Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          5n2d1OdjJeXIjusrlrKDqIHE/zqXW6flMqBiMaEuwr0=
Subject key identifier:   21:D7:7D:33:10:CC:34:72:E2:E2:73:C0:7A:22:09:4A:8E:D8:D7:AD
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       7A6046414A6F3EB79C14E7D719CF9FC61DD41FC2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          09A8
Signing time:             Wed 21 Oct 2026 11:56:19 +0000
Manifest this update:     Wed 21 Oct 2026 11:51:19 +0000
Manifest next update:     Thu 22 Oct 2026 13:20:19 +0000
Files and hashes:         1: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: SiklUH8GdJ8IYvIUhDjWPNxzDl1jSemlOXQO4OndjVo=)
                          2: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: 4qQnAPXKif2G/I0JA283MM4L9Q8rof5sciOf//i7b1s=)
                          3: 323430303a646463303a3a2f33322d3438203d3e2033323538.roa (hash: 4E3ThF6GTDq7/R91I4OEDX6P+idmNZ1KCeaEcnKCIpQ=)
                          4: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: MvlLrq6gLMJe2G3r0uV9gBw2cGFbvjLpy5rdncNhO5I=)
                          5: 323430303a646463303a3a2f33322d3438203d3e2039333132.roa (hash: Gush9eZ5nXorTMTp44vClvkla5aeqj+UTuTCzb4xYBE=)
                          6: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: 5+W2+C0XBaCoMdQ1cbjP/+L4LLlb/ynRpMohTzrw8i8=)
                          7: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: NNgs7Qj/K1RwEFdi1CD3X6dwzWWCWJxpEUKTHMVH0RY=)
                          8: 323430303a646463303a3a2f33322d3438203d3e2033323134.roa (hash: iF81fh0nkcHacuOngDqpoGMd+NnmehDpnN8nIKYnQiA=)
                          9: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: 6P1yhAIkuvKeVZw9mLlmlyrJjE7qXAqdF8WvsA0QH44=)
                          10: 323430303a646463303a3a2f33322d3438203d3e2036323333.roa (hash: rcwvBG6d4VkXYeNz3ZFKFoYlMqXBATYi6Rux3uhsxLI=)
                          11: 323430303a646463303a3a2f33322d3438203d3e2038383838.roa (hash: lb3WldXwA8KIOpbofBzHuERWcTb6J80msb0s9S8gwW4=)
                          12: 323430303a646463303a3a2f33322d3438203d3e20393439.roa (hash: 4OtJQcFR6NrA1itHOZWJi2PIlbIiljflEMW5I2p5dLw=)
                          13: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: NtTgWNNqo9xb1WxCUUjnYotypA5kDlI/tbH3rkCuP94=)
                          14: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: q7lm7fRGsyGq+yxTUC01R20XQNn3RMquJ9rR4va+WZU=)
                          15: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: aISwkB7KlKbFmJUCF1qplmk+ExtBPa84cTUmmJRJwdc=)
                          16: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: N1dpLAAO6BjCXH3ji7qAyuWtFA+wPx8FRgvMm35/LT4=)
                          17: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
                          18: 3130332e31392e302e302f32322d3234203d3e2033323538.roa (hash: 7phVEmX0NGZNTERU01hd3o38S5hH/ZGyooQwdvUsQ1Y=)
                          19: 3230332e39362e3233362e302f32322d3234203d3e2038383838.roa (hash: llvx1nJPqemZ0rvO4OJjQbyJXb71XdenxrhQ2TIzXXs=)
                          20: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: HWxtjWXQEyaifgnrGAK0g8Hjo7f2prGIP4a2wkIeP6Y=)
                          21: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: d+Pz4jRmTTErQX+CPnlwRWSDDev9izIOertdi7129AU=)
                          22: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: TWBVV2sKr5vAgVL7H9CHKRLzXENcDmDChBjFID4ClWA=)
                          23: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: fDeivdagLvt1dPzcb/kNjCXi5XZociKTgTKCkMYQPKg=)
                          24: 3230332e39362e3233362e302f32322d3234203d3e2033323538.roa (hash: JMaRsQ48zGb4xncBKzQEEQ2heSEKed6SCwNzvViFnYI=)
                          25: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: Cq8ngB5duqsfS9AX8X6w2CDvQnVmYwX2AAqXbyczTxg=)
                          26: 323430303a646463303a3a2f33322d3438203d3e2033323034.roa (hash: M9xY05OIup8OYfBbbUfbrPA0odquxrpBvAkKyxFcCbM=)
                          27: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: Od69baMDBTs29fP66Wn9kV1Tx+1JmwSrwUn4HcRUyvo=)
                          28: 3130332e31392e302e302f32322d3234203d3e2038383838.roa (hash: OdkPxJ/egLNYvt3ZKZFs00x32CRh57zZD7kdTb64n48=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 13:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:60:46:41:4a:6f:3e:b7:9c:14:e7:d7:19:cf:9f:c6:1d:d4:1f:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Oct 21 11:51:19 2026 GMT
            Not After : Oct 22 13:20:19 2026 GMT
        Subject: CN=21D77D3310CC3472E2E273C07A22094A8ED8D7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:09:a5:47:d9:0c:e4:86:83:8c:f8:4a:70:
                    a2:b4:af:eb:70:ff:26:4e:0d:2c:7a:79:66:79:f5:
                    8e:ad:49:69:22:97:dd:be:0f:28:32:0b:10:ab:d5:
                    1e:2a:b3:c6:da:4c:24:4f:c5:17:24:49:59:38:d3:
                    40:aa:3f:4e:54:f9:9f:79:86:13:ce:8c:21:fc:44:
                    d1:b1:06:fc:e7:d0:cf:cb:67:f3:4b:84:e0:80:d3:
                    48:6f:d9:8d:44:76:af:02:f2:8c:94:ea:fe:0d:6a:
                    3f:c0:ff:17:4a:3a:5d:c2:e8:22:16:21:87:0d:8b:
                    c2:ce:fb:f3:58:a0:41:ba:c0:ae:d1:f3:f9:7e:15:
                    16:7f:f5:18:5d:ec:13:f8:6c:64:4c:cd:40:62:a3:
                    7d:92:d0:dc:40:9c:43:8b:f2:36:16:10:5a:13:f5:
                    a1:95:75:de:77:ed:dd:12:f1:67:16:b9:32:47:ee:
                    ab:cf:f9:56:64:3a:b6:08:9f:68:41:54:82:a2:4e:
                    48:6a:69:40:6f:57:17:a2:75:5c:30:b4:b9:0e:06:
                    20:c9:a8:89:f8:96:6d:4e:36:0d:9d:a6:ff:df:d3:
                    df:db:54:82:74:90:c5:57:c7:13:42:dd:9e:8e:70:
                    19:36:c7:0c:5e:25:fc:3e:a0:b3:6b:67:b2:df:a0:
                    88:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:7D:33:10:CC:34:72:E2:E2:73:C0:7A:22:09:4A:8E:D8:D7:AD
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:b8:a1:e0:47:86:1a:da:2c:35:a6:6a:fd:1b:60:0d:ed:
         88:60:f0:20:94:09:46:71:42:56:98:00:9d:b2:e2:5a:dd:7e:
         36:31:48:57:a2:c0:6b:fb:81:80:79:6d:8d:1f:9c:59:be:d3:
         1a:fd:82:79:49:e6:49:98:f3:fb:ce:bb:54:cf:0b:07:d4:e0:
         7f:f1:e6:28:42:f2:3f:c6:08:17:c6:bd:36:a6:5e:65:c6:1a:
         c3:23:20:49:02:77:e7:38:1b:60:9f:b6:9f:b6:91:51:87:25:
         63:09:7c:f5:8d:6d:d0:a1:23:fc:65:de:fa:fc:d8:a2:b7:f7:
         3c:4c:96:1c:70:ab:a2:56:2c:27:0c:a7:f1:a1:fe:2d:6d:a6:
         f7:3d:58:72:9e:79:17:e4:05:a5:27:39:95:b5:31:87:7a:e4:
         ac:2b:36:28:2e:5c:79:8c:d2:9c:bb:0b:ce:3f:34:18:69:99:
         39:01:fd:d1:38:c8:07:dc:b2:44:8f:87:55:c7:98:19:5d:23:
         35:d2:06:8a:31:96:dc:8f:f2:22:d5:53:45:96:81:9a:49:54:
         c6:16:88:31:e0:d7:a8:88:e5:83:1f:f7:dc:e3:63:ea:ca:82:
         d5:71:16:b2:98:89:a6:0a:53:c9:0b:09:e9:4d:c6:5c:04:7f:
         ed:fb:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:47:43 2026 by rpki-client