Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
File:                     5B1AD82F0E7DC771819A9A26674992A3951B9373.mft (raw, json)
Hash identifier:          boNMouSWxElGPTatn4uOd1XSw8paDRk2K99f/nTJgJ4=
Subject key identifier:   3F:50:CB:8C:03:8C:C1:27:C7:8F:1C:38:62:87:EC:CC:B3:62:A4:21
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial:       05541FF3E6DE266897859ED6BFB2332549F91DE8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
Manifest number:          0172
Signing time:             Tue 21 Jul 2026 19:59:57 +0000
Manifest this update:     Tue 21 Jul 2026 19:54:57 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:57 +0000
Files and hashes:         1: 3230322e352e3232302e302f32322d3234203d3e2038383838.roa (hash: 8fu1VICLJqfb2qBAICSYNfZTWIi/AxU4hCyty2bGjds=)
                          2: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=)
                          3: 323430333a616338303a3a2f33322d3438203d3e2039333132.roa (hash: fgKSq0+6HaJmX4YRsGt9woaxxo2J+1VxHIL2NS4cwCQ=)
                          4: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (hash: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8=)
                          5: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: gMRDa6tXlNXXN9n511PW1vIGUannRwNsBy5I5ncCCYE=)
                          6: 3130332e3230312e3132382e302f32322d3234203d3e2038383838.roa (hash: jroVYKFHmgPVzgsQ26TPXXr/n6bFbi/cJido3jfFoMg=)
                          7: AS138038.asa (hash: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI=)
                          8: 3230322e352e3232302e302f32322d3234203d3e2033323538.roa (hash: RSC0gS7HCZeuxKb2QI8cI8b8M+MPUL5V2oXXelhZ2i4=)
                          9: 5B1AD82F0E7DC771819A9A26674992A3951B9373.crl (hash: /6zFhUOwbJkSOGmiIOWmjsF0sOKej7UCHUB2URYIwvw=)
                          10: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (hash: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo=)
                          11: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: LFwJ6OFasHUXdxn7Pjd2blvuD4fgYwkNxMcSghbaXHE=)
                          12: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (hash: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY=)
                          13: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (hash: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ=)
                          14: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (hash: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM=)
                          15: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (hash: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I=)
                          16: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
                          rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:54:1f:f3:e6:de:26:68:97:85:9e:d6:bf:b2:33:25:49:f9:1d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
        Validity
            Not Before: Jul 21 19:54:57 2026 GMT
            Not After : Jul 22 20:00:57 2026 GMT
        Subject: CN=3F50CB8C038CC127C78F1C386287ECCCB362A421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:00:e5:59:13:e7:16:df:43:dc:8d:be:04:9f:
                    e6:8b:60:b1:2a:77:f9:19:d4:55:72:c5:3e:e7:6a:
                    97:d7:8b:f1:d9:dc:eb:83:a8:80:25:c3:33:01:db:
                    50:50:57:d4:c1:ae:ee:37:7d:ef:99:95:ee:05:de:
                    46:e6:13:c2:74:a1:d0:71:8f:e5:89:68:0a:c5:f0:
                    61:88:c3:cc:ea:a4:5c:e7:ce:5e:3b:24:70:ca:db:
                    a7:76:fb:46:02:33:6f:94:2e:e8:94:0f:b3:24:0b:
                    bd:0c:00:31:f6:f6:be:61:84:3e:5d:66:56:a0:28:
                    a8:38:08:4c:a0:84:83:e8:e7:b8:ef:89:ab:1b:5b:
                    56:fb:36:74:21:c0:55:a0:18:72:87:29:f3:f0:69:
                    0a:6a:1d:c8:5d:8e:f8:01:77:bd:eb:08:ce:05:47:
                    da:18:00:45:2f:5c:05:fa:7c:67:cc:a3:c3:91:50:
                    7c:10:72:89:4c:59:04:18:30:5a:e5:1b:1e:69:ab:
                    9e:60:e0:15:75:30:6c:10:a1:d8:9f:f1:65:2c:ff:
                    1b:1b:11:1b:df:60:53:e7:9b:28:66:e0:96:58:ce:
                    c2:4a:1a:9f:78:f2:29:f9:7a:4b:6f:f7:ca:bc:ae:
                    86:c5:a4:9c:dc:43:00:a7:ec:34:4a:48:44:98:a8:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:CB:8C:03:8C:C1:27:C7:8F:1C:38:62:87:EC:CC:B3:62:A4:21
            X509v3 Authority Key Identifier:
                keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:01:67:bd:43:9e:32:6a:ea:7d:2d:79:e1:f4:f2:5a:d6:db:
         f2:23:4e:f1:46:d6:68:b2:99:b0:b4:7b:de:c8:2d:fa:7b:4f:
         20:df:2b:4d:44:23:b7:3a:8b:30:d6:9e:f3:00:a1:9b:08:4e:
         88:cc:b1:3a:27:2c:bb:19:cc:59:0d:c7:6f:3f:8b:a9:9c:0a:
         a3:fd:7c:ea:16:58:f8:af:9d:aa:67:bb:8d:a3:61:60:a3:17:
         cd:5e:84:bd:17:13:7d:a9:8d:43:e7:05:90:a0:49:63:6d:e3:
         54:ca:08:06:be:76:fb:ce:24:7a:05:06:a2:47:79:11:53:67:
         e2:0d:15:8c:cc:21:c3:a9:74:73:0b:f8:14:64:79:c0:bd:d6:
         7a:9e:9c:48:92:53:a9:15:25:79:c7:54:88:6b:e9:96:a1:ed:
         95:4d:c7:5b:a4:00:b7:d4:46:0b:01:00:cf:a2:6d:eb:29:8c:
         2e:36:2f:dd:cb:96:f9:5c:27:47:ce:20:02:5e:50:3d:48:ce:
         76:d8:d8:dd:fe:3f:ad:d4:a2:74:c3:7e:27:8c:d3:29:3e:0e:
         a0:4f:b7:b2:b5:da:b1:04:12:00:8d:56:14:c8:e6:e8:96:c9:
         74:96:6e:24:6d:79:71:30:38:ac:13:49:5f:b0:ad:0a:58:a2:
         e8:0b:c7:e2
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUBVQf8+beJmiXhZ7Wv7IzJUn5HegwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1QjFBRDgyRjBF
N0RDNzcxODE5QTlBMjY2NzQ5OTJBMzk1MUI5MzczMB4XDTI2MDcyMTE5NTQ1N1oX
DTI2MDcyMjIwMDA1N1owMzExMC8GA1UEAxMoM0Y1MENCOEMwMzhDQzEyN0M3OEYx
QzM4NjI4N0VDQ0NCMzYyQTQyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK8A5VkT5xbfQ9yNvgSf5otgsSp3+RnUVXLFPudql9eL8dnc64OogCXDMwHb
UFBX1MGu7jd975mV7gXeRuYTwnSh0HGP5YloCsXwYYjDzOqkXOfOXjskcMrbp3b7
RgIzb5Qu6JQPsyQLvQwAMfb2vmGEPl1mVqAoqDgITKCEg+jnuO+JqxtbVvs2dCHA
VaAYcocp8/BpCmodyF2O+AF3vesIzgVH2hgARS9cBfp8Z8yjw5FQfBByiUxZBBgw
WuUbHmmrnmDgFXUwbBCh2J/xZSz/GxsRG99gU+ebKGbglljOwkoan3jyKfl6S2/3
yryuhsWknNxDAKfsNEpIRJiohtkCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBQ/UMuM
A4zBJ8ePHDhih+zMs2KkITAfBgNVHSMEGDAWgBRbGtgvDn3HcYGamiZnSZKjlRuT
czAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzU4LzVCMUFEODJGMEU3REM3NzE4MTlBOUEyNjY3
NDk5MkEzOTUxQjkzNzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL1d4cllMdzU5eDNHQm1wb21aMG1TbzVVYmszTS5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNTgvNUIxQUQ4MkYwRTdEQzc3MTgxOUE5QTI2Njc0OTky
QTM5NTFCOTM3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAH4BZ71DnjJq6n0teeH08lrW2/IjTvFG1miy
mbC0e97ILfp7TyDfK01EI7c6izDWnvMAoZsITojMsTonLLsZzFkNx28/i6mcCqP9
fOoWWPivnapnu42jYWCjF81ehL0XE32pjUPnBZCgSWNt41TKCAa+dvvOJHoFBqJH
eRFTZ+INFYzMIcOpdHML+BRkecC91nqenEiSU6kVJXnHVIhr6Zah7ZVNx1ukALfU
RgsBAM+ibespjC42L93LlvlcJ0fOIAJeUD1IznbY2N3+P63UonTDfieM0yk+DqBP
t7K12rEEEgCNVhTI5uiWyXSWbiRteXEwOKwTSV+wrQpYougLx+I=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:20:24 2026 by rpki-client