Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          VRkbSrkN2BmVvAgHnTI6zTpEjTIPHQdwKvYPjnodqfc=
Subject key identifier:   F9:F7:53:35:54:AF:F4:2D:B1:56:45:F4:B9:E7:EE:E5:BB:4B:97:66
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       466E3138961417281395FC73D3E574470DCBB252
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          099F
Signing time:             Thu 26 Mar 2026 07:16:31 +0000
Manifest this update:     Thu 26 Mar 2026 07:11:31 +0000
Manifest next update:     Fri 27 Mar 2026 09:20:31 +0000
Files and hashes:         1: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          2: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          3: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          4: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          5: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          6: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          7: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          8: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          9: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          10: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          11: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: RLDpy3HDpkcBKzcgHfcKWitSegAhdZDlnlr2OHy3Zaw=)
                          12: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          13: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          14: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          15: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          16: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
                          17: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          18: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
                          19: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          20: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          21: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          22: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          23: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          24: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
                          25: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          26: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          27: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
                          28: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          29: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          30: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          31: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          32: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          33: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 09:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6e:31:38:96:14:17:28:13:95:fc:73:d3:e5:74:47:0d:cb:b2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Mar 26 07:11:31 2026 GMT
            Not After : Mar 27 09:20:31 2026 GMT
        Subject: CN=F9F7533554AFF42DB15645F4B9E7EEE5BB4B9766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:43:1d:ab:7c:c3:65:05:f5:c2:61:77:16:
                    c8:f1:8c:00:fd:a4:45:58:6d:bc:fb:3d:3f:d3:67:
                    ec:17:14:33:b5:ba:10:71:b0:5d:42:18:40:69:47:
                    88:ac:ee:ee:7d:cf:4d:78:ff:0c:3c:91:d6:66:1e:
                    63:54:42:4b:22:37:fd:b1:63:00:1f:16:b6:f0:3f:
                    8c:63:1f:51:ea:7a:68:21:bb:5a:41:f4:c8:2b:81:
                    e2:e5:70:f4:b5:e0:20:e5:a7:15:30:72:1b:e4:c5:
                    f1:3f:d7:9a:34:eb:a5:3b:54:72:67:58:c2:45:9a:
                    3c:e5:c2:12:37:85:18:a0:13:07:ab:2c:c2:c1:df:
                    6e:a0:ce:1e:e0:28:30:7e:6f:dd:72:8e:38:9f:50:
                    a4:f5:40:01:22:c4:94:e4:80:5e:58:68:04:21:b4:
                    d3:bc:35:a3:57:bf:40:3f:cf:1f:db:4a:7c:fb:8a:
                    ff:f6:8a:1d:8d:43:07:16:ea:e3:b7:48:91:bc:8a:
                    63:39:77:59:3d:66:f6:41:c0:9e:bd:0f:8c:9e:be:
                    52:0e:74:14:e6:d8:d0:ff:6b:91:34:ec:a2:a8:63:
                    35:e7:dc:0c:9c:91:03:1d:f1:40:5e:a4:58:88:c9:
                    87:50:54:62:12:9a:52:03:8a:81:63:99:35:f7:86:
                    f3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:53:35:54:AF:F4:2D:B1:56:45:F4:B9:E7:EE:E5:BB:4B:97:66
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:05:e8:f3:31:2f:67:a1:bc:27:39:a4:8f:4c:9a:1f:83:f0:
         b1:f4:c3:8c:a3:ee:cf:05:04:20:cf:18:43:e1:af:f2:e2:13:
         75:ab:17:67:fc:a5:58:96:9f:fc:56:47:1f:aa:4b:d0:d1:78:
         9e:12:69:8d:aa:04:58:35:fe:25:82:23:0e:2b:a5:a8:75:53:
         3a:61:33:c8:45:87:72:de:6e:2d:41:44:11:b1:ce:f0:e6:4a:
         62:e3:98:16:09:af:c0:63:5d:78:1f:45:31:1e:e6:b4:8f:39:
         b1:a9:3a:f9:0c:97:04:60:f4:a7:ae:66:b2:0c:bd:1a:21:5b:
         eb:b5:16:7d:42:68:b7:e4:21:ee:bf:26:c1:ad:a6:e9:06:01:
         89:2e:87:a8:bf:78:ac:24:34:34:07:da:0e:3e:ca:e8:24:9d:
         08:07:e8:79:6e:73:bc:4e:08:5e:71:03:2b:1c:a8:73:ae:98:
         b9:ad:cd:aa:79:94:3d:46:a0:d8:93:44:11:7a:88:79:2b:6b:
         20:f9:58:6e:19:54:b9:48:b5:68:8d:91:d6:e8:cc:05:b4:c2:
         78:dd:02:ae:8a:7c:0c:c6:95:d6:27:52:81:8d:f9:b9:28:5a:
         0d:e2:5e:ba:0c:d8:b0:c3:f7:fd:a7:16:38:b3:61:05:35:a2:
         27:50:c4:d8
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIURm4xOJYUFygTlfxz0+V0Rw3LslIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDMyNjA3MTEzMVoX
DTI2MDMyNzA5MjAzMVowMzExMC8GA1UEAxMoRjlGNzUzMzU1NEFGRjQyREIxNTY0
NUY0QjlFN0VFRTVCQjRCOTc2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6RQx2rfMNlBfXCYXcWyPGMAP2kRVhtvPs9P9Nn7BcUM7W6EHGwXUIYQGlH
iKzu7n3PTXj/DDyR1mYeY1RCSyI3/bFjAB8WtvA/jGMfUep6aCG7WkH0yCuB4uVw
9LXgIOWnFTByG+TF8T/XmjTrpTtUcmdYwkWaPOXCEjeFGKATB6sswsHfbqDOHuAo
MH5v3XKOOJ9QpPVAASLElOSAXlhoBCG007w1o1e/QD/PH9tKfPuK//aKHY1DBxbq
47dIkbyKYzl3WT1m9kHAnr0PjJ6+Ug50FObY0P9rkTTsoqhjNefcDJyRAx3xQF6k
WIjJh1BUYhKaUgOKgWOZNfeG8ycCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT591M1
VK/0LbFWRfS55+7lu0uXZjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5
QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACkF6PMxL2ehvCc5pI9Mmh+D8LH0w4yj7s8F
BCDPGEPhr/LiE3WrF2f8pViWn/xWRx+qS9DReJ4SaY2qBFg1/iWCIw4rpah1Uzph
M8hFh3Lebi1BRBGxzvDmSmLjmBYJr8BjXXgfRTEe5rSPObGpOvkMlwRg9KeuZrIM
vRohW+u1Fn1CaLfkIe6/JsGtpukGAYkuh6i/eKwkNDQH2g4+yugknQgH6Hluc7xO
CF5xAyscqHOumLmtzap5lD1GoNiTRBF6iHkrayD5WG4ZVLlItWiNkdbozAW0wnjd
Aq6KfAzGldYnUoGN+bkoWg3iXroM2LDD9/2nFjizYQU1oidQxNg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:20:38 2026 by rpki-client