Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          MOQCIi0zrQjIycntxHPHaMHnujKj9PwlL34tfDde3Ug=
Subject key identifier:   65:02:97:33:A2:EF:B4:F2:70:0A:46:F5:01:7B:AF:76:63:0E:5B:5C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       699060FF95EC31FE9D2EA7FE65DDB77D71DB9C96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0AAB
Signing time:             Fri 04 Sep 2026 19:44:58 +0000
Manifest this update:     Fri 04 Sep 2026 19:39:58 +0000
Manifest next update:     Sat 05 Sep 2026 22:32:58 +0000
Files and hashes:         1: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
                          2: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          3: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
                          4: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
                          5: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
                          6: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
                          7: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          8: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
                          9: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
                          10: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          11: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
                          12: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
                          13: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          14: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          15: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
                          16: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: ZmG7XUnCT+QMTP7lDUcFS4Vxy6vjijQbbE5cfeCYN40=)
                          17: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          18: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
                          19: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          20: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
                          21: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
                          22: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
                          23: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
                          24: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
                          25: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          26: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          27: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
                          28: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
                          29: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          30: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
                          31: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
                          32: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          33: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
                          34: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
                          35: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          36: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          37: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
                          38: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
                          39: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          40: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
                          41: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
                          42: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
                          43: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
                          44: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          45: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Sep 2026 22:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:90:60:ff:95:ec:31:fe:9d:2e:a7:fe:65:dd:b7:7d:71:db:9c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Sep  4 19:39:58 2026 GMT
            Not After : Sep  5 22:32:58 2026 GMT
        Subject: CN=65029733A2EFB4F2700A46F5017BAF76630E5B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:17:97:e1:67:e9:80:55:56:86:fa:14:f6:e0:
                    b8:74:83:d7:ee:91:38:5d:79:31:c9:de:6f:8c:08:
                    a8:77:f7:81:60:cf:6c:4a:4e:ae:78:bb:44:30:76:
                    c2:4b:eb:78:8e:49:f3:e9:86:fc:e4:01:1e:c3:2c:
                    70:c6:51:fa:ec:55:98:3f:46:a2:e7:5d:26:e9:94:
                    06:7b:81:78:0a:24:d0:4b:48:ce:80:02:10:46:76:
                    f5:1f:3a:36:48:30:61:aa:d4:32:52:6a:dd:c2:96:
                    3c:6a:5a:65:73:3f:7b:c6:74:d2:df:82:bf:00:ec:
                    f0:15:2b:29:fd:40:d6:9a:13:ce:95:38:5a:08:a4:
                    5f:b2:69:08:db:d6:b2:50:8d:ea:ae:03:13:27:49:
                    90:af:ce:66:d1:e1:29:fe:d9:8c:db:b7:0e:4a:e9:
                    a3:26:84:c7:25:5e:ba:a3:87:5a:39:46:02:7a:8a:
                    ec:ce:6a:e7:b8:4e:1b:3e:13:75:72:d4:57:47:ea:
                    fb:15:a4:72:b3:b1:92:92:a6:7e:2e:bd:47:80:44:
                    3e:11:23:f0:83:84:5f:b4:13:e9:29:e1:ba:c8:32:
                    77:aa:87:69:56:5e:4c:9e:80:ba:e4:eb:77:a0:54:
                    57:c1:07:0a:15:ee:79:91:31:44:85:3e:ce:64:d9:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:02:97:33:A2:EF:B4:F2:70:0A:46:F5:01:7B:AF:76:63:0E:5B:5C
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:cc:26:30:68:f2:79:77:7a:90:b3:66:e6:7c:ef:c6:32:
         5b:af:9e:e9:82:4e:cd:6c:1c:b8:56:79:a5:c6:71:cf:d1:53:
         86:16:bd:f2:82:f6:22:50:d9:36:7c:c9:dc:29:47:ac:06:95:
         e9:1c:08:42:65:f2:8e:12:19:50:40:ec:f7:2e:5b:cc:3c:61:
         d5:06:af:4b:1b:20:ed:89:3e:f9:2f:d3:0a:8e:6f:15:e5:0e:
         7c:63:37:42:7a:c9:22:a1:09:81:d3:10:f6:8a:e1:5d:66:46:
         3c:df:c4:b6:73:44:dd:d6:81:20:c4:55:20:2a:38:20:1c:a0:
         52:bd:1b:25:3e:02:c2:12:4e:34:0a:ab:3d:12:11:ec:58:0b:
         13:d0:fb:62:fa:36:48:20:6c:6d:f4:07:7f:6e:d7:fe:3a:7b:
         aa:fb:5f:2a:bc:c9:25:c3:f8:5e:36:06:6d:90:cd:a6:48:9a:
         77:68:ba:3d:dc:db:23:f1:05:d0:c8:5b:e9:33:d5:3e:d5:8d:
         5b:2d:8d:2b:2f:28:c0:09:66:22:d9:9b:f1:18:72:07:71:62:
         3f:99:0c:5d:46:53:91:96:33:fb:ef:62:fd:d3:dc:f9:91:70:
         97:5d:43:fb:25:61:1d:54:00:b9:07:52:55:7d:3b:8d:ca:7d:
         29:39:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:18 2026 by rpki-client