Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          WLKfyMLJWHuL/F5aO0YoiJQkIWjvzbxxaD7KveTzx8g=
Subject key identifier:   75:F8:35:AF:3E:99:A4:48:80:28:92:63:3A:EA:60:7A:96:0F:EF:D5
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       3391065E492E0C19F961A3D6872A9AF450C69FB8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          077B
Signing time:             Wed 22 Oct 2025 07:19:09 +0000
Manifest this update:     Wed 22 Oct 2025 07:14:09 +0000
Manifest next update:     Thu 23 Oct 2025 07:49:09 +0000
Files and hashes:         1: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
                          2: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: 1exg5W4hJjRDay0bkAbkuU4JRNikKlIBBHt669DQJbc=)
                          3: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
                          4: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
                          5: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
                          6: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
                          7: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
                          8: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
                          9: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
                          10: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=)
                          11: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
                          12: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
                          13: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
                          14: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
                          15: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=)
                          16: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
                          17: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Oct 2025 07:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:91:06:5e:49:2e:0c:19:f9:61:a3:d6:87:2a:9a:f4:50:c6:9f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Oct 22 07:14:09 2025 GMT
            Not After : Oct 23 07:49:09 2025 GMT
        Subject: CN=75F835AF3E99A448802892633AEA607A960FEFD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:be:4c:66:ce:53:17:52:83:b7:8c:fc:d7:
                    36:0a:99:c1:2a:d9:b7:35:c6:35:f0:22:2d:fc:4d:
                    9a:b8:24:05:18:ca:5c:48:29:33:98:ea:cf:f0:a0:
                    af:e8:1f:5b:ad:93:14:2f:dd:b6:a6:b5:51:d2:c0:
                    a0:5a:ba:3a:24:9d:e9:67:e9:08:36:b7:b5:a5:a5:
                    12:19:68:39:4e:1a:45:1d:8f:bb:4d:41:ab:46:ae:
                    5f:54:85:cc:01:f2:23:83:81:5d:82:16:7b:eb:14:
                    59:fd:91:49:4e:cb:8b:3a:1b:8d:d2:b3:32:39:08:
                    09:b1:08:e0:10:86:34:e9:56:c4:a2:e5:f2:59:cb:
                    74:00:c5:42:ec:c5:52:48:01:f0:f5:e4:92:e9:b5:
                    a7:f5:c6:d8:b2:d0:88:14:15:18:8f:5c:f0:60:c3:
                    df:86:e9:37:95:9e:4a:c1:59:f5:13:2c:6f:02:c3:
                    4f:9f:9f:d1:26:e6:59:9f:50:a5:b2:a3:61:d9:9d:
                    b1:aa:50:af:b0:73:10:68:95:ab:d9:34:c8:47:17:
                    85:8f:e4:93:42:c4:ad:ad:9d:6b:5f:90:f5:5e:c7:
                    35:8f:e3:3a:4f:1a:0e:31:ad:ba:2f:ef:22:22:c7:
                    59:f8:46:32:f8:8b:ed:11:0f:aa:35:9e:e7:1e:62:
                    9b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:35:AF:3E:99:A4:48:80:28:92:63:3A:EA:60:7A:96:0F:EF:D5
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a5:e4:65:bb:12:e5:12:10:5f:fb:e1:bc:21:13:9b:62:40:
         1a:ab:c3:0c:9d:64:64:2b:45:f6:8b:21:07:20:6d:14:36:33:
         8f:71:88:f8:cd:43:e5:59:38:9e:4c:7a:02:11:33:a9:58:2b:
         15:dc:d7:e9:dc:9d:93:9d:53:f6:49:95:dc:56:69:de:a5:14:
         ea:d0:fc:ea:ef:bb:89:f5:45:30:69:00:01:e3:8e:5a:5b:c7:
         9a:4b:b0:3f:c7:0e:b7:7f:ce:27:58:32:2b:0b:12:3a:e0:6a:
         50:bc:47:c5:0a:61:3e:5b:69:c7:77:21:7f:df:ad:e5:3b:d8:
         7a:db:ca:b1:f7:ce:4d:de:79:f0:ea:a6:72:2a:77:54:5f:40:
         27:79:9b:77:fd:6e:c8:42:10:76:b2:45:f3:df:63:2b:08:43:
         0d:0d:d1:ce:40:77:19:11:f6:d0:c0:a7:14:7c:22:8d:f6:61:
         1a:46:43:e6:ff:f1:bd:b4:fb:c3:1c:71:bf:bb:13:60:4d:59:
         0a:6c:f6:b4:ff:63:a6:1b:c9:4b:b9:ea:5a:b4:00:80:a4:46:
         fc:2f:b6:7c:b4:a8:39:6d:90:4a:bd:b8:27:6a:13:f3:0d:37:
         35:51:8e:00:24:27:f4:a1:e2:2f:e2:6b:83:50:8e:13:49:28:
         e9:6b:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:36:19 2025 by rpki-client