Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          hD/S+AtQhIXAXRG5HBr312PRunNQ51fdYmVuo9Mglbc=
Subject key identifier:   C1:1C:9C:3F:BF:5D:C7:D8:E8:97:1B:FA:F4:67:25:45:11:61:08:92
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       300F24C0582683255696943E632186C6EB24C7BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0A6D
Signing time:             Tue 21 Jul 2026 19:04:57 +0000
Manifest this update:     Tue 21 Jul 2026 18:59:57 +0000
Manifest next update:     Wed 22 Jul 2026 20:14:57 +0000
Files and hashes:         1: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
                          2: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
                          3: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: Llj+03VjLfYvyo3/mZMS4VkVIFeTIVltGLuL2EJ+lgY=)
                          4: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
                          5: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
                          6: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
                          7: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
                          8: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
                          9: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
                          10: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
                          11: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
                          12: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
                          13: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
                          14: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
                          15: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
                          16: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
                          17: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: MbjMEnkehPoT06ecVuwuD+KIWL4rGGQghMYFOGne3Vc=)
                          18: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: +iBxIryo2qJ39x7faeZ6bGbllS5VeR410SIHzxsC5hY=)
                          19: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
                          20: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
                          21: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
                          22: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
                          23: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
                          24: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
                          25: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
                          26: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
                          27: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
                          28: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
                          29: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
                          30: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
                          31: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
                          32: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
                          33: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
                          34: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
                          35: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
                          36: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
                          37: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
                          38: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
                          39: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
                          40: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
                          41: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
                          42: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
                          43: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
                          44: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
                          45: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 20:14:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0f:24:c0:58:26:83:25:56:96:94:3e:63:21:86:c6:eb:24:c7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Jul 21 18:59:57 2026 GMT
            Not After : Jul 22 20:14:57 2026 GMT
        Subject: CN=C11C9C3FBF5DC7D8E8971BFAF467254511610892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:95:11:18:76:d1:43:5d:a7:82:9b:c7:fc:
                    6b:7b:7f:78:3e:2e:fb:ab:09:a2:46:fb:e4:d7:27:
                    02:bc:ed:4f:bc:1b:56:3a:7a:0f:4d:9d:e1:1a:f6:
                    af:1b:f9:13:21:e9:39:e5:95:88:34:6c:83:72:65:
                    d1:d0:8e:bc:03:52:e7:7b:b2:5e:73:dd:a4:d3:08:
                    60:40:76:a7:ef:e1:1e:c8:e1:ea:0d:d3:64:f0:37:
                    99:70:d1:e1:8c:20:35:68:b9:ef:a0:03:4a:9b:58:
                    5c:dc:37:3f:3b:09:34:9a:5c:57:46:f9:42:f2:71:
                    9a:7b:38:61:99:5f:4f:a4:2a:8b:00:2d:7c:b8:8e:
                    c5:16:9a:cf:76:55:ac:1c:eb:89:10:13:ac:e9:ba:
                    18:21:aa:e3:ae:43:37:fc:73:5c:f6:b5:43:6c:22:
                    e4:74:b1:fa:fb:05:6d:90:09:13:ea:54:51:fb:4b:
                    59:64:c5:6f:98:60:2e:47:db:03:bd:91:05:23:41:
                    66:71:9c:5c:44:52:b5:0a:43:3a:51:01:99:f4:1f:
                    f8:c6:38:b9:fe:40:9a:77:08:a8:77:00:ca:51:52:
                    0a:eb:9d:a7:f0:98:bc:31:d4:3f:51:4c:57:38:66:
                    1d:7b:39:fd:4c:90:69:3a:3e:bf:81:c6:f3:48:8a:
                    fd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1C:9C:3F:BF:5D:C7:D8:E8:97:1B:FA:F4:67:25:45:11:61:08:92
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:ad:2e:60:f1:52:bb:ab:ff:82:23:a6:62:ed:a9:6b:42:
         fb:9f:47:c3:51:43:36:93:af:e7:f5:9c:26:02:fc:94:82:c3:
         1b:8a:1b:14:e5:69:f5:37:02:7c:8a:37:0f:9a:a7:74:24:fe:
         52:91:c6:cd:77:f0:06:e9:bc:9a:90:c9:69:d7:4e:bd:52:38:
         32:c2:2b:54:bb:bd:53:2b:22:c9:6d:99:a9:96:5c:41:17:e5:
         12:79:e1:ee:69:80:54:8c:61:02:8e:65:a1:6d:d3:0e:10:65:
         c0:90:8d:8d:19:f4:aa:2b:7c:29:8c:31:81:0f:3f:06:f5:f9:
         ce:8d:8c:4f:e8:f7:78:dc:96:e7:19:88:5a:be:8b:a1:f4:48:
         ef:f8:3f:b2:81:32:a4:51:ff:2b:33:36:b8:b8:80:a3:2e:53:
         e7:aa:aa:e8:d6:20:73:15:1e:5c:c1:4c:5e:ca:68:aa:af:6d:
         36:4d:cb:49:80:a0:3a:47:f6:72:ce:bf:8f:fc:5b:de:23:b2:
         ba:ad:41:7c:be:5a:61:44:9c:3f:70:c5:bd:19:f3:6a:cb:42:
         8f:d6:78:9b:af:7d:f1:c7:b0:29:42:62:d6:1a:cc:62:2d:a5:
         fe:b9:ce:15:69:d1:72:54:78:e3:3b:54:77:29:9d:23:48:18:
         57:ab:f8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:20:25 2026 by rpki-client