Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
File:                     5B1AD82F0E7DC771819A9A26674992A3951B9373.mft (raw, json)
Hash identifier:          c/Cv4KuZNfaFl4s+xIRZVgG1K6qNLZA9xDjBhJ0YJs4=
Subject key identifier:   6A:8B:DE:1E:4D:9E:4C:D1:D5:79:E5:B4:C7:D6:25:B8:8F:43:FB:DB
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial:       4B8CB38292882BC9C3A52064E897B8DFA6A7F31E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
Manifest number:          01CC
Signing time:             Wed 23 Sep 2026 16:44:58 +0000
Manifest this update:     Wed 23 Sep 2026 16:39:58 +0000
Manifest next update:     Thu 24 Sep 2026 17:31:58 +0000
Files and hashes:         1: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: LFwJ6OFasHUXdxn7Pjd2blvuD4fgYwkNxMcSghbaXHE=)
                          2: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (hash: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY=)
                          3: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (hash: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo=)
                          4: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=)
                          5: AS138038.asa (hash: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI=)
                          6: 3230322e352e3232302e302f32322d3234203d3e2033323538.roa (hash: RSC0gS7HCZeuxKb2QI8cI8b8M+MPUL5V2oXXelhZ2i4=)
                          7: 323430333a616338303a3a2f33322d3438203d3e2039333132.roa (hash: fgKSq0+6HaJmX4YRsGt9woaxxo2J+1VxHIL2NS4cwCQ=)
                          8: 3130332e3230312e3132382e302f32322d3234203d3e2038383838.roa (hash: jroVYKFHmgPVzgsQ26TPXXr/n6bFbi/cJido3jfFoMg=)
                          9: 5B1AD82F0E7DC771819A9A26674992A3951B9373.crl (hash: JGgr83VLMsIpwYp07nnCiJ1AxsUzmplUIMVoAAw/A5s=)
                          10: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (hash: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8=)
                          11: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (hash: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I=)
                          12: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: gMRDa6tXlNXXN9n511PW1vIGUannRwNsBy5I5ncCCYE=)
                          13: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (hash: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ=)
                          14: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (hash: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM=)
                          15: 3230322e352e3232302e302f32322d3234203d3e2038383838.roa (hash: 8fu1VICLJqfb2qBAICSYNfZTWIi/AxU4hCyty2bGjds=)
                          16: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
                          rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 17:31:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8c:b3:82:92:88:2b:c9:c3:a5:20:64:e8:97:b8:df:a6:a7:f3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
        Validity
            Not Before: Sep 23 16:39:58 2026 GMT
            Not After : Sep 24 17:31:58 2026 GMT
        Subject: CN=6A8BDE1E4D9E4CD1D579E5B4C7D625B88F43FBDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:94:ba:4d:69:69:05:41:34:4c:24:94:22:28:
                    2d:a0:4d:b4:28:9b:76:d3:59:c2:49:08:75:28:b1:
                    84:bf:55:a1:be:0e:4a:89:4b:bb:9e:45:65:ed:43:
                    55:99:05:b0:5b:27:6c:21:ac:08:82:6a:a6:a7:b8:
                    76:8c:45:63:3f:9e:be:e0:78:71:b6:53:10:d6:3e:
                    31:80:ec:fa:bc:2d:de:24:a2:86:ec:8f:14:6e:30:
                    a9:e8:b0:20:0a:61:97:d4:5c:ed:b9:9a:d8:d1:24:
                    08:61:71:36:aa:eb:c9:54:ff:e4:3a:71:da:35:ff:
                    75:90:5c:14:ac:42:d1:e9:54:f1:91:ea:cc:ba:77:
                    1c:98:4b:15:2e:e3:60:de:37:91:8b:28:44:15:30:
                    45:92:55:d6:81:17:ed:1f:0a:9d:a5:44:93:3c:08:
                    7e:6a:41:f7:55:6a:61:be:dc:3c:d5:d2:3c:d2:00:
                    39:13:78:03:56:02:36:a6:75:ee:97:5e:ae:bb:a7:
                    22:a5:d7:36:a3:44:f3:f8:22:b1:2f:43:62:4f:2e:
                    45:4a:3c:5d:ad:4c:41:2a:c5:ae:a7:d8:3d:a6:29:
                    32:50:33:e1:26:a5:1d:e4:7a:12:aa:1d:27:93:6c:
                    8e:99:ed:c2:6d:f1:6e:81:d6:00:4b:f8:59:8a:8f:
                    34:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8B:DE:1E:4D:9E:4C:D1:D5:79:E5:B4:C7:D6:25:B8:8F:43:FB:DB
            X509v3 Authority Key Identifier:
                keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:d3:c6:0a:5f:b3:f5:26:36:02:98:70:65:e3:f6:0b:43:
         42:20:46:21:38:d4:80:d8:a5:6c:dc:de:02:6b:6c:b9:c9:e4:
         d0:9e:42:f8:83:5e:44:57:95:82:32:b1:b3:22:11:9a:df:f1:
         fc:c0:e8:b1:18:5a:87:00:dd:0f:b0:75:96:26:89:37:87:c8:
         85:d0:49:94:bd:d3:2b:27:7d:27:84:a3:40:23:c2:45:e8:80:
         76:3e:1b:08:fe:66:32:0d:a6:ed:a7:6c:46:fa:fb:d4:f7:52:
         8a:e3:5d:bb:53:b7:29:d9:e5:f0:5a:0c:6d:73:b4:0f:cf:5e:
         23:b9:c8:10:9d:08:ff:e3:68:39:ec:a5:71:14:9a:4c:e0:1f:
         38:65:f9:ee:64:0f:a1:04:8a:88:5c:47:19:db:af:d5:cb:61:
         d9:e5:ec:84:0e:9a:96:69:95:70:3a:f0:ef:a0:ac:87:ad:b2:
         ee:0f:eb:03:98:d1:f7:65:0f:ff:13:1d:9b:de:55:f3:00:4e:
         14:f3:bd:08:fa:dd:41:d8:4d:f1:ff:61:7f:a2:4a:f2:24:d6:
         25:20:8f:44:82:ae:fa:fc:c5:d2:dc:a7:7b:a1:80:13:d4:74:
         72:39:ae:c7:a2:13:a0:a9:dd:91:ff:21:9b:a1:4c:1c:f0:9b:
         31:e9:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----