Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          H4MRmPAIah7n/yIgaZ3NTv4M+2mHRh0mEN8/L0GEl9w=
Subject key identifier:   2A:50:33:20:B5:0A:AB:67:E4:F1:97:CA:38:AF:C3:DD:D7:46:A0:06
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       5C873F98B030F4829E83317A113B2C0EB39D1745
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0802
Signing time:             Thu 05 Jun 2025 23:56:58 +0000
Manifest this update:     Thu 05 Jun 2025 23:51:58 +0000
Manifest next update:     Sat 07 Jun 2025 01:24:58 +0000
Files and hashes:         1: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          2: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          3: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          4: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: 5CZn1hX7WbTJI9rl6ufJ8s8jlOsdatShgzWMrK5DzGI=)
                          5: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: YBRtGgVo128HYmmYrlq/rtgksrT7YQggo7xicgUIVnM=)
                          6: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          7: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          8: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          9: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          10: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: XsSHiraeLYNQTJR5HGAY6vwQ9Scu9lRrIHdSI54V+7M=)
                          11: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: eglNokA0036JbGNEJ4JBpUI9W7LtrNCo3IjzCiifpEo=)
                          12: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          13: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=)
                          14: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: hJFUedJxlwrGsuBiVRcEB429TcpnC3Bw2MEl2q91qrM=)
                          15: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          16: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: rjHLbg5RxNx+OSrihRQaxhyOJyLwHXme40chbILQOQQ=)
                          17: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          18: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          19: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: lqCEmZ9NaCjaWEhq0OXTc04xBaaLhH59AP38axB9xQk=)
                          20: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: GMRaZkN3zIDxVuJVnldek+MoIhPgvQ/+nioWSoYNFg0=)
                          21: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: nZRdseJLG8pcz60dA2dIP+lQPJZ68YEbyLu8K+1sxGI=)
                          22: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          23: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          24: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jmlPHqT2zn/G8VxGtz4qGDGVkC091Y4a8xRHPA/+0+0=)
                          25: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: sr7r8uO67cDPo72NjWdP3dlG7qJrC9xZ+w35SmZvRyk=)
                          26: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          27: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=)
                          28: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          29: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          30: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: 6oVWbbqVFk6Pwgux9V8jfDQRsMYOVT5jirPBSL3Wig4=)
                          31: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          32: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          33: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:3f:98:b0:30:f4:82:9e:83:31:7a:11:3b:2c:0e:b3:9d:17:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Jun  5 23:51:58 2025 GMT
            Not After : Jun  7 01:24:58 2025 GMT
        Subject: CN=2A503320B50AAB67E4F197CA38AFC3DDD746A006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7a:dd:70:10:26:93:1b:25:4a:c4:92:95:72:
                    5f:a9:9b:68:ec:52:ee:45:e2:da:b7:07:9b:31:26:
                    bc:94:0d:ee:28:22:ff:17:13:d3:31:cf:0e:55:0a:
                    ae:ba:de:12:1c:21:ba:11:e5:e8:b9:62:04:da:f9:
                    4e:4a:ed:d8:71:d9:3f:8e:c1:27:49:83:31:6a:8d:
                    5d:bb:f7:89:36:f6:a8:b8:01:87:55:c6:f4:65:36:
                    e1:ff:0a:41:4a:f9:d2:c7:62:6b:17:d8:4e:37:47:
                    47:ee:fe:44:db:fd:28:a0:9e:c9:49:a1:54:ac:c8:
                    d3:43:d3:9c:26:a4:08:cf:b4:30:eb:d3:43:9e:b5:
                    91:9c:dd:19:f0:98:2f:8c:82:6b:86:fc:89:19:3b:
                    f1:cf:d0:f3:f7:1c:28:22:fe:1d:03:4c:ec:ed:0d:
                    8f:78:91:47:85:28:23:b7:19:12:d6:43:dc:ae:6b:
                    56:e6:ca:b4:6f:3f:ae:84:cd:aa:33:d9:6c:80:ec:
                    4d:82:40:5f:5b:b8:4a:b3:cd:f3:5f:cd:1a:a4:0c:
                    08:ce:10:50:38:3f:ec:33:f9:61:d6:29:a0:c5:94:
                    5b:84:73:59:9d:52:1c:c3:b6:47:c8:35:f1:eb:02:
                    53:4a:ff:97:c1:4c:99:2c:13:5d:2d:29:5b:40:00:
                    df:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:50:33:20:B5:0A:AB:67:E4:F1:97:CA:38:AF:C3:DD:D7:46:A0:06
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a9:e9:99:c9:aa:03:ef:72:d4:e3:0f:4b:50:5c:06:dd:cb:
         48:e0:e7:38:1c:92:b6:7a:dc:07:83:82:bc:1a:b7:f2:63:43:
         b4:e6:70:c5:88:4a:94:b3:35:a3:19:1c:0f:89:80:3a:1f:1f:
         17:c9:b7:1f:34:14:e9:34:2c:69:dd:70:be:49:49:ed:1b:17:
         43:27:0d:53:3a:0a:bd:c4:1e:3f:4d:53:65:ce:a7:ab:a5:5b:
         ee:81:4d:ae:11:0a:98:66:43:75:e7:a0:fe:58:7d:0e:61:dd:
         84:a1:aa:fc:8b:11:83:f6:5f:dd:3b:f9:50:d4:13:4e:77:a1:
         df:80:44:7d:63:8e:80:d4:61:6d:80:f5:34:7e:a8:89:3a:10:
         3d:41:b0:e5:0e:87:49:87:4d:a3:f2:24:a4:cd:35:4d:bc:2d:
         50:51:c9:2f:a7:de:67:b2:c3:40:58:ea:73:fd:d1:69:8a:88:
         c7:9d:12:55:1f:d1:cb:96:19:2c:60:87:18:83:db:66:ea:94:
         50:3e:50:30:58:65:cf:5b:b5:95:13:43:d8:49:45:56:30:39:
         62:23:c1:55:f9:88:d2:ff:60:ad:33:55:ab:ac:12:81:51:75:
         67:f9:cd:11:d9:25:4d:cd:ad:05:ae:d3:f1:f3:9c:66:7f:c5:
         c9:53:a3:2b
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUXIc/mLAw9IKegzF6ETssDrOdF0UwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI1MDYwNTIzNTE1OFoX
DTI1MDYwNzAxMjQ1OFowMzExMC8GA1UEAxMoMkE1MDMzMjBCNTBBQUI2N0U0RjE5
N0NBMzhBRkMzRERENzQ2QTAwNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMt63XAQJpMbJUrEkpVyX6mbaOxS7kXi2rcHmzEmvJQN7igi/xcT0zHPDlUK
rrreEhwhuhHl6LliBNr5Tkrt2HHZP47BJ0mDMWqNXbv3iTb2qLgBh1XG9GU24f8K
QUr50sdiaxfYTjdHR+7+RNv9KKCeyUmhVKzI00PTnCakCM+0MOvTQ561kZzdGfCY
L4yCa4b8iRk78c/Q8/ccKCL+HQNM7O0Nj3iRR4UoI7cZEtZD3K5rVubKtG8/roTN
qjPZbIDsTYJAX1u4SrPN81/NGqQMCM4QUDg/7DP5YdYpoMWUW4RzWZ1SHMO2R8g1
8esCU0r/l8FMmSwTXS0pW0AA308CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQqUDMg
tQqrZ+Txl8o4r8Pd10agBjAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5
QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFCp6ZnJqgPvctTjD0tQXAbdy0jg5zgckrZ6
3AeDgrwat/JjQ7TmcMWISpSzNaMZHA+JgDofHxfJtx80FOk0LGndcL5JSe0bF0Mn
DVM6Cr3EHj9NU2XOp6ulW+6BTa4RCphmQ3XnoP5YfQ5h3YShqvyLEYP2X907+VDU
E053od+ARH1jjoDUYW2A9TR+qIk6ED1BsOUOh0mHTaPyJKTNNU28LVBRyS+n3mey
w0BY6nP90WmKiMedElUf0cuWGSxghxiD22bqlFA+UDBYZc9btZUTQ9hJRVYwOWIj
wVX5iNL/YK0zVausEoFRdWf5zRHZJU3NrQWu0/HznGZ/xclToys=
-----END CERTIFICATE-----
Generated at Fri Jun 6 16:21:26 2025 by rpki-client