
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: MOQCIi0zrQjIycntxHPHaMHnujKj9PwlL34tfDde3Ug=
Subject key identifier: 65:02:97:33:A2:EF:B4:F2:70:0A:46:F5:01:7B:AF:76:63:0E:5B:5C
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 699060FF95EC31FE9D2EA7FE65DDB77D71DB9C96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 0AAB
Signing time: Fri 04 Sep 2026 19:44:58 +0000
Manifest this update: Fri 04 Sep 2026 19:39:58 +0000
Manifest next update: Sat 05 Sep 2026 22:32:58 +0000
Files and hashes: 1: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
2: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
3: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
4: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
5: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
6: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
7: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
8: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
9: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
10: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
11: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
12: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
13: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
14: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
15: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
16: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: ZmG7XUnCT+QMTP7lDUcFS4Vxy6vjijQbbE5cfeCYN40=)
17: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
18: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
19: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
20: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
21: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
22: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
23: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
24: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
25: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
26: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
27: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
28: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
29: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
30: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
31: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
32: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
33: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
34: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
35: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
36: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
37: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
38: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
39: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
40: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
41: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
42: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
43: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
44: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
45: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Sep 2026 22:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:90:60:ff:95:ec:31:fe:9d:2e:a7:fe:65:dd:b7:7d:71:db:9c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Sep 4 19:39:58 2026 GMT
Not After : Sep 5 22:32:58 2026 GMT
Subject: CN=65029733A2EFB4F2700A46F5017BAF76630E5B5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:97:e1:67:e9:80:55:56:86:fa:14:f6:e0:
b8:74:83:d7:ee:91:38:5d:79:31:c9:de:6f:8c:08:
a8:77:f7:81:60:cf:6c:4a:4e:ae:78:bb:44:30:76:
c2:4b:eb:78:8e:49:f3:e9:86:fc:e4:01:1e:c3:2c:
70:c6:51:fa:ec:55:98:3f:46:a2:e7:5d:26:e9:94:
06:7b:81:78:0a:24:d0:4b:48:ce:80:02:10:46:76:
f5:1f:3a:36:48:30:61:aa:d4:32:52:6a:dd:c2:96:
3c:6a:5a:65:73:3f:7b:c6:74:d2:df:82:bf:00:ec:
f0:15:2b:29:fd:40:d6:9a:13:ce:95:38:5a:08:a4:
5f:b2:69:08:db:d6:b2:50:8d:ea:ae:03:13:27:49:
90:af:ce:66:d1:e1:29:fe:d9:8c:db:b7:0e:4a:e9:
a3:26:84:c7:25:5e:ba:a3:87:5a:39:46:02:7a:8a:
ec:ce:6a:e7:b8:4e:1b:3e:13:75:72:d4:57:47:ea:
fb:15:a4:72:b3:b1:92:92:a6:7e:2e:bd:47:80:44:
3e:11:23:f0:83:84:5f:b4:13:e9:29:e1:ba:c8:32:
77:aa:87:69:56:5e:4c:9e:80:ba:e4:eb:77:a0:54:
57:c1:07:0a:15:ee:79:91:31:44:85:3e:ce:64:d9:
fb:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:02:97:33:A2:EF:B4:F2:70:0A:46:F5:01:7B:AF:76:63:0E:5B:5C
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a1:cc:26:30:68:f2:79:77:7a:90:b3:66:e6:7c:ef:c6:32:
5b:af:9e:e9:82:4e:cd:6c:1c:b8:56:79:a5:c6:71:cf:d1:53:
86:16:bd:f2:82:f6:22:50:d9:36:7c:c9:dc:29:47:ac:06:95:
e9:1c:08:42:65:f2:8e:12:19:50:40:ec:f7:2e:5b:cc:3c:61:
d5:06:af:4b:1b:20:ed:89:3e:f9:2f:d3:0a:8e:6f:15:e5:0e:
7c:63:37:42:7a:c9:22:a1:09:81:d3:10:f6:8a:e1:5d:66:46:
3c:df:c4:b6:73:44:dd:d6:81:20:c4:55:20:2a:38:20:1c:a0:
52:bd:1b:25:3e:02:c2:12:4e:34:0a:ab:3d:12:11:ec:58:0b:
13:d0:fb:62:fa:36:48:20:6c:6d:f4:07:7f:6e:d7:fe:3a:7b:
aa:fb:5f:2a:bc:c9:25:c3:f8:5e:36:06:6d:90:cd:a6:48:9a:
77:68:ba:3d:dc:db:23:f1:05:d0:c8:5b:e9:33:d5:3e:d5:8d:
5b:2d:8d:2b:2f:28:c0:09:66:22:d9:9b:f1:18:72:07:71:62:
3f:99:0c:5d:46:53:91:96:33:fb:ef:62:fd:d3:dc:f9:91:70:
97:5d:43:fb:25:61:1d:54:00:b9:07:52:55:7d:3b:8d:ca:7d:
29:39:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:18 2026 by rpki-client