
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: aAsFCO5PG2gs+06TR3XzKDubm0KRzRIpBfaWx3NYsE0=
Subject key identifier: 50:CF:31:53:18:CE:C7:1C:D0:D1:13:AC:3B:6A:32:75:ED:7C:8C:F0
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 0923AA07D44A3F9CC92C0532E9252512C13D0D93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 09F5
Signing time: Tue 12 May 2026 10:21:33 +0000
Manifest this update: Tue 12 May 2026 10:16:33 +0000
Manifest next update: Wed 13 May 2026 12:17:33 +0000
Files and hashes: 1: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
2: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
3: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
4: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
5: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
6: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: SRi3L/sE+5TYcmG6gagbERH4winAWZaOwx1E6vxmPTc=)
7: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
8: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
9: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
10: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
11: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
12: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
13: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
14: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
15: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
16: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
17: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
18: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
19: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
20: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
21: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
22: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
23: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
24: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
25: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
26: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
27: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
28: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
29: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
30: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
31: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
32: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
33: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
34: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
35: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
36: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
37: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
38: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 12:17:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:23:aa:07:d4:4a:3f:9c:c9:2c:05:32:e9:25:25:12:c1:3d:0d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: May 12 10:16:33 2026 GMT
Not After : May 13 12:17:33 2026 GMT
Subject: CN=50CF315318CEC71CD0D113AC3B6A3275ED7C8CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:6c:50:4b:e9:14:05:60:cf:b2:c9:b0:58:
ff:19:1b:de:94:c6:a9:a5:e6:9f:b2:a4:00:ff:08:
3d:ec:5a:74:e6:d2:88:a5:70:80:f7:f3:92:aa:c2:
64:aa:86:76:9f:6a:07:19:0c:95:b7:5f:f3:03:d5:
00:55:f6:7f:3f:df:cf:55:8b:0d:23:4d:65:3f:b9:
fe:3a:3f:81:58:8d:2f:4f:cb:34:e2:ce:83:12:8a:
2e:fb:34:c9:9d:58:b2:10:37:e0:b7:11:4c:8c:46:
26:6b:29:c0:e5:5c:56:3f:4c:08:f1:a9:f9:70:50:
49:3d:e6:3a:38:55:af:27:52:ed:78:87:68:cc:05:
47:48:79:62:8d:f9:35:17:91:3a:a4:39:9f:8f:5b:
60:a9:ba:99:6d:b3:3f:37:9f:fd:c7:ba:5b:81:dc:
71:70:57:ef:1f:cf:e1:a3:6c:cf:ad:91:7f:2f:4e:
ab:99:a8:81:e6:57:e2:55:95:d5:b9:95:93:29:a2:
f1:31:1f:0a:d1:be:46:14:dd:c8:f3:b6:56:6c:35:
9c:c7:c4:39:47:9a:0e:58:28:d9:cf:e4:b7:71:3c:
45:ae:8d:ca:22:c9:43:9b:78:23:07:c4:c5:ed:4b:
e3:3d:74:21:75:3f:93:90:47:ec:f9:9c:54:88:72:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:31:53:18:CE:C7:1C:D0:D1:13:AC:3B:6A:32:75:ED:7C:8C:F0
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:76:51:a2:77:a6:7e:15:d0:9f:51:3f:8e:f6:9f:c7:d5:2e:
bb:ea:2a:35:60:75:78:60:74:ab:2e:5f:9e:e6:b5:60:64:14:
0a:b7:6e:ed:29:9d:ea:5b:c6:72:c7:02:3e:4d:89:5f:ba:1e:
dd:39:5d:37:cb:42:c2:4c:c3:ae:6d:89:9c:13:4d:28:cc:84:
26:dd:4b:b4:3b:b8:1c:1b:63:6d:78:8b:60:a2:9f:ea:da:9f:
f2:70:8e:a5:2c:32:19:d4:8a:c0:10:1d:3a:cf:ba:b2:ea:51:
1a:e8:1c:b1:fd:af:2d:3e:3d:22:91:87:63:52:02:01:4d:14:
7b:7f:bc:77:ed:73:2f:be:5f:1d:9e:13:76:5d:bd:62:7e:48:
54:08:31:bb:01:60:0f:49:06:31:f9:97:a6:00:c5:13:60:a1:
d6:d9:e4:1c:42:a3:f5:2c:eb:87:83:6e:3f:74:7f:23:e5:08:
c6:72:a6:23:67:48:4f:62:cb:29:ac:f3:75:ac:28:1b:b7:83:
90:26:c9:fe:bb:0d:65:dc:cc:01:6e:d9:13:4a:aa:8a:f9:15:
e0:1e:0c:0f:7e:b7:ae:9a:1d:8a:e6:91:08:a6:d6:33:38:5b:
38:5f:d1:03:3f:a5:a3:2d:42:0b:ca:6d:dd:74:e6:82:f9:40:
bc:f8:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:56:29 2026 by rpki-client