This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          FtqH1P07aa8vH2Oa3i9Ve23+TqDTqYGDIxlBO6dQOWY=
Subject key identifier:   8B:C6:43:54:1E:37:D3:DD:08:C1:1B:11:B5:C5:B6:57:A3:94:13:03
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       714B3F0323924A8FFB481F72DDAC0C5DD0BA8A3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          091E
Signing time:             Sun 21 Dec 2025 08:45:25 +0000
Manifest this update:     Sun 21 Dec 2025 08:40:25 +0000
Manifest next update:     Mon 22 Dec 2025 10:00:25 +0000
Files and hashes:         1: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          2: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          3: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          4: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          5: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          6: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          7: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          8: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          9: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          10: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          11: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          12: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          13: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: Ye5w49Jmqj7xlPlFe+tkSR+4lfBZKpXSHTmxMTOA9H8=)
                          14: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          15: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          16: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          17: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          18: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          19: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          20: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          21: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          22: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          23: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          24: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          25: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          26: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          27: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          28: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          29: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          30: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          31: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          32: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          33: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Dec 2025 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4b:3f:03:23:92:4a:8f:fb:48:1f:72:dd:ac:0c:5d:d0:ba:8a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Dec 21 08:40:25 2025 GMT
            Not After : Dec 22 10:00:25 2025 GMT
        Subject: CN=8BC643541E37D3DD08C11B11B5C5B657A3941303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:f2:17:c6:e6:64:98:74:d4:90:16:19:32:
                    06:8c:4e:81:d9:2f:17:ce:c0:7d:f7:f9:58:f7:96:
                    e0:1c:15:e1:27:50:a0:a8:ba:cc:f5:fb:40:2e:c4:
                    9f:f9:6a:34:d2:75:64:ec:d7:ee:a3:97:17:7b:5a:
                    7b:7e:2e:f2:5a:2f:9d:ab:68:94:29:63:35:c6:73:
                    07:9b:9d:ab:36:34:23:67:cc:59:71:89:6f:fd:0a:
                    2b:23:33:05:3f:70:c2:00:f9:b1:86:8d:ff:eb:96:
                    5f:65:be:c9:76:88:0a:88:00:bc:01:9c:4b:97:96:
                    79:e3:ae:b8:72:5e:55:aa:3c:90:8f:69:30:11:fd:
                    24:9d:70:f4:f4:15:05:88:53:ab:b0:ce:7e:ff:cf:
                    db:c9:5e:f0:78:13:e5:6b:0b:0f:fe:f0:55:91:6e:
                    5c:ed:30:3a:36:bd:18:57:69:2f:75:35:c2:8e:11:
                    d6:8e:59:e7:bd:50:e1:e8:a4:7d:8c:ea:18:60:3b:
                    ab:c4:6f:3c:a8:c5:88:73:63:ca:27:bb:4b:6f:37:
                    8f:e7:9c:f0:54:3c:13:96:0c:c2:dd:8e:6c:a2:60:
                    91:4e:c8:6e:4a:ed:e1:a6:fb:b6:e0:bd:54:6a:3b:
                    3d:8f:ed:d2:42:fa:ab:ab:c3:f4:79:43:90:b1:39:
                    17:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:43:54:1E:37:D3:DD:08:C1:1B:11:B5:C5:B6:57:A3:94:13:03
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:12:78:1c:6e:01:c9:95:0f:23:ff:bc:d8:27:9b:c4:63:
         c7:24:20:15:44:c8:eb:82:07:12:ac:13:81:48:d6:3f:23:2c:
         42:46:4b:32:b1:7b:3c:bd:cb:12:1f:c0:ff:7a:2f:8a:2d:f2:
         ef:29:d6:a9:d1:41:71:0d:ad:52:e6:2f:55:9a:5a:9d:af:c2:
         a4:6f:f8:ce:dc:2c:b0:e6:e2:ed:25:4a:79:88:b6:d7:ba:f8:
         25:e7:4d:47:0a:bf:b8:2f:cd:30:82:ff:e6:56:eb:85:7b:0d:
         d0:ea:0d:81:ef:a6:56:29:2e:92:00:6e:79:e0:1c:dd:51:36:
         68:14:d9:eb:81:2a:dd:3f:ef:d4:e3:9a:83:e6:ca:6d:b7:e9:
         ca:5c:6b:cf:48:89:ae:04:ad:28:96:40:86:cd:e0:c2:08:fc:
         4d:e0:93:ae:6f:02:f2:d5:cd:8b:93:1d:d5:f9:ca:8b:64:92:
         94:cb:4f:6d:18:f1:4d:d2:b9:18:dc:96:16:39:6b:7a:e8:2e:
         2e:dc:88:07:03:84:4f:39:18:12:6b:28:4b:bf:1f:9c:15:72:
         3e:35:cc:88:9a:ac:c1:78:91:58:a7:f6:ff:36:3f:23:81:df:
         80:88:5c:73:c7:dd:03:20:71:dd:f7:e4:75:ce:67:14:68:42:
         6d:5d:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 22:05:33 2025 by rpki-client