Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          SDQZ6cgXfj4RbCzVyoJ5HKIcRa/CrZ1Vca9MIJMNsJQ=
Subject key identifier:   F8:5C:9F:62:7F:BD:E4:CE:BF:53:E9:5F:50:F9:ED:45:38:7F:70:C1
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       5A7DB4B3768DE4BB98F0EC8AA5CE08DAC221784A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          0918
Signing time:             Tue 22 Sep 2026 16:49:58 +0000
Manifest this update:     Tue 22 Sep 2026 16:44:58 +0000
Manifest next update:     Wed 23 Sep 2026 18:13:58 +0000
Files and hashes:         1: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
                          2: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
                          3: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
                          4: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
                          5: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
                          6: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
                          7: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
                          8: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
                          9: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
                          10: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
                          11: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
                          12: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
                          13: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
                          14: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
                          15: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
                          16: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
                          17: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
                          18: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
                          19: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
                          20: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
                          21: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: bJeIf4l4lXBoS1XxNzq9CeKdkkC1fiUD7ziY4EeWPJ8=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 18:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:7d:b4:b3:76:8d:e4:bb:98:f0:ec:8a:a5:ce:08:da:c2:21:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Sep 22 16:44:58 2026 GMT
            Not After : Sep 23 18:13:58 2026 GMT
        Subject: CN=F85C9F627FBDE4CEBF53E95F50F9ED45387F70C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:ba:74:05:5c:f7:88:43:ed:4a:18:a9:80:
                    2b:37:f3:8f:95:a4:be:87:21:e8:ed:57:d5:dd:0f:
                    4b:0e:32:2a:6f:80:c1:8e:8c:f3:66:9b:18:a6:63:
                    b6:5c:74:21:cb:32:db:ef:43:85:b2:33:aa:6b:9b:
                    ad:7b:d1:57:2a:82:d4:da:15:0f:f6:5f:1a:6c:15:
                    40:18:07:06:76:94:10:77:fb:15:94:19:2e:22:5b:
                    77:ea:2c:36:25:85:de:cf:42:6f:63:0a:cb:65:70:
                    e2:21:3f:49:59:5b:02:4d:50:a4:f8:7b:c5:98:0c:
                    26:15:00:47:5f:78:ee:81:25:77:0f:e4:36:02:e1:
                    0b:f7:c6:21:fd:2b:22:9d:ab:fb:3a:56:f7:58:92:
                    d5:86:20:4c:d0:9a:3d:61:d4:c8:59:1b:50:bb:d1:
                    9d:4c:1e:68:cc:4b:30:0b:36:c0:2f:33:18:ed:cb:
                    d1:74:ae:1f:19:73:38:88:93:04:0d:42:07:67:11:
                    66:71:3b:c1:4f:4e:01:4d:a4:5f:24:1d:90:e8:6f:
                    9c:14:34:a7:b4:c8:b6:46:35:14:03:c7:d2:11:15:
                    e6:a8:02:61:b9:3e:e3:e3:04:e4:50:5a:25:c7:4b:
                    e2:bd:7f:d9:ba:f1:b4:f2:68:20:ee:9a:1e:80:d8:
                    f0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5C:9F:62:7F:BD:E4:CE:BF:53:E9:5F:50:F9:ED:45:38:7F:70:C1
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:54:4c:d1:41:8a:9a:ed:03:f5:1a:30:61:22:ec:12:df:3a:
         f6:7c:8b:09:64:08:e5:18:db:c3:10:1b:83:4b:a9:86:0a:0b:
         61:b7:cb:a3:d3:e9:05:42:e6:75:25:f1:62:b8:15:d3:ea:3c:
         6d:c6:50:be:6a:80:02:69:f8:30:e3:9e:17:2d:c3:ad:c0:af:
         b3:6e:1b:c8:54:97:8c:1f:83:12:e9:42:c8:e3:26:d8:c2:b4:
         42:86:65:bc:49:dd:ca:58:18:5d:e2:44:8c:c5:2a:84:f6:d9:
         04:4e:6e:9a:f5:13:be:6f:d8:44:bf:36:4b:01:35:66:76:63:
         cd:e3:0f:e9:b3:f1:04:5d:1d:35:65:6c:69:c4:b8:5d:96:f9:
         c2:66:e2:1a:ac:03:ad:ec:d7:94:c6:3c:cd:6f:cf:a2:14:bd:
         05:37:9c:6c:e6:a8:bd:ea:b7:11:d6:28:29:16:f7:a7:e6:8f:
         52:41:b0:e2:5b:9b:b9:0c:92:c2:07:3a:ab:e8:cd:3f:1a:1e:
         e7:ff:c1:9f:30:06:40:a7:4a:82:88:b4:aa:4d:0f:c8:a6:f0:
         ff:bc:a2:70:26:4f:a4:b9:ef:d8:39:5a:19:52:4b:1c:44:58:
         10:27:98:36:2e:f5:c4:17:49:c3:24:52:66:95:b3:d0:b8:1b:
         60:70:b3:c6
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUWn20s3aN5LuY8OyKpc4I2sIheEowDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRkEzN0QwMDAwMTEwLwYDVQQFEyg1QTE5RDJGREM4
MzkyNzI3Njk2RjcwNDQ5QjhCMzJBRjc3MjA5MUE4MB4XDTI2MDkyMjE2NDQ1OFoX
DTI2MDkyMzE4MTM1OFowMzExMC8GA1UEAxMoRjg1QzlGNjI3RkJERTRDRUJGNTNF
OTVGNTBGOUVENDUzODdGNzBDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALwOunQFXPeIQ+1KGKmAKzfzj5Wkvoch6O1X1d0PSw4yKm+AwY6M82abGKZj
tlx0Icsy2+9DhbIzqmubrXvRVyqC1NoVD/ZfGmwVQBgHBnaUEHf7FZQZLiJbd+os
NiWF3s9Cb2MKy2Vw4iE/SVlbAk1QpPh7xZgMJhUAR1947oEldw/kNgLhC/fGIf0r
Ip2r+zpW91iS1YYgTNCaPWHUyFkbULvRnUweaMxLMAs2wC8zGO3L0XSuHxlzOIiT
BA1CB2cRZnE7wU9OAU2kXyQdkOhvnBQ0p7TItkY1FAPH0hEV5qgCYbk+4+ME5FBa
JcdL4r1/2brxtPJoIO6aHoDY8JcCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBT4XJ9i
f73kzr9T6V9Q+e1FOH9wwTAfBgNVHSMEGDAWgBRaGdL9yDknJ2lvcESbizKvdyCR
qDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzU3LzVBMTlEMkZEQzgzOTI3Mjc2OTZGNzA0NDlC
OEIzMkFGNzcyMDkxQTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL1doblNfY2c1SnlkcGIzQkVtNHN5cjNjZ2thZy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNTcvNUExOUQyRkRDODM5MjcyNzY5NkY3MDQ0OUI4QjMy
QUY3NzIwOTFBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI1UTNFBiprtA/UaMGEi7BLfOvZ8iwlkCOUY
28MQG4NLqYYKC2G3y6PT6QVC5nUl8WK4FdPqPG3GUL5qgAJp+DDjnhctw63Ar7Nu
G8hUl4wfgxLpQsjjJtjCtEKGZbxJ3cpYGF3iRIzFKoT22QRObpr1E75v2ES/NksB
NWZ2Y83jD+mz8QRdHTVlbGnEuF2W+cJm4hqsA63s15TGPM1vz6IUvQU3nGzmqL3q
txHWKCkW96fmj1JBsOJbm7kMksIHOqvozT8aHuf/wZ8wBkCnSoKItKpND8im8P+8
onAmT6S579g5WhlSSxxEWBAnmDYu9cQXScMkUmaVs9C4G2Bws8Y=
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:06:54 2026 by rpki-client