Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
File:                     5B1AD82F0E7DC771819A9A26674992A3951B9373.mft (raw, json)
Hash identifier:          6vZLWSSEgVzecG141hPuOWSSUJOkh7r74+5A/IxbazQ=
Subject key identifier:   C6:7F:18:F6:08:8A:24:C1:04:9C:CF:B9:49:00:A7:42:47:DB:53:9C
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial:       0E72901128A83EEBF85C1949ABC413E6DED36197
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
Manifest number:          01B2
Signing time:             Sat 05 Sep 2026 02:44:58 +0000
Manifest this update:     Sat 05 Sep 2026 02:39:58 +0000
Manifest next update:     Sun 06 Sep 2026 05:25:58 +0000
Files and hashes:         1: AS138038.asa (hash: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI=)
                          2: 3230322e352e3232302e302f32322d3234203d3e2033323538.roa (hash: RSC0gS7HCZeuxKb2QI8cI8b8M+MPUL5V2oXXelhZ2i4=)
                          3: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (hash: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8=)
                          4: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (hash: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ=)
                          5: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: LFwJ6OFasHUXdxn7Pjd2blvuD4fgYwkNxMcSghbaXHE=)
                          6: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: gMRDa6tXlNXXN9n511PW1vIGUannRwNsBy5I5ncCCYE=)
                          7: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (hash: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY=)
                          8: 323430333a616338303a3a2f33322d3438203d3e2039333132.roa (hash: fgKSq0+6HaJmX4YRsGt9woaxxo2J+1VxHIL2NS4cwCQ=)
                          9: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=)
                          10: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (hash: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I=)
                          11: 3230322e352e3232302e302f32322d3234203d3e2038383838.roa (hash: 8fu1VICLJqfb2qBAICSYNfZTWIi/AxU4hCyty2bGjds=)
                          12: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (hash: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo=)
                          13: 3130332e3230312e3132382e302f32322d3234203d3e2038383838.roa (hash: jroVYKFHmgPVzgsQ26TPXXr/n6bFbi/cJido3jfFoMg=)
                          14: 5B1AD82F0E7DC771819A9A26674992A3951B9373.crl (hash: oPM7BJTK9xkSmmxQzwnRBL8KJMsZMan7c0GIBmcOmuI=)
                          15: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (hash: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM=)
                          16: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
                          rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 05:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:72:90:11:28:a8:3e:eb:f8:5c:19:49:ab:c4:13:e6:de:d3:61:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
        Validity
            Not Before: Sep  5 02:39:58 2026 GMT
            Not After : Sep  6 05:25:58 2026 GMT
        Subject: CN=C67F18F6088A24C1049CCFB94900A74247DB539C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2c:7e:4e:bb:67:03:e1:a6:2c:9d:68:d1:16:
                    7f:29:13:34:cb:2b:fe:b9:18:4f:93:76:a6:3c:c9:
                    91:f2:fa:73:20:ab:33:9c:da:db:20:38:a9:5e:18:
                    09:f2:cb:58:65:60:57:c4:a5:d8:78:8c:0e:a9:80:
                    2c:56:6d:48:1b:c2:b0:8c:d8:24:c2:7d:ed:15:9f:
                    79:38:8e:66:c7:8d:c9:da:1b:80:ad:22:b3:b4:82:
                    8d:de:f9:3d:64:6a:80:41:66:1b:81:b1:01:0f:85:
                    66:3a:5e:c7:98:dd:2e:10:57:f1:9e:97:73:7b:34:
                    79:8e:bb:78:60:ec:19:8b:1f:44:b9:cb:2d:fd:39:
                    a2:82:d4:3e:99:f1:e6:03:b9:1b:99:d9:bc:11:ef:
                    92:f6:a6:ac:da:f9:b2:c3:2a:df:e8:9b:52:3f:25:
                    39:ac:2c:00:16:f1:53:8b:ab:21:8c:0b:d5:ad:4f:
                    a0:39:4d:bf:4a:d3:a6:83:46:7f:85:1d:36:e2:a4:
                    94:82:8a:dc:7b:0b:db:52:e0:f8:d9:e6:40:45:2c:
                    c1:05:12:c7:17:07:70:3b:20:30:c9:ac:91:18:fb:
                    9a:1c:d6:47:ec:d1:71:03:5e:8e:f4:4d:0e:e1:22:
                    82:6d:8b:12:52:d1:36:43:25:dd:1b:5c:6e:18:a3:
                    a8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7F:18:F6:08:8A:24:C1:04:9C:CF:B9:49:00:A7:42:47:DB:53:9C
            X509v3 Authority Key Identifier:
                keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a3:84:23:50:f0:91:19:de:e3:1b:fa:af:e0:14:7a:a5:21:
         12:6d:1b:5e:77:45:6d:5f:8a:2f:d1:9c:cf:b6:69:40:a9:9f:
         bf:c6:e0:ba:27:9c:50:29:37:e1:a0:20:e2:38:b6:94:28:a8:
         d1:b3:f0:a8:78:bb:6b:29:bb:14:7d:1d:96:55:6c:9e:e3:69:
         de:e0:d6:ae:04:7e:8d:25:46:b1:6f:f0:1b:31:6d:e2:f7:d0:
         df:52:f1:7f:2c:9f:62:ca:71:1b:6d:0d:b7:75:45:a8:2b:8a:
         3a:48:ac:e0:4b:71:34:0a:11:77:e9:ae:9b:d9:12:57:df:f8:
         9c:af:b1:b6:83:14:88:25:5a:36:6c:c7:f6:1e:d3:81:94:78:
         54:56:c8:8b:7d:33:aa:57:0a:9f:ea:4e:a4:6a:41:9a:f7:5f:
         e8:58:b7:5f:07:9c:a2:81:89:8b:2f:37:b1:d0:10:a6:5e:20:
         4b:4e:23:4c:ae:a2:d6:ea:78:22:e7:3d:db:26:57:d8:17:15:
         aa:b4:73:23:0b:4a:bd:15:37:8e:ef:b5:77:85:3e:ed:99:2d:
         85:59:7f:f8:c0:e6:05:5a:94:bd:87:b2:63:68:9a:6c:d6:6a:
         cc:58:a3:60:13:99:a2:61:c6:8e:84:16:49:bb:3d:99:39:b0:
         18:90:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----