Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          rhIgrou4qFMg01mB2FBl24gDsv1LXz3uOdSFRkWhN98=
Subject key identifier:   ED:67:00:19:88:C7:F9:EB:1A:C9:66:07:37:17:70:3B:2E:A2:59:42
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       B4107FC72837348B60BD3C668B8033CEF167DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0A6F
Signing time:             Thu 23 Jul 2026 05:04:57 +0000
Manifest this update:     Thu 23 Jul 2026 04:59:57 +0000
Manifest next update:     Fri 24 Jul 2026 07:09:57 +0000
Files and hashes:         1: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
                          2: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
                          3: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          4: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          5: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
                          6: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          7: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
                          8: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
                          9: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
                          10: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
                          11: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
                          12: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          13: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
                          14: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
                          15: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
                          16: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          17: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
                          18: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          19: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          20: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
                          21: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
                          22: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
                          23: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
                          24: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: Ni6O7KPJjqQL9Br79r+NbGkSEvCW7VsZW+Dle3iN6dA=)
                          25: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
                          26: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          27: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          28: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          29: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
                          30: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
                          31: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
                          32: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          33: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
                          34: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          35: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          36: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          37: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
                          38: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
                          39: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          40: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
                          41: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
                          42: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
                          43: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
                          44: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
                          45: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:09:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b4:10:7f:c7:28:37:34:8b:60:bd:3c:66:8b:80:33:ce:f1:67:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Jul 23 04:59:57 2026 GMT
            Not After : Jul 24 07:09:57 2026 GMT
        Subject: CN=ED67001988C7F9EB1AC966073717703B2EA25942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:c0:e0:18:3a:86:25:e7:fc:98:78:10:0c:
                    97:6a:71:dd:23:39:98:50:f4:17:f2:0e:79:f0:16:
                    45:0c:bc:b1:4f:0b:e3:11:dd:bf:d2:40:a1:61:ce:
                    b7:47:82:7a:be:a4:ed:5f:26:c8:02:40:49:8d:d7:
                    04:29:a5:a5:c3:d7:71:6f:d3:88:24:b4:d6:41:cf:
                    38:a1:a4:83:5b:d3:aa:7d:22:74:32:07:de:f9:ee:
                    04:98:f3:e6:e5:f4:53:a8:a8:85:cf:6b:7e:59:a1:
                    36:3c:61:78:79:c5:d3:f1:d1:16:ba:26:a9:7d:2a:
                    1e:4b:ff:37:3d:b3:d9:00:dd:f8:ce:48:a8:35:c3:
                    00:2e:25:d3:ed:2a:ce:cc:bc:71:0d:a2:de:f2:16:
                    25:42:9d:33:1e:eb:49:1f:f4:11:81:75:21:28:9c:
                    23:a3:13:c2:88:83:e2:eb:f2:c8:02:eb:ba:93:d7:
                    1e:b0:ee:37:27:64:d1:08:07:bc:7d:2b:fb:cc:58:
                    c2:42:5a:02:72:e6:ac:d1:1b:8c:a7:fa:f7:f2:11:
                    96:cf:a6:24:60:53:b4:56:ec:e2:2d:83:6d:97:84:
                    4c:71:aa:5d:71:a7:f8:78:62:f0:16:f1:29:e5:a2:
                    7a:4e:d8:5a:ec:73:ca:18:c2:a1:90:75:b2:69:77:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:67:00:19:88:C7:F9:EB:1A:C9:66:07:37:17:70:3B:2E:A2:59:42
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:02:e4:8d:7d:49:21:2e:35:ff:31:3c:c5:fb:c2:46:51:83:
         50:6f:1f:26:c1:c1:0d:be:17:02:ea:2b:20:8c:7e:51:e3:0f:
         d9:e4:9b:2c:6d:b3:00:83:f0:cd:44:a9:af:a8:8d:86:63:30:
         04:65:43:15:48:4a:d3:34:c9:8f:e4:e4:c7:75:97:99:56:39:
         e5:62:48:5c:3b:6f:91:6a:b5:8e:e7:6c:f1:ec:45:fb:68:b6:
         1e:2a:6c:91:ee:74:eb:4b:0a:fd:c2:f4:6c:99:d7:df:dc:58:
         5e:99:c0:38:8c:f9:29:8a:d1:03:d8:44:40:87:1c:0a:78:2c:
         1e:3e:5c:ed:43:ac:d5:35:33:36:37:10:0e:89:f2:18:8c:e3:
         b3:0c:0a:ba:12:af:80:11:f3:6e:28:b2:51:57:8c:19:94:b3:
         63:fd:3f:b8:da:44:74:22:60:33:92:f6:ae:ab:97:d0:9c:28:
         f6:cd:48:a5:25:fc:c3:10:dd:cd:c6:37:6a:76:8e:d7:59:3b:
         a1:c8:45:62:9e:8e:a2:26:20:0e:c8:a5:c6:3e:ae:f8:33:99:
         ee:b8:87:a1:14:f5:6a:f5:62:4a:22:9c:6e:4f:47:ef:bd:ad:
         01:90:39:b1:af:b9:28:77:e2:2e:73:c7:0e:c3:6f:8c:d1:c2:
         f1:84:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:24:39 2026 by rpki-client