
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: qslP1XMzKqN5EzUFe9RCwMcLC4lVS3N0VWcVephjpmg=
Subject key identifier: 2E:A1:90:03:6F:8D:63:08:B5:50:82:36:CA:C1:9A:5D:E9:C8:0C:EA
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 5CFC7A0BFB2A0CA850561A821FE7CFA3EE45DC16
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 0A16
Signing time: Fri 05 Jun 2026 23:38:59 +0000
Manifest this update: Fri 05 Jun 2026 23:33:59 +0000
Manifest next update: Sun 07 Jun 2026 01:43:59 +0000
Files and hashes: 1: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
2: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
3: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
4: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
5: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
6: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
7: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
8: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
9: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
10: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
11: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
12: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
13: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
14: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
15: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
16: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
17: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
18: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
19: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
20: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
21: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
22: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
23: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
24: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
25: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
26: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
27: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
28: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
29: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
30: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
31: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
32: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
33: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
34: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
35: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
36: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: JUKj67LromSVWdPJ0/5Rb12Lih9Rcw5zD+oDfDefFCE=)
37: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
38: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 07 Jun 2026 01:43:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:fc:7a:0b:fb:2a:0c:a8:50:56:1a:82:1f:e7:cf:a3:ee:45:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Jun 5 23:33:59 2026 GMT
Not After : Jun 7 01:43:59 2026 GMT
Subject: CN=2EA190036F8D6308B5508236CAC19A5DE9C80CEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fc:7c:02:e1:dc:5d:53:cf:27:e5:0d:b4:9f:
55:66:eb:7a:f2:c7:c1:5e:15:03:a2:6b:3e:9d:61:
ed:f2:19:a6:dd:29:e0:58:56:9a:02:d5:7c:a2:70:
45:ba:7d:f2:86:c2:ff:43:0f:06:8e:78:0f:e5:96:
e6:ff:b3:72:05:37:e3:c1:e5:ff:35:0f:e9:df:f4:
54:fd:af:c0:a3:05:59:f8:7d:c5:77:2f:e4:8a:21:
84:ef:47:5d:8d:ac:82:c8:f8:e6:87:aa:04:34:0b:
50:df:84:21:a5:25:1d:f1:80:e6:9e:fe:f6:1d:42:
32:e0:d7:71:25:b3:03:fc:3e:f7:c6:b1:97:13:78:
f4:60:bc:32:ae:6d:43:5d:ce:f9:af:4c:c5:5c:46:
57:7f:0b:6a:8d:56:ed:7b:57:61:d2:8d:56:a1:27:
a4:1c:f8:d1:d1:15:97:84:3f:50:f7:6e:2b:78:6b:
48:df:cc:2f:1f:a2:7a:fd:8a:c0:2b:ae:5a:c7:f2:
d8:c8:41:ec:6a:bc:bd:0b:45:05:9c:3b:e7:8a:00:
11:fc:66:7f:2f:3a:a6:e7:43:23:76:a7:55:d3:5a:
49:7e:9e:ff:bc:89:1e:60:3f:94:2a:1b:60:89:b2:
7b:f2:bd:12:8a:09:4d:ce:45:52:f9:bf:fb:83:cf:
c3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:90:03:6F:8D:63:08:B5:50:82:36:CA:C1:9A:5D:E9:C8:0C:EA
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6a:91:47:74:61:33:d0:8a:eb:ef:4c:89:df:c2:d5:d5:5d:
93:58:9d:37:14:d2:1c:95:32:4b:45:db:ec:83:42:39:6e:be:
cf:9a:eb:ab:7c:a8:a8:b2:04:a4:7a:1d:a0:b0:b4:5a:f9:15:
e9:ef:01:a8:7f:4b:2f:e6:1f:9a:39:a5:1e:6f:8c:bd:c4:ce:
6f:e0:95:b8:83:64:83:84:8b:e5:73:0c:b8:81:82:e1:24:5b:
25:4b:95:85:b7:8d:e5:3c:13:4b:7a:ca:b6:7a:98:33:c7:84:
b5:26:72:ea:1d:a9:ec:25:42:23:d6:fb:ef:7a:d8:72:e3:15:
a1:33:5f:36:3b:0b:d3:b9:2f:b3:fb:41:b5:62:fd:39:b7:e9:
0e:9b:f1:d9:16:1c:8c:fb:72:06:2b:7a:bd:4c:d7:39:61:cc:
fb:c9:e6:ca:c7:37:ff:31:08:1f:6d:5a:81:d9:d7:b1:1c:d5:
5e:be:83:ef:5e:2f:af:74:59:49:c8:da:aa:b5:3f:bb:e3:c2:
00:22:4f:44:b8:2b:e2:1d:c5:09:d3:eb:a7:69:96:c8:6a:7f:
4c:57:5e:02:31:e9:35:fe:a9:2d:80:16:c1:92:c1:89:2d:d5:
43:08:ef:27:e6:07:f8:ac:5a:6f:15:c6:27:a7:2c:1f:56:74:
e8:2f:d6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:57:04 2026 by rpki-client