Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          2x1sMfaWVN2VsnjdnyxDd8n0vI1tuxowJaJ68IbvGLI=
Subject key identifier:   D1:FD:A4:92:A1:EF:9E:48:41:B4:3E:6B:54:FB:CB:9D:BF:1C:CC:33
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       7D3833A3936ABB9033A849EC987AA49855235ED4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          08C2
Signing time:             Wed 22 Oct 2025 06:54:09 +0000
Manifest this update:     Wed 22 Oct 2025 06:49:09 +0000
Manifest next update:     Thu 23 Oct 2025 09:30:09 +0000
Files and hashes:         1: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          2: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          3: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          4: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          5: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          6: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          7: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          8: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          9: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          10: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          11: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          12: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          13: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          14: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          15: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          16: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          17: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          18: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          19: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          20: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          21: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          22: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          23: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          24: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: zVqkuGwzrZ8qBu7vvxSAm2NOBRCJanxe6fRyIrr2VW4=)
                          25: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          26: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          27: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          28: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          29: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
                          30: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          31: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          32: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          33: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 09:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:38:33:a3:93:6a:bb:90:33:a8:49:ec:98:7a:a4:98:55:23:5e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Oct 22 06:49:09 2025 GMT
            Not After : Oct 23 09:30:09 2025 GMT
        Subject: CN=D1FDA492A1EF9E4841B43E6B54FBCB9DBF1CCC33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a1:0b:38:b8:f2:8e:1c:7d:ae:97:15:07:be:
                    3a:73:f7:6e:32:bf:eb:7d:a8:73:cb:c7:41:54:79:
                    e3:68:05:e9:91:ea:f7:11:6f:b9:c9:c6:aa:f5:a7:
                    46:73:92:aa:37:d9:63:e6:29:3f:19:5a:c4:80:e8:
                    f2:cd:2b:92:89:92:29:a5:c6:a8:0c:9d:ce:fd:b3:
                    67:87:75:bd:38:e0:95:ed:99:71:a6:b4:6c:6e:05:
                    b6:7b:f4:7a:59:5f:ee:55:7e:7b:8f:a5:fa:f9:36:
                    46:68:e7:27:24:fa:a6:71:81:7d:97:48:7c:da:13:
                    2d:27:2e:7d:57:e6:60:aa:b4:a3:c2:59:e8:b7:5a:
                    0c:e9:0d:25:b0:18:f9:8d:96:47:31:f7:ee:c8:04:
                    1d:fa:69:33:bc:e4:f5:4e:04:62:9d:03:1b:16:c6:
                    f5:55:4c:cb:b3:68:4b:4a:0e:34:17:3b:75:65:ed:
                    b4:e9:02:b8:86:fa:17:f8:9d:6f:37:a2:c5:28:d7:
                    f2:37:e0:10:fa:77:b5:ae:98:8b:30:23:1f:4d:3c:
                    5e:81:ab:75:16:cf:97:ab:5e:19:26:a7:be:38:7b:
                    20:6f:7a:28:a9:8b:3a:93:74:9a:f6:c5:e8:89:98:
                    d5:80:e9:f7:41:a4:0d:c9:f8:53:6e:d1:8f:76:b1:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:A4:92:A1:EF:9E:48:41:B4:3E:6B:54:FB:CB:9D:BF:1C:CC:33
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:5a:13:9b:29:f5:31:af:c8:f9:03:e6:2c:49:aa:f7:a7:
         b2:f1:8e:e5:76:00:59:00:e3:ab:7c:50:d3:db:e4:1b:7e:8d:
         5b:d3:9d:a7:51:62:1c:db:eb:7b:6d:ff:72:65:c1:6e:97:0d:
         15:f9:ca:5d:62:04:fd:23:ea:2d:77:e9:44:a4:85:24:9c:c5:
         e6:56:31:c3:0b:4b:64:b7:75:64:b1:3b:c9:a2:f7:c1:fd:07:
         f5:84:2d:9f:1b:c0:5d:c2:54:65:f4:a1:dc:6e:ee:63:8d:3c:
         f7:7c:9c:94:7a:c4:3e:51:21:8e:7c:60:f6:50:e5:4e:47:2a:
         69:6c:86:35:e2:a4:8a:0a:52:32:23:7c:92:e1:cb:6c:cd:92:
         30:1c:66:1c:5b:56:dd:20:3e:83:0f:4b:66:63:1a:73:14:78:
         a0:62:a7:9e:9a:80:42:5a:53:22:85:33:f4:77:1a:0c:0a:84:
         21:c3:02:b2:20:3f:a7:f1:2b:42:5a:be:d5:a4:f6:c9:56:b2:
         9c:58:f6:d4:f2:b7:71:0a:8e:4e:6b:98:c2:bc:af:2e:b7:be:
         67:a8:26:3a:7d:ed:55:ee:c5:44:8d:1c:13:68:f5:89:be:6b:
         a5:1e:7b:4f:e5:82:fc:ea:b8:d4:bf:56:04:db:51:7e:ee:6a:
         78:7e:49:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:38:25 2025 by rpki-client