:b6:85:87:62:64:9b:50:6e:1e:
a0:05:68:d8:18:fa:13:25:f1:18:59:26:9b:80:f0:
de:38:4b:2b:6c:a4:94:81:48:59:c6:74:18:09:8d:
38:de:a5:15:d8:3a:00:b7:31:db:b3:b9:4b:a9:67:
38:d6:a2:7e:d0:97:b8:0a:44:49:28:b5:ff:e0:61:
2d:48:2a:c5:5b:65:f6:b3:02:19:94:90:26:d7:fa:
f7:ec:3c:fb:d2:4f:a5:e0:6e:ea:29:d0:a0:95:06:
b0:45:88:7a:64:2a:51:07:06:fd:5b:46:83:64:62:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:85:DF:9A:F8:A7:F9:80:74:64:F5:BF:51:D4:2C:7D:1C:97:A5:C5
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4e:1b:53:98:ab:62:50:65:3a:03:df:29:cd:85:a5:de:c7:
3a:28:7d:97:73:62:e4:c2:10:35:ed:16:88:a9:61:3f:7d:3a:
3d:4b:23:63:be:5c:d9:59:75:70:e3:e3:db:63:a9:dd:f2:fb:
f0:ab:96:0b:cd:11:bc:b9:40:47:b0:80:b1:4f:ca:7c:23:54:
ae:61:02:76:91:3d:64:fc:49:e6:93:f0:12:b3:61:d1:4c:1f:
e8:3e:ab:c5:43:0f:e7:6c:d1:bc:39:c4:25:65:c1:aa:d4:21:
c0:15:0d:c2:e4:7d:62:89:c2:7a:05:d6:71:5e:49:59:0a:62:
f8:97:3f:a1:cc:a1:73:69:e2:b0:bf:1f:e4:3e:c8:c5:5e:65:
c8:3d:9b:8d:36:bd:91:2f:2e:e4:be:61:b2:13:92:ce:4b:37:
92:56:45:81:a5:ba:07:e5:d6:9b:e9:e4:2e:64:1b:dc:a9:34:
a3:17:e9:94:c8:8e:1a:3d:3d:22:e2:f5:98:54:05:c0:5c:5b:
9e:a6:61:bc:00:e4:f1:b0:65:6e:de:6a:37:f1:16:3a:d7:f0:
cf:2b:14:79:88:c1:53:fe:51:94:b8:44:0c:32:c9:41:fe:8c:
ec:1f:39:ac:0e:70:5d:be:53:c8:c3:01:fa:3f:2e:5b:ed:d8:
5e:a1:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:48:44 2025 by rpki-client