This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          w8NnbKn9hkhKnJV5EzoKMiVUV/lx6WYQRUKN6elPzfU=
Subject key identifier:   83:37:EC:0C:5B:A8:3C:18:9F:DD:4D:E4:7D:B4:23:E2:D4:D1:17:47
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       5142014F4592A858085A0EAD1F7FB44AAE4E5C26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0909
Signing time:             Sat 06 Dec 2025 09:44:37 +0000
Manifest this update:     Sat 06 Dec 2025 09:39:37 +0000
Manifest next update:     Sun 07 Dec 2025 11:28:37 +0000
Files and hashes:         1: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          2: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          3: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          4: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          5: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          6: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          7: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          8: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          9: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: /KuWFKfGcv3y0Syf5vw5WVZfuB0fW0Njj+nRuTsIOAg=)
                          10: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          11: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          12: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          13: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          14: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          15: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          16: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          17: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          18: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          19: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          20: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          21: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          22: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          23: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          24: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          25: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          26: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          27: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          28: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          29: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          30: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          31: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          32: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          33: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Dec 2025 11:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:42:01:4f:45:92:a8:58:08:5a:0e:ad:1f:7f:b4:4a:ae:4e:5c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Dec  6 09:39:37 2025 GMT
            Not After : Dec  7 11:28:37 2025 GMT
        Subject: CN=8337EC0C5BA83C189FDD4DE47DB423E2D4D11747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:04:12:32:e5:90:ad:23:7e:75:d8:d5:f7:
                    92:29:78:08:fe:19:37:5b:95:37:72:33:d3:5a:66:
                    1b:a2:85:4c:47:3e:72:99:ca:59:32:b2:75:7a:64:
                    71:99:f6:f7:27:8a:6d:1c:79:e8:8e:d9:4e:d6:e5:
                    d2:97:53:bb:76:bd:b6:3c:b2:2d:27:ee:58:5d:0d:
                    c7:bc:fd:af:1a:39:ad:cc:28:34:3f:89:1c:84:d4:
                    e8:00:d3:02:c0:76:44:c9:74:b3:bc:d1:ef:83:27:
                    b1:fc:10:35:16:5f:7b:66:c9:1a:09:e0:f1:76:d5:
                    be:64:72:bd:d1:cf:31:d0:06:8b:b8:dd:a3:48:bd:
                    77:3e:53:42:b1:1d:cf:de:dd:72:30:ff:3b:dd:9f:
                    09:2c:f1:c7:38:dd:46:71:8b:99:c0:18:ad:3e:ce:
                    9b:ee:0d:c1:b6:ca:c7:80:22:c2:10:07:01:fc:16:
                    63:37:fb:d2:51:69:f9:9f:41:d7:6f:c8:c7:82:f5:
                    d2:5e:e2:5e:96:52:1a:ec:b1:56:da:98:70:dd:7a:
                    5d:66:f1:2e:5f:a6:37:89:33:41:4a:8a:a6:02:d9:
                    f8:5c:e9:1a:9f:fe:b9:d0:03:33:9f:06:d4:b3:4f:
                    72:44:2d:f8:36:78:d1:82:66:dc:c7:09:fb:64:49:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:37:EC:0C:5B:A8:3C:18:9F:DD:4D:E4:7D:B4:23:E2:D4:D1:17:47
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ff:96:24:d1:67:c1:13:bd:b6:53:b5:33:e9:f7:f3:4c:16:
         10:0f:56:a8:45:9d:71:4c:b1:00:4b:c9:33:4d:d4:3b:73:bd:
         dc:5c:49:ad:c6:55:2e:b2:11:52:d0:c4:91:c0:ed:22:9d:5a:
         c8:13:7d:e9:0f:09:21:02:79:5f:68:1b:5b:5d:d0:e4:c5:25:
         22:6c:00:15:bf:24:0a:f9:bd:d5:62:5d:23:ef:45:66:fb:74:
         e3:bc:3d:de:a6:c4:e2:47:b6:97:6f:b1:68:48:8c:a6:85:0a:
         a7:c6:12:6d:a4:a9:eb:af:32:fe:9c:52:89:ae:4b:61:e0:e1:
         24:80:d8:e6:d9:cc:e6:bb:1f:f7:91:f5:f1:96:cf:74:90:35:
         37:47:ad:ea:c4:27:75:7d:87:48:b6:02:0f:75:4c:03:2f:d5:
         1f:3d:64:d9:4f:35:49:6c:a6:54:8f:1a:05:a1:a0:1e:bd:56:
         93:34:cf:16:16:ec:4a:e7:d1:b7:a9:61:6c:e6:5e:11:96:0f:
         b5:93:da:14:85:c7:dd:73:2b:7f:c8:cb:af:23:c8:23:09:ba:
         c7:bc:48:7b:90:2e:c7:95:fa:02:b9:0a:67:f0:ca:c2:98:46:
         89:e1:d7:a9:29:df:75:6f:16:96:ee:f1:c8:62:d9:e8:6e:c7:
         ef:99:6f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:36:34 2025 by rpki-client