This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
File: manifest.mft (raw, json)
Hash identifier: b5hXYf2ySSn4/jI8va9egFJ5xstlFkBa0h7ykXRh/Hg=
Subject key identifier: 92:F9:83:54:06:E8:54:5A:1F:85:01:1C:1A:79:6F:70:30:72:4F:8D
Authority key identifier: 16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
Certificate issuer: /CN=A91509EC0000/serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Certificate serial: 15F489577538E6BD0515D2C2EED0AB0147AF70B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
Manifest number: 050A
Signing time: Tue 16 Dec 2025 00:02:47 +0000
Manifest this update: Tue 16 Dec 2025 00:02:47 +0000
Manifest next update: Sat 20 Dec 2025 00:02:47 +0000
Files and hashes: 1: 05bc8dbb-c70a-48da-b45b-4448364614ff.roa (hash: qIdRpmBdkt5j6LH5saLB37Zp94oHt1Bb24SAmi7FS78=)
2: 0bf15d3f-c546-4bb6-a764-82165c384d37.roa (hash: riQ4OigVMA/6ztt1jMjGMZbSAxv30F/DqUjq1/O/+NM=)
3: 0c5c54ff-f977-4b96-8ce9-a1eaf082fe9c.roa (hash: E63/PRfPuiddezwGGylWnwb7tLNsK2qxydwE1fAIdv0=)
4: 2f47dcdd-c384-4eb2-aefd-f4ad64f26cce.roa (hash: P9InS/XVOLOk4R1ePBm1Szb3AzBdZtakRQCjb4eu2W8=)
5: 3407e5b6-a83d-4668-898f-fdbb23092502.roa (hash: F+0zGGSMWuBzeFDDrUSsBgI7o2bwr7bXbZXYXS9wuKE=)
6: 3b940d14-b8c4-4c3d-978f-a1a3b7a0a82c.roa (hash: OKpnsf6UGTaT1NG1RYx1qdBY9TSJQqRzfvmUIaNjoqw=)
7: 48a67156-122e-41d4-a2a8-8046cc5ecc41.roa (hash: 8YUGZL0iWHqRvW0nCojnvJIK483zfyTvdec+UOEcms4=)
8: 6cf57aa6-6ba3-43af-bbd5-44485e3b9f67.roa (hash: 3idRwkohe2nCD9Gbupe7DWsKMLQJv6wYpeNbU363pfw=)
9: 6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl (hash: WF7BIpnrRsSkdJsVDuoAS65rUTo7NXP8k0klmJoFEPY=)
10: 74efe8b3-d39c-4a8b-9b7b-5994aa4c8d82.roa (hash: lNlFLZT08eoziDCTsqvWxLNo+sFuyOZGIrMshIQatbQ=)
11: 7a646ec3-fc0e-40e7-adb4-82d5fd83f029.roa (hash: mr90+OuRqivi/gFgvBd4iqR2UjBX9ehfST4G9a6ekAc=)
12: 82456ff2-f8c4-4c5a-9458-82d909f83f7d.roa (hash: QXGSd+TQ+IuzPahzyTm8NSVacWTxuDI+gBi5F6Zjrnk=)
13: 9b59fbe4-f242-4dbf-9964-15048c3da996.roa (hash: HS1LLcEPS8/a/jky8LMQMmE/q7Zt1pCkXK1ygZRWkxo=)
14: 9b8e963e-7fa2-4ba1-a78a-4d1fd7989b32.roa (hash: 5/dXc6JsS7wzh+Mc8Mc6k0FXXEJF+Hu41Zf5FEaxhMg=)
15: a78b90df-233b-4ec6-89d2-de27ac2dc044.roa (hash: DPPoux71lGrxQrMl9eg2Wg/DcwR5KcobcuR9JnfGEdE=)
16: b3ba338e-4843-454b-abe5-65f09756225a.roa (hash: osPZlUv3k9bODbjWFQATaZ5WatToqhR98hXI3sVeu9o=)
17: c1564659-f3aa-4021-a7a5-8f4b1c2c4963.roa (hash: Az1/8UrHgQy8sjDu+TNvXAT1slP+3kq9IRvtH58qq4Y=)
18: cc671c79-21f0-4fff-b898-595966ecd1a9.roa (hash: vhrKhW0gdXGOgfhTiPor954aks5vnlI1w6Ax+IPOHdw=)
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Dec 2025 00:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f4:89:57:75:38:e6:bd:05:15:d2:c2:ee:d0:ab:01:47:af:70:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91509EC0000, serialNumber=16F524F8E0EC7CAE0769C42E50FFB3A2B564A6AC
Validity
Not Before: Dec 16 00:02:47 2025 GMT
Not After : Dec 20 00:02:47 2025 GMT
Subject: serialNumber=ac25572d005be90a2100837f21b29e909c18d12338ed07fe28c269b319b7d3d8, CN=58810403-9ba0-403a-809b-c78252ab7f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:99:29:d2:7a:27:78:8b:25:99:d5:ed:ea:
8d:c3:ad:cb:ee:db:eb:e8:6b:a4:de:7f:34:e8:31:
81:3a:bb:fd:2b:44:c4:11:2a:ca:d7:1f:f8:bb:51:
d8:0c:2f:39:ac:c8:7d:18:ab:f2:0f:62:75:46:82:
9e:2f:b9:a5:96:72:24:31:95:01:d8:6b:06:b6:4b:
03:12:99:a3:e8:24:04:01:f6:ad:6b:72:34:bb:e5:
3d:6f:5c:4a:cd:d4:10:c9:b5:81:30:c7:f9:44:71:
32:7d:c3:8d:83:f2:17:80:48:c9:31:c3:47:9a:1c:
aa:55:c1:19:7c:3a:6f:a7:4f:55:44:f6:df:c5:11:
51:10:8a:81:0b:51:b1:aa:ba:b2:76:37:58:73:3d:
51:25:5c:1f:d8:b5:b6:68:ca:0a:ee:27:06:28:dc:
7c:7e:72:70:08:3f:eb:a7:c1:0f:b7:2f:82:c4:39:
e4:10:77:f3:23:0b:a1:9b:6b:ad:6a:4a:b0:4d:5c:
d8:8b:82:0a:b6:68:77:9d:7b:97:d0:7d:98:10:e5:
3e:9b:41:0f:62:be:9d:f2:a5:1f:15:33:68:dc:2c:
7e:e1:95:fb:d8:40:79:ad:ca:0c:79:5e:6d:7a:f3:
8c:12:67:04:52:9f:1d:27:03:3f:77:de:41:8b:b5:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F9:83:54:06:E8:54:5A:1F:85:01:1C:1A:79:6F:70:30:72:4F:8D
X509v3 Authority Key Identifier:
keyid:16:F5:24:F8:E0:EC:7C:AE:07:69:C4:2E:50:FF:B3:A2:B5:64:A6:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FvUk-ODsfK4HacQuUP-zorVkpqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/manifest.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/db9a372a-09bc-4a32-bfe4-8c48e5dbd219/6ecb3cca-488d-43b9-a50b-d37c0c55a9e1.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:30:f4:67:75:97:d0:d1:b7:bb:4c:25:4a:27:f3:ef:ac:87:
9c:2f:a7:45:3a:8d:39:2f:5f:09:b6:f9:43:a0:b4:72:a9:11:
46:54:01:c2:3e:0e:e0:8e:46:0e:7e:2b:e9:05:c4:b1:f1:30:
45:8a:38:ff:1d:d5:af:18:10:6e:2e:42:c4:16:0d:b0:74:8c:
73:b2:bc:76:4c:81:d6:cc:01:d8:22:71:00:93:80:3a:e0:4e:
2e:f2:3a:86:15:80:f0:f8:78:bc:13:4b:a0:da:6f:69:90:b4:
d7:39:46:7e:42:aa:b4:5b:21:0c:7b:2f:14:ad:27:87:ce:b9:
d7:b7:95:b9:0f:88:fa:81:6a:28:1b:b2:a8:b7:5f:3c:12:4a:
81:7e:ea:51:c2:b4:15:89:3c:84:1d:e7:0d:b4:0d:15:0e:90:
66:45:9c:3b:3d:fc:e6:c3:c8:4c:cc:29:d2:c2:54:7c:a5:ef:
8b:ed:69:e3:50:f0:e7:bf:2f:3d:31:5a:1d:df:41:b4:20:83:
ef:5c:52:e2:58:2e:63:1f:8f:e4:5a:41:1c:aa:71:e8:56:22:
12:3f:88:15:e7:e7:0f:d5:f2:07:53:44:ef:bf:ea:cb:e7:61:
f0:02:89:2f:01:27:4d:ec:d8:de:29:72:de:6f:99:25:64:f8:
56:83:d5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 23:22:41 2025 by rpki-client