Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          KWPLboWkuhQkZA89aEwYrjBYKhfKd3AtomAZ8teQuoU=
Subject key identifier:   1F:58:86:18:4B:97:16:57:AE:6F:52:83:C3:BB:6F:3C:E6:82:10:B6
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       01C2D803D47054B717B660C7E867BD5B46E5737C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          0941
Signing time:             Wed 21 Oct 2026 11:56:19 +0000
Manifest this update:     Wed 21 Oct 2026 11:51:19 +0000
Manifest next update:     Thu 22 Oct 2026 14:12:19 +0000
Files and hashes:         1: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
                          2: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
                          3: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
                          4: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
                          5: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
                          6: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
                          7: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
                          8: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: 8FRUHj7C/B5vMhwJuTpEGsvrR+TXTSaiKJf/L1n66yk=)
                          9: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
                          10: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
                          11: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
                          12: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
                          13: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
                          14: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
                          15: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
                          16: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
                          17: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
                          18: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
                          19: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
                          20: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
                          21: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 14:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c2:d8:03:d4:70:54:b7:17:b6:60:c7:e8:67:bd:5b:46:e5:73:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Oct 21 11:51:19 2026 GMT
            Not After : Oct 22 14:12:19 2026 GMT
        Subject: CN=1F5886184B971657AE6F5283C3BB6F3CE68210B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:e7:c4:80:90:de:8b:af:82:c3:74:a8:a3:
                    a7:bd:21:df:be:d5:cf:76:df:2e:9e:f4:58:fa:c9:
                    4d:f9:3b:fe:25:0b:00:10:e2:2f:74:12:34:3c:50:
                    6c:c5:92:5e:da:f5:76:68:93:6d:3e:4d:1a:81:c2:
                    bc:6c:04:a8:a6:9c:f5:55:aa:01:1b:e1:e3:02:39:
                    77:78:a8:4c:9a:62:da:8e:75:9b:48:a2:9b:9e:e9:
                    d7:57:c2:f8:0b:91:7a:51:95:9a:3e:71:3b:07:9d:
                    fd:2a:8a:2e:d3:5c:c7:e9:f0:e6:8d:e1:cc:5b:ee:
                    76:da:b8:55:af:c0:f2:a7:be:29:4d:ad:46:6e:ac:
                    e9:20:a3:35:1c:22:7b:78:a4:13:9d:97:52:35:f6:
                    bf:93:dc:69:50:4f:d7:3e:00:41:e4:0d:10:bc:20:
                    aa:ab:2d:5d:2c:11:25:c6:03:b6:cb:47:53:4c:5f:
                    7e:c6:af:6c:ec:8d:70:58:c9:e9:b4:32:ac:0f:b7:
                    a1:7a:de:96:de:5e:a9:cd:55:b6:8d:99:3a:c0:4c:
                    94:ff:e4:48:13:ad:13:e6:2b:e6:bc:e2:6e:c6:71:
                    b7:a3:e0:09:05:fa:e0:ef:1d:26:f7:68:7b:2c:ff:
                    35:5b:6b:51:33:b6:9e:1e:42:14:1f:1e:61:ed:95:
                    a1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:86:18:4B:97:16:57:AE:6F:52:83:C3:BB:6F:3C:E6:82:10:B6
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bd:72:57:f9:6c:bc:e5:9a:a8:fc:0b:03:e7:12:73:7e:88:
         5c:56:33:bc:da:71:9e:23:2d:67:0d:2f:8c:d8:f5:b5:e3:44:
         de:64:e6:5e:98:86:e4:f8:57:88:01:dc:a4:f6:24:d7:53:75:
         2f:05:5a:24:86:3e:d1:e7:b6:d4:74:c7:17:95:04:ba:7a:5a:
         34:9d:a2:88:a5:23:2f:33:2f:2b:ea:2b:10:08:b3:d1:c8:e8:
         24:f6:2b:a5:c2:1c:8d:1c:3c:a6:26:28:46:66:42:ed:58:91:
         35:17:30:95:89:de:ef:28:7a:e8:14:7e:7a:fb:7f:05:f4:18:
         81:62:7c:84:53:e1:91:00:e4:98:34:8e:c5:ee:c3:dd:03:e1:
         5a:1b:92:a2:9d:cd:62:66:fd:3e:99:e8:f1:bd:4c:bd:5e:6d:
         ce:17:ef:57:78:02:48:11:60:2b:28:f2:5e:4e:26:64:d0:cd:
         8a:0e:ef:1d:72:24:3a:9f:3e:96:61:fe:7c:27:6f:1d:e6:c6:
         c1:f4:0a:33:65:3a:a5:56:b4:61:51:f0:a2:3c:c1:a0:36:97:
         f2:8a:20:22:ac:62:51:a9:d5:2f:f9:de:08:2a:95:f7:50:b3:
         15:d2:96:0d:53:12:0f:cb:d5:dd:3f:ce:9a:71:c3:fb:ca:6f:
         f4:c5:b4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:49:24 2026 by rpki-client