Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          mWu3P+fwovdFVa3PJFqTlgBPWuGmXLELDl5Im0MuEbc=
Subject key identifier:   2D:50:5A:84:45:13:00:39:AB:5C:0C:7D:39:9D:27:E0:B9:8E:A1:89
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       343BB29773F760073DE2D2C10B40EE5327527D61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          0964
Signing time:             Sat 14 Nov 2026 21:23:46 +0000
Manifest this update:     Sat 14 Nov 2026 21:18:46 +0000
Manifest next update:     Mon 16 Nov 2026 00:42:46 +0000
Files and hashes:         1: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
                          2: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
                          3: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
                          4: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
                          5: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: VZNesasvz2tEhuMGNvLzXouMh85J877cx99AejiIwmI=)
                          6: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
                          7: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
                          8: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
                          9: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
                          10: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
                          11: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
                          12: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
                          13: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
                          14: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
                          15: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
                          16: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
                          17: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
                          18: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
                          19: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
                          20: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
                          21: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 00:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3b:b2:97:73:f7:60:07:3d:e2:d2:c1:0b:40:ee:53:27:52:7d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Nov 14 21:18:46 2026 GMT
            Not After : Nov 16 00:42:46 2026 GMT
        Subject: CN=2D505A8445130039AB5C0C7D399D27E0B98EA189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:db:f0:bc:b3:cb:98:f8:b2:88:2d:51:93:
                    62:86:68:33:f4:a6:7d:1a:1d:7c:e8:bd:fe:7d:13:
                    ee:98:55:c2:32:b2:3c:08:f8:4b:20:76:af:30:af:
                    ae:13:07:c0:7d:6a:3a:b7:1e:6a:60:65:3d:d5:d7:
                    8a:fe:db:75:01:1c:13:64:85:0b:57:a7:59:1b:6a:
                    8c:6c:ab:af:f1:c2:5e:02:7a:69:5a:4b:6d:6c:c1:
                    70:f8:23:f6:14:15:d7:0c:e4:75:a4:b2:31:db:84:
                    6c:bf:7a:85:11:73:c5:01:48:38:ce:c9:1c:4b:a7:
                    7e:63:f6:14:01:fe:05:3f:ff:ce:0c:f8:1e:3c:85:
                    0f:07:0d:5f:91:cb:d5:39:57:c4:93:e8:46:61:bd:
                    02:cf:38:4e:f1:3b:48:ec:55:8a:ee:11:1a:37:7c:
                    99:a7:62:9a:d1:5c:ab:0e:a6:5e:cf:75:d6:b7:73:
                    39:88:7d:5a:91:d9:b9:89:95:94:ae:74:35:d1:d9:
                    a3:18:31:8b:34:ab:cc:1f:b9:2d:70:61:d4:a7:db:
                    b9:59:6d:81:aa:ac:13:f5:91:bb:7a:ca:8f:90:ce:
                    cb:f7:c4:02:07:85:dc:17:49:fc:fd:39:3c:46:11:
                    04:2d:6d:19:10:f6:17:ad:77:e3:16:90:7d:2e:60:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:50:5A:84:45:13:00:39:AB:5C:0C:7D:39:9D:27:E0:B9:8E:A1:89
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:5e:0a:e7:09:b3:5e:5a:f1:fe:40:68:33:02:33:54:18:0d:
         e0:68:e7:34:48:dc:7a:b1:17:b2:f0:9e:1c:56:f1:3c:13:56:
         b6:cd:68:74:72:5e:ae:ab:49:ff:19:c0:97:a5:97:d7:d3:5b:
         ce:95:79:8a:c0:7f:68:d6:6d:b3:a7:4f:03:26:95:e8:f2:03:
         96:e4:90:31:b7:a4:76:af:9c:ce:78:e8:39:82:a0:65:ab:cf:
         67:e2:ae:c4:e8:0a:23:7c:16:ec:50:17:a9:4a:70:c4:11:86:
         c1:22:01:c2:8d:0d:fb:90:2c:37:7a:b3:3f:53:b4:aa:e1:ab:
         a7:c9:6d:55:66:51:0c:3c:2d:86:a0:c2:4c:f3:9d:a6:5f:1a:
         79:fa:0e:2c:f3:5e:96:e0:3d:df:5c:6c:1a:17:07:88:3b:72:
         2a:43:c7:45:56:f0:cb:8b:37:c0:66:65:fd:81:4d:9f:8c:a1:
         bd:71:44:4c:a4:a6:14:8b:a6:ab:20:cd:b5:48:e1:3c:a2:96:
         7f:1b:b7:46:2c:b2:8e:98:d3:6e:a2:62:64:77:6b:2d:d9:45:
         3b:96:59:0d:54:7a:a5:3d:a4:fa:25:bf:ca:b1:aa:52:3e:ce:
         2c:d5:47:7a:3a:1c:9e:83:f4:73:27:56:f9:6a:d6:d0:16:04:
         8f:c2:c9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:49:07 2026 by rpki-client