
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: LlGtnaqqrTwCAhCAqnyguvzLZ/OOXT+0cK8lKeSLZac=
Subject key identifier: DB:7D:DB:3F:FC:B3:2D:30:63:6C:2B:2D:1A:36:07:AB:54:E3:EF:F0
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 3970A6FD1206BD8C55444600A1529B516A37D6F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 0AF1
Signing time: Sat 24 Oct 2026 11:58:12 +0000
Manifest this update: Sat 24 Oct 2026 11:53:12 +0000
Manifest next update: Sun 25 Oct 2026 12:19:12 +0000
Files and hashes: 1: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
2: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
3: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: OKPuGpLUqy2yFELi5wqT2BYeYGgg3O+zUqfSWLISZL0=)
4: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
5: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
6: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: 7PCH1M8iZWZAD+sIIZW/znFaui9K+FOcimz0S9d3EMg=)
7: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
8: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
9: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: c32CtCZO4oZ+NW3XaEk7SjtFrVeduaenb5wMIP1c/YM=)
10: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
11: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
12: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
13: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: 6Vq2Epv09RLEy9mQ88GwW6OBiBmO24RWtHlVgplt4mE=)
14: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
15: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
16: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
17: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
18: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
19: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
20: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
21: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: 9DIb3Y4dolSmPH25z/ti1YL78unGobr+URauHcbsqv0=)
22: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
23: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: dxeh2qMmFE7v1GJtBi0G5NcAZZ1Lw1ojmFzrgDpNaqU=)
24: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: ZBCvQrt9jmxCcsQ1Irb0JFGfe2l4plIaXkDcbDfGXZs=)
25: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
26: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: /CYLvURw59IiLHUhysjwJTIil0oBYGTnjEfLaY9H+LE=)
27: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
28: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: /e78cwnOUM92thWeIGla2ZcfpRkvlxOIP2VUYR4Z/sI=)
29: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: Dsx9VJmpzSaseuCHeYCnaFTlOeGZE4oYdkGCn4lHCHM=)
30: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
31: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: WO+GDAC8yZdqkq47IRCypogTbo3p9eFjDyzI0z4rvhM=)
32: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
33: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
34: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: WRCT4O2uRBdNWdzM4UC9aL+sFKMOjyPJI66H1PJD9uA=)
35: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
36: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
37: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
38: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
39: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
40: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: UHKVWMFzMVyFVqSza93k1ckY7kakeCnMqn4ivbLVC5c=)
41: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: sc69R9vAdanZQ+NbTnaF2aGiBUb0ehbokEhu8uw4L4g=)
42: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: V38UxP1QF8Du/xK16V8Wo1mLpNmUo5bmpOmOE+5agb8=)
43: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: bAt1nsusFLM+ZCRZET+QEw5B1gUZV4Rf5h/Igv5F1vI=)
44: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
45: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: 0LOaeTf9UfSrZzlL5KsEYfVHovJu8XkRrO407XD8z6c=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 25 Oct 2026 12:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:70:a6:fd:12:06:bd:8c:55:44:46:00:a1:52:9b:51:6a:37:d6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Oct 24 11:53:12 2026 GMT
Not After : Oct 25 12:19:12 2026 GMT
Subject: CN=DB7DDB3FFCB32D30636C2B2D1A3607AB54E3EFF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:ae:d8:6d:aa:b2:16:1f:a6:25:15:95:28:
8a:da:7c:2e:57:9a:5a:b2:05:2e:b0:e1:6e:88:5d:
30:af:77:60:09:c5:1a:26:cf:5f:6f:bd:7a:20:e6:
2a:c3:c8:68:6d:c5:82:54:4f:f0:01:ca:5b:c4:e0:
ff:32:e7:aa:f0:94:52:60:d4:d8:1b:31:6a:c8:92:
85:75:48:ec:8a:32:b9:7d:bf:08:7e:08:e9:4e:b9:
f9:05:a7:76:13:d6:43:65:39:4e:4d:8e:cd:77:6d:
00:6a:0b:eb:33:bf:d0:5b:a2:82:78:01:f4:4e:ea:
93:b7:0e:ae:60:87:56:f0:08:0d:fe:2e:75:9f:cb:
ea:5a:0a:c1:b6:bb:1e:60:9c:1c:52:46:b0:27:fc:
37:f9:92:11:bd:9b:a5:a6:e1:ca:12:1b:96:d1:45:
77:cd:3e:ce:3e:fe:c7:39:c7:07:17:14:4a:5b:9c:
93:4d:7d:91:88:08:4d:16:6a:7e:4c:21:77:fb:8e:
a3:07:5a:26:08:2a:a5:e0:01:f4:21:ea:0e:5a:b8:
58:de:40:51:eb:5b:9d:3d:9e:68:3a:c0:4b:28:87:
00:f4:c5:e7:c3:ba:2d:88:21:99:48:6f:48:b2:9b:
8e:06:a7:21:5c:89:66:27:f9:a7:a5:af:9c:57:e4:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:DB:3F:FC:B3:2D:30:63:6C:2B:2D:1A:36:07:AB:54:E3:EF:F0
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:33:d2:5b:a4:f8:a9:74:41:87:c6:74:45:5b:3f:7e:a8:5e:
5a:92:0a:6d:33:1c:44:ef:fa:1a:57:0b:f0:c5:cf:02:a6:0e:
44:24:dd:87:2e:8d:8c:97:77:01:32:70:e2:90:00:95:4b:4b:
fa:2e:18:c2:f3:9d:a9:61:4f:c3:f1:d6:f3:0d:3f:6b:22:09:
f2:12:5e:76:3a:d5:84:f8:3c:76:37:01:7f:53:37:e1:84:1e:
3a:1d:2d:16:b6:b9:5b:5a:bd:09:ab:bf:5d:9c:4d:e6:12:88:
13:26:68:d8:cd:a6:fa:75:88:c4:3b:2e:01:c2:14:ce:2d:0b:
3a:31:ea:4f:88:45:40:cf:3c:91:b7:41:37:b0:e5:22:f3:04:
fc:3a:10:b0:72:0c:fb:8d:5b:eb:80:be:cb:f6:72:a6:d7:fa:
74:63:32:7a:7f:e8:48:82:86:e4:8f:77:be:e5:87:81:af:7a:
c7:ea:0b:4b:a0:f5:fb:bc:af:71:05:5c:2a:4b:ba:52:eb:5a:
54:36:35:c3:0b:20:a2:ff:77:af:c8:79:46:33:7c:23:82:24:
72:98:da:60:0c:4f:63:1b:ce:19:3b:fc:31:df:0d:df:34:1c:
97:8c:24:4a:e9:79:dd:4a:8a:f9:f8:c5:7c:0a:8e:85:64:b8:
05:2b:f8:dd
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUOXCm/RIGvYxVREYAoVKbUWo31vIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTAyNDExNTMxMloX
DTI2MTAyNTEyMTkxMlowMzExMC8GA1UEAxMoREI3RERCM0ZGQ0IzMkQzMDYzNkMy
QjJEMUEzNjA3QUI1NEUzRUZGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALa4rthtqrIWH6YlFZUoitp8LleaWrIFLrDhbohdMK93YAnFGibPX2+9eiDm
KsPIaG3FglRP8AHKW8Tg/zLnqvCUUmDU2BsxasiShXVI7IoyuX2/CH4I6U65+QWn
dhPWQ2U5Tk2OzXdtAGoL6zO/0FuigngB9E7qk7cOrmCHVvAIDf4udZ/L6loKwba7
HmCcHFJGsCf8N/mSEb2bpabhyhIbltFFd80+zj7+xznHBxcUSluck019kYgITRZq
fkwhd/uOowdaJggqpeAB9CHqDlq4WN5AUetbnT2eaDrASyiHAPTF58O6LYghmUhv
SLKbjganIVyJZif5p6WvnFfkFrECAwEAAaOCAfUwggHxMB0GA1UdDgQWBBTbfds/
/LMtMGNsKy0aNgerVOPv8DAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5
QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADQz0luk+Kl0QYfGdEVbP36oXlqSCm0zHETv
+hpXC/DFzwKmDkQk3YcujYyXdwEycOKQAJVLS/ouGMLznalhT8Px1vMNP2siCfIS
XnY61YT4PHY3AX9TN+GEHjodLRa2uVtavQmrv12cTeYSiBMmaNjNpvp1iMQ7LgHC
FM4tCzox6k+IRUDPPJG3QTew5SLzBPw6ELByDPuNW+uAvsv2cqbX+nRjMnp/6EiC
huSPd77lh4GvesfqC0ug9fu8r3EFXCpLulLrWlQ2NcMLIKL/d6/IeUYzfCOCJHKY
2mAMT2Mbzhk7/DHfDd80HJeMJErped1Kivn4xXwKjoVkuAUr+N0=
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:11:27 2026 by rpki-client