Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          UfTB6LYO9gLjar9SRqJkhYAfybNOwKrNHqmbanjeR90=
Subject key identifier:   8B:73:62:11:B3:1C:8C:3B:BE:97:36:FC:91:11:CC:0F:04:46:10:83
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       249286E1D6019E1090E7651BD76F886DD1092416
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0882
Signing time:             Fri 05 Sep 2025 13:37:15 +0000
Manifest this update:     Fri 05 Sep 2025 13:32:15 +0000
Manifest next update:     Sat 06 Sep 2025 16:50:15 +0000
Files and hashes:         1: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: 63rTonaVr/scpYy2rERfe9anPcLVhlO8Qst1xKm5Xmo=)
                          2: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: Tvmdq44TGUk5GAEmehxpSHPI/PL+I5mlyW0a+CL7Ds8=)
                          3: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          4: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: kGnGjS6kWgTYXKB6JTx1b/ps2bSkO1gKN6mbcgXMCe4=)
                          5: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          6: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: uAR+aUItgXIl8LltOABhOV67sr0o2kSaUnBThmT0md8=)
                          7: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          8: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          9: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
                          10: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: tJzCsiLRF3gx4bs/Xlurd8tg809FpXlCHVF3LaDIDdM=)
                          11: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          12: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          13: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          14: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: z7sljr/r0tl8AJydOdsXNGClKOaBVKEWsioGJdq0WY0=)
                          15: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          16: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          17: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          18: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          19: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: 6o3ZD17xcSHOqLQcxJQZ/FkTeLCfTWGUrjvEoGrfscY=)
                          20: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=)
                          21: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          22: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          23: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: biqX1t4wQwDcI1EexfM2k6vwEbS3VI8497KeZaQTCOY=)
                          24: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          25: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: JbbzXkm0bYOxia+UVe/zvP/yVeDEIdLni7wkedOprT8=)
                          26: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: +KuRbJFQY5aGW3Vwbixsb+VwelcXB/flpjtQo5u2GAE=)
                          27: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: zSYMIZktDyLCvLLd01Jm5t54+z5BD4tf3RZzEv5Z+0I=)
                          28: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          29: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          30: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          31: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=)
                          32: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          33: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: dn6w8m+Idjhzk+2N3vzHUhGna7wbOr80X096SkTL/iM=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Sep 2025 16:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:92:86:e1:d6:01:9e:10:90:e7:65:1b:d7:6f:88:6d:d1:09:24:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Sep  5 13:32:15 2025 GMT
            Not After : Sep  6 16:50:15 2025 GMT
        Subject: CN=8B736211B31C8C3BBE9736FC9111CC0F04461083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6c:8b:ff:ba:96:14:34:90:c5:42:72:49:92:
                    ac:72:ec:58:88:d1:70:5d:d1:da:ce:5e:dc:e1:1f:
                    be:ad:d0:29:9e:54:d3:4c:2a:0c:79:94:f7:73:99:
                    08:81:d1:84:73:ec:c6:d4:da:37:4e:09:19:30:3c:
                    e9:73:4f:ff:0d:14:1a:db:6a:87:31:b6:5b:3b:a2:
                    2d:41:bf:3c:42:37:b3:77:bc:69:d3:c2:5c:a7:41:
                    bf:1d:88:d4:7b:1a:16:e9:88:80:0c:38:c4:7c:95:
                    ad:b8:83:14:c6:03:d1:89:bf:34:dd:67:e3:43:ae:
                    07:92:ca:f9:4b:d6:5c:9e:41:78:4d:59:36:17:c2:
                    2d:24:77:57:de:49:8f:27:4b:7f:39:fd:01:ae:d0:
                    61:8a:ee:b0:7e:67:62:9a:2c:10:0c:67:78:da:7e:
                    1e:19:4b:91:38:7e:cd:f0:b8:ba:94:90:60:5e:57:
                    f7:9c:11:9b:ec:ee:ca:67:b0:bd:29:f0:21:4c:f1:
                    52:85:0b:cd:46:3c:41:8a:5e:da:c5:b7:d1:fd:0a:
                    0b:bd:f5:a3:b9:4a:5d:59:55:0d:4d:01:04:e9:ed:
                    fb:cc:7b:e8:a5:4f:82:fa:99:37:4d:a0:08:26:b5:
                    9d:95:c0:79:47:d1:f6:c1:4c:ff:a8:29:5d:d9:e3:
                    99:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:73:62:11:B3:1C:8C:3B:BE:97:36:FC:91:11:CC:0F:04:46:10:83
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:92:5a:53:05:fe:d5:f1:a7:d6:37:7a:84:45:a9:0c:b7:ef:
         6a:a0:1e:03:7d:10:c2:f6:97:8b:7d:d1:de:12:98:0f:3d:d5:
         a3:94:1f:1e:a1:f7:b6:af:25:0f:c8:bd:58:b5:70:03:ec:ac:
         ae:a8:08:d1:b1:35:65:a4:f5:03:96:86:81:db:73:d3:0a:b3:
         0a:c4:c3:99:4d:82:ea:ab:4a:77:83:6b:97:e3:33:f0:91:d4:
         7b:c8:b7:95:28:a0:d7:55:8c:45:c3:bd:77:a5:93:00:71:de:
         18:66:50:85:cd:aa:c7:a1:11:6c:ef:e3:a1:e2:ed:3e:af:89:
         bd:c6:29:69:74:04:38:a9:d1:22:33:a8:dd:53:65:b7:49:08:
         2a:3d:42:48:14:45:e5:2a:d0:21:db:b0:e3:6f:f9:cb:6a:bf:
         2e:0d:6b:bf:ad:fc:0c:78:42:19:be:fd:67:14:62:6d:78:fe:
         a4:14:bc:78:74:70:b4:c7:c5:62:ca:c1:db:83:e0:34:a9:d9:
         af:d7:60:f8:c7:a6:6d:59:9e:60:8d:63:92:8c:0f:b1:6d:0d:
         0a:fc:06:d2:17:f4:32:45:fd:80:f1:6c:8b:01:c0:12:8b:19:
         a7:b8:46:bd:0d:28:8c:5e:d4:3b:7e:bc:ce:19:9e:ad:8d:7a:
         5e:74:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:01:50 2025 by rpki-client