This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: Yp3+h2qt9YX5aS5t4/YjaJ+FiRvPGvJbYZGlRKwsR1Q=
Subject key identifier: 3C:07:0B:33:EB:76:7C:A7:C7:1A:80:2E:EB:9F:A7:83:65:52:DF:B4
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 23123CF74C7552CE78EC31F3CC383FF5B7BF3232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 0947
Signing time: Wed 21 Jan 2026 04:29:12 +0000
Manifest this update: Wed 21 Jan 2026 04:24:12 +0000
Manifest next update: Thu 22 Jan 2026 07:33:12 +0000
Files and hashes: 1: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
2: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
3: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
4: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
5: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
6: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
7: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
8: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
9: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
10: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
11: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
12: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
13: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: 3NKJuVLROHPTv+c+R/Fcz67k1ZE2vT7XArguyJp+YB8=)
14: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
15: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
16: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
17: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
18: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
19: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
20: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
21: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
22: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
23: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
24: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
25: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
26: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
27: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
28: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
29: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
30: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
31: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
32: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
33: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Jan 2026 07:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:12:3c:f7:4c:75:52:ce:78:ec:31:f3:cc:38:3f:f5:b7:bf:32:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Jan 21 04:24:12 2026 GMT
Not After : Jan 22 07:33:12 2026 GMT
Subject: CN=3C070B33EB767CA7C71A802EEB9FA7836552DFB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:a2:e9:b3:fa:c8:fd:69:e1:a0:90:73:52:
32:e7:cb:ee:4f:64:5d:bc:ce:c1:46:43:f0:10:36:
49:cc:be:1c:70:39:c0:c1:82:46:8f:3f:8d:5e:6f:
0b:41:fa:9e:31:27:a9:09:e7:a3:ac:a8:f7:bc:ce:
0e:8e:56:14:8d:96:8f:69:da:37:86:69:50:5e:23:
46:d0:82:e1:44:ec:6d:bd:84:44:3a:72:d5:19:43:
51:cd:58:5d:dd:df:bd:38:49:4b:d6:50:31:01:b7:
e9:6d:8a:d2:84:fe:3e:6a:49:d9:fa:2b:da:c4:e4:
99:cc:82:d3:44:1e:fd:12:83:fa:f5:43:33:c3:28:
a6:f6:24:d3:f7:3d:05:57:c9:09:17:4c:73:9d:42:
cc:30:ab:db:97:ae:6d:ed:21:0d:25:27:7d:fa:32:
ff:dc:1e:c2:d9:df:68:54:39:09:72:3a:37:e2:1d:
e2:80:3d:a8:53:3c:23:ec:03:7f:f6:b4:b2:04:6e:
1e:aa:db:8a:92:46:c6:8f:a1:0e:e2:06:9c:ca:89:
92:33:6a:58:5e:39:ff:c2:a6:7f:98:49:22:14:32:
d2:c0:11:cf:2a:2b:0c:87:78:29:6c:5a:b7:5a:68:
79:d4:4b:05:b0:7b:47:dc:e6:00:12:03:3b:bf:f6:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:0B:33:EB:76:7C:A7:C7:1A:80:2E:EB:9F:A7:83:65:52:DF:B4
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:0d:2f:42:67:2b:f3:72:cf:ab:8d:fc:f4:9e:65:cf:af:
59:8d:37:20:59:57:3f:55:3a:5b:30:4f:07:8d:7f:3d:6f:c0:
62:d3:cd:1c:74:cf:88:bc:de:93:af:ce:d3:a5:7b:c0:17:b0:
3f:4d:ff:58:70:f5:cc:2b:6a:92:69:9b:c9:85:51:14:24:9e:
4b:1d:4e:dc:11:05:61:d2:c1:46:ee:fe:a2:d6:7f:19:e0:95:
eb:dc:e4:2e:0c:a2:ee:52:42:88:b0:74:67:c4:45:49:48:16:
40:24:b1:a4:bb:e6:0e:99:da:db:9b:57:50:27:bf:ef:2b:72:
64:b6:f3:8c:1c:99:d2:12:4e:77:85:e1:0c:16:42:b7:68:d9:
c2:8f:07:2c:cb:14:8d:5a:b3:82:3a:42:04:c9:50:41:df:f4:
71:1b:4c:3e:2a:66:8b:d7:51:5a:1c:29:cd:bb:1d:60:0c:da:
89:89:c6:16:f8:c9:41:5a:77:cb:24:9c:e6:61:0a:33:80:6e:
38:5f:90:c5:c0:94:75:31:21:c1:ac:84:12:37:7e:e6:c0:10:
8a:86:38:55:00:3d:17:9d:69:46:b6:8c:4b:6d:8a:9c:4d:87:
de:f5:b2:e9:04:43:60:0e:7a:91:b0:b6:bc:3d:cc:5a:7b:64:
f9:7c:bd:b5
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUIxI890x1Us547DHzzDg/9be/MjIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MDEyMTA0MjQxMloX
DTI2MDEyMjA3MzMxMlowMzExMC8GA1UEAxMoM0MwNzBCMzNFQjc2N0NBN0M3MUE4
MDJFRUI5RkE3ODM2NTUyREZCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJu7oumz+sj9aeGgkHNSMufL7k9kXbzOwUZD8BA2Scy+HHA5wMGCRo8/jV5v
C0H6njEnqQnno6yo97zODo5WFI2Wj2naN4ZpUF4jRtCC4UTsbb2ERDpy1RlDUc1Y
Xd3fvThJS9ZQMQG36W2K0oT+PmpJ2for2sTkmcyC00Qe/RKD+vVDM8MopvYk0/c9
BVfJCRdMc51CzDCr25eube0hDSUnffoy/9wewtnfaFQ5CXI6N+Id4oA9qFM8I+wD
f/a0sgRuHqrbipJGxo+hDuIGnMqJkjNqWF45/8Kmf5hJIhQy0sARzyorDId4KWxa
t1poedRLBbB7R9zmABIDO7/25SkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQ8Bwsz
63Z8p8cagC7rn6eDZVLftDAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5
QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGTjDS9CZyvzcs+rjfz0nmXPr1mNNyBZVz9V
OlswTweNfz1vwGLTzRx0z4i83pOvztOle8AXsD9N/1hw9cwrapJpm8mFURQknksd
TtwRBWHSwUbu/qLWfxnglevc5C4Mou5SQoiwdGfERUlIFkAksaS75g6Z2tubV1An
v+8rcmS284wcmdISTneF4QwWQrdo2cKPByzLFI1as4I6QgTJUEHf9HEbTD4qZovX
UVocKc27HWAM2omJxhb4yUFad8sknOZhCjOAbjhfkMXAlHUxIcGshBI3fubAEIqG
OFUAPRedaUa2jEttipxNh971sukEQ2AOepGwtrw9zFp7ZPl8vbU=
-----END CERTIFICATE-----
Generated at Wed Jan 21 15:08:53 2026 by rpki-client