Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          leDx/xZWcBuuwN6DXL9D9NNl+Pa+HAkbi5uqgrDUybE=
Subject key identifier:   6F:9B:B2:4B:CA:5E:23:6E:AA:F8:CC:FB:EE:87:1A:46:56:3A:C5:B3
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       3560EEF8F066C807F80452A41BADAC6619F2C5E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          08BF
Signing time:             Mon 20 Oct 2025 01:58:56 +0000
Manifest this update:     Mon 20 Oct 2025 01:53:56 +0000
Manifest next update:     Tue 21 Oct 2025 04:10:56 +0000
Files and hashes:         1: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          2: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          3: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: sJn2TvaicESa/DwaQXaKJYFHCxWcYn+dLvNbJEA+hSs=)
                          4: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          5: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          6: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          7: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          8: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          9: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          10: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          11: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          12: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          13: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          14: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          15: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          16: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          17: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          18: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          19: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          20: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          21: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          22: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          23: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          24: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          25: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          26: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          27: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          28: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          29: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          30: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          31: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          32: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          33: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 04:10:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:60:ee:f8:f0:66:c8:07:f8:04:52:a4:1b:ad:ac:66:19:f2:c5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Oct 20 01:53:56 2025 GMT
            Not After : Oct 21 04:10:56 2025 GMT
        Subject: CN=6F9BB24BCA5E236EAAF8CCFBEE871A46563AC5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:c7:7f:2d:7d:9f:29:bc:7c:9a:80:bd:cc:
                    ed:1a:08:80:2a:d2:f7:eb:9f:0f:24:1f:3d:a4:30:
                    45:aa:c2:24:29:ec:24:26:df:62:05:0a:23:52:37:
                    09:07:73:dd:7d:94:ce:3d:1d:c6:7f:61:b8:24:5d:
                    f7:20:7e:54:83:6f:08:9b:e1:8e:06:35:81:8e:4e:
                    50:f1:27:e4:56:4a:70:81:f6:3e:3e:79:fe:7a:a8:
                    67:0e:df:ef:eb:2b:1f:50:a7:e3:05:d6:9d:55:e3:
                    57:97:00:71:fd:69:83:14:b6:3d:11:72:64:ab:9f:
                    e6:f6:fc:d6:68:44:15:a9:81:f9:bc:aa:72:08:50:
                    28:cf:43:bc:4b:be:1b:69:0d:6b:16:d5:39:f4:a4:
                    20:7c:34:33:db:0d:0a:ae:15:ee:6f:98:fc:c4:6f:
                    e5:8d:53:15:01:78:f0:59:24:75:1c:6d:56:d9:a7:
                    8f:66:78:d7:b5:da:e5:40:a1:ad:bc:39:d9:4a:d8:
                    ef:00:2e:15:4c:6d:8d:87:98:b1:5b:56:4f:18:12:
                    3f:ec:3d:0e:0e:b3:29:b5:a7:e7:70:62:25:c9:d9:
                    82:68:1a:65:30:ad:02:b1:c0:6f:98:e8:ea:d1:5c:
                    fa:19:1e:60:5e:66:cb:08:ac:a1:03:27:79:af:31:
                    6d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9B:B2:4B:CA:5E:23:6E:AA:F8:CC:FB:EE:87:1A:46:56:3A:C5:B3
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:be:a8:79:f6:55:62:0d:9e:b8:59:14:9a:3c:c3:67:90:50:
         6a:04:6e:97:c6:69:c5:ee:08:ab:66:0e:ed:33:c5:61:62:96:
         84:ec:af:59:3b:c6:7c:df:18:90:91:fe:74:78:bc:d2:44:81:
         25:a0:d0:71:50:d8:12:f7:6d:09:db:0e:95:64:2f:1c:c6:e7:
         ea:a8:eb:c8:9c:b5:6e:7e:56:bb:15:c1:58:91:e6:95:c8:38:
         35:eb:28:f8:47:70:a3:63:68:90:86:b4:f9:a0:6d:6c:19:31:
         78:b3:07:21:53:12:db:66:d4:a1:33:29:fc:4b:98:5b:1d:53:
         52:f6:e0:c2:eb:5d:6c:58:4a:75:c4:50:da:a4:47:10:c7:d3:
         e6:46:5d:02:cd:30:03:38:67:b5:57:b6:6c:f3:c5:94:13:13:
         cc:ba:8e:fb:5d:c8:29:c2:da:46:ad:2d:41:2d:f5:b7:8b:d7:
         b0:b4:32:83:f0:81:de:a1:73:44:be:06:16:9b:5f:dd:b8:a0:
         6d:4b:c1:7b:69:75:20:4f:f9:5d:5a:b5:24:bf:51:cb:ea:63:
         e2:d4:94:b3:e8:c9:b2:48:9c:7a:77:a2:c9:90:cd:41:ac:4a:
         e9:c2:37:37:2e:98:36:6f:a1:07:7b:34:ac:90:f2:4a:9a:0e:
         a9:31:16:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:38:35 2025 by rpki-client