Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          cFryD7l/15etvV97McfxetQL4A8E5BLPyhm4/D8LsJA=
Subject key identifier:   99:8F:9F:DC:2D:70:87:06:62:47:59:65:96:E7:68:80:29:1E:75:8E
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       50733E7E6519E3748A6336BD7FE068E90267040B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0870
Signing time:             Sat 23 Aug 2025 01:48:32 +0000
Manifest this update:     Sat 23 Aug 2025 01:43:32 +0000
Manifest next update:     Sun 24 Aug 2025 05:45:32 +0000
Files and hashes:         1: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          2: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          3: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          4: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          5: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          6: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          7: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          8: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: 14gm5Biaugoy3j+0dZbC9wcDjyiw/DRWYhuZp+alM64=)
                          9: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          10: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          11: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          12: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          13: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          14: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=)
                          15: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          16: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          17: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          18: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          19: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=)
                          20: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          21: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          22: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          23: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          24: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          25: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          26: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          27: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          28: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          29: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          30: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          31: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          32: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          33: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 05:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:73:3e:7e:65:19:e3:74:8a:63:36:bd:7f:e0:68:e9:02:67:04:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Aug 23 01:43:32 2025 GMT
            Not After : Aug 24 05:45:32 2025 GMT
        Subject: CN=998F9FDC2D7087066247596596E76880291E758E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bc:27:64:96:33:3f:70:de:02:39:7c:89:cd:
                    9f:47:db:59:d6:9f:06:61:e4:6b:d9:03:5c:f3:58:
                    f4:e4:31:ba:ac:33:7c:c4:7a:93:96:58:4e:85:9e:
                    8d:8b:b7:d2:93:b0:40:42:20:64:5e:39:3c:6b:b2:
                    92:c8:31:0d:d1:c0:ea:66:e6:01:a3:8c:61:40:18:
                    cd:24:9c:f0:e3:ba:60:6c:eb:2f:53:e1:68:8b:0a:
                    33:91:50:82:58:dc:52:f2:27:f4:94:13:01:78:a4:
                    86:ef:e8:e5:7d:33:aa:74:b6:7a:0b:4a:07:c9:42:
                    bb:35:2b:92:c8:6f:b1:f2:d1:da:4d:63:c5:22:ef:
                    1f:64:b5:72:6d:ce:c3:f8:da:64:81:44:b9:86:87:
                    cc:9e:f7:8b:cb:0e:44:ff:83:ec:10:36:df:37:32:
                    cc:7e:c2:e9:c9:4e:fd:0f:e1:89:33:cf:85:f9:94:
                    0b:09:95:5b:ea:8c:fd:8d:d4:a2:27:78:a6:03:75:
                    6b:f6:8f:66:b4:ad:4f:03:81:7a:a0:37:dd:0e:18:
                    74:50:e2:da:78:d7:1c:d1:a5:51:8f:a4:93:15:7d:
                    73:01:2b:22:83:9b:9b:36:df:09:bc:d4:30:62:74:
                    ed:74:a5:31:db:5b:2d:4d:d5:96:8b:f0:9e:68:d0:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8F:9F:DC:2D:70:87:06:62:47:59:65:96:E7:68:80:29:1E:75:8E
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:44:4d:27:30:48:4c:74:18:d5:60:c1:8a:8a:50:c6:ae:61:
         e6:e4:15:d4:63:ee:e1:22:f6:ff:9d:7a:96:d3:a2:43:bf:6a:
         36:7e:1b:d7:97:6a:c3:13:d0:2a:5d:e6:93:56:33:87:98:ad:
         7d:ac:f5:2f:a3:29:6f:a1:8a:da:87:c4:ea:a0:6c:ea:16:f8:
         ce:6d:a2:5e:d0:f8:af:ca:a4:d7:5b:ba:14:05:21:71:77:b3:
         c4:04:44:59:56:88:e9:b8:6d:4b:5a:87:54:f2:ca:04:82:16:
         a8:d7:90:e9:b6:dc:90:86:70:1c:43:28:85:4b:59:08:a9:37:
         79:8b:1e:7a:52:20:a5:61:c0:e0:1b:b6:35:6a:87:10:a4:db:
         e4:16:17:b2:06:b7:78:f3:6e:54:bf:01:e3:c6:ab:73:d2:f0:
         24:11:6a:aa:66:f7:1e:aa:ab:53:80:b4:a9:4f:fa:8c:8b:b9:
         39:4b:d7:12:7b:fc:d2:f5:2a:13:62:e1:3b:5e:42:a1:04:92:
         bc:b0:9e:c8:0f:b9:39:bc:33:53:68:bb:b6:6c:8d:52:f7:66:
         ef:e8:78:0f:69:90:e5:0e:9f:b8:c5:fd:76:e5:df:e7:56:47:
         65:5c:bf:a9:8b:59:61:60:79:50:50:f8:ed:71:74:7a:79:95:
         25:f9:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:55 2025 by rpki-client