This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          irg+JYPqFQazi45kVukn0J0BBNJrm/2Ldt0nSKw0JFw=
Subject key identifier:   06:D8:09:44:F6:76:3B:31:B1:DA:F7:B2:2A:90:DA:63:FE:DB:92:A0
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       0B3E3CCB9480D14571A7736FB12409DA953F0ADA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          090A
Signing time:             Sun 07 Dec 2025 03:29:37 +0000
Manifest this update:     Sun 07 Dec 2025 03:24:37 +0000
Manifest next update:     Mon 08 Dec 2025 05:03:37 +0000
Files and hashes:         1: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          2: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          3: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          4: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: wO/BSyHMLcxco+u9V9R24wOrNIhLXCCMCcSZ61QD/PY=)
                          5: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          6: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          7: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          8: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          9: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          10: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          11: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          12: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          13: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          14: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          15: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          16: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          17: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          18: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          19: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          20: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          21: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          22: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          23: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          24: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          25: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          26: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          27: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          28: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          29: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          30: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          31: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          32: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          33: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Dec 2025 05:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3e:3c:cb:94:80:d1:45:71:a7:73:6f:b1:24:09:da:95:3f:0a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Dec  7 03:24:37 2025 GMT
            Not After : Dec  8 05:03:37 2025 GMT
        Subject: CN=06D80944F6763B31B1DAF7B22A90DA63FEDB92A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:f3:44:70:1b:70:6c:6c:ba:93:7f:03:a5:
                    c2:15:84:27:0b:4e:c9:56:84:8d:60:10:0b:2e:e7:
                    d3:8e:1d:b4:93:6a:1b:6b:30:96:01:cb:20:2b:a9:
                    18:3f:41:ab:2f:53:ee:b3:e9:32:07:cb:e6:89:a9:
                    b3:60:9b:df:0a:74:17:74:2e:0c:9b:2a:52:43:c9:
                    20:08:d6:7b:7e:4c:f3:50:f1:1b:6b:04:e8:eb:d7:
                    a2:52:98:cb:bb:63:b6:b0:41:e2:8c:57:87:98:79:
                    bb:b7:f9:14:35:10:c4:a3:59:3b:07:34:ae:ee:ff:
                    f0:81:31:f6:e4:84:19:7c:0a:96:50:b0:01:62:15:
                    62:44:68:d0:bd:29:89:cd:f6:9d:a2:22:11:cc:b7:
                    34:ae:4d:5b:64:13:81:4f:47:6d:ca:19:b2:16:62:
                    87:e5:85:c2:66:37:01:de:b4:8f:f4:78:04:2e:54:
                    43:e6:41:89:2e:69:c9:fe:d8:cd:f3:f1:b3:78:59:
                    b2:b7:c8:6e:2d:2b:16:cd:50:ee:db:59:2f:19:95:
                    e8:1e:cb:3d:77:36:5d:96:47:e0:6e:d8:55:e4:59:
                    6c:9a:b7:43:f4:9d:25:24:51:33:3e:5c:d9:9d:36:
                    7d:6e:d4:6a:7b:e3:7e:7c:fa:a6:6e:c4:7c:fd:d7:
                    66:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D8:09:44:F6:76:3B:31:B1:DA:F7:B2:2A:90:DA:63:FE:DB:92:A0
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:14:8f:d1:92:f6:86:c2:7c:0e:fa:e2:88:aa:f8:5a:0b:ff:
         69:3f:72:c8:67:48:90:ca:14:4e:a4:ee:28:d6:68:52:d1:14:
         2f:0b:f9:da:09:c4:2f:07:7d:5c:05:03:51:02:bd:38:cf:ea:
         a2:ff:f2:50:b5:29:a6:c3:a8:f1:c1:01:69:de:c9:e0:5d:ae:
         22:55:5d:05:18:98:99:ea:72:24:60:7e:6b:1b:7f:3e:54:76:
         d0:98:17:79:1a:03:c3:48:ef:9c:f8:7c:93:35:59:4e:1e:25:
         b9:d0:cf:68:e1:77:5d:fa:62:39:5a:dd:5a:d6:93:b4:c5:c6:
         6b:9a:77:b7:6d:b4:45:96:9d:d6:ea:fb:11:c7:7a:cb:4a:94:
         e9:a8:c5:19:29:4e:86:f0:56:8d:a9:29:a3:d1:58:d1:a3:43:
         24:3a:bd:a5:a2:7c:9f:8a:5f:a5:5f:da:56:e0:56:57:3b:fe:
         60:a8:26:8f:f0:e8:0e:20:52:17:38:a0:d1:48:1b:42:95:f3:
         98:77:93:31:f8:0d:26:93:a7:5d:e3:ab:3d:e7:48:45:0b:cb:
         f6:55:a6:aa:03:ba:1d:03:6f:21:15:a5:3c:fe:d1:5a:b0:bb:
         92:6b:d2:1e:d4:db:6d:00:71:33:6b:86:4e:6f:44:56:03:0c:
         e3:fb:c6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 04:42:53 2025 by rpki-client