Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
File:                     DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json)
Hash identifier:          /IGXpywAsL/TDG8PWYPpRhPLJo6TfHTFfpEsK0A1og8=
Subject key identifier:   1F:46:30:76:27:FD:7D:8A:9A:59:D0:15:23:91:E2:51:24:B7:7E:A7
Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
Certificate issuer:       /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113
Certificate serial:       57026EBB512A8216DDAA26E9684C430FAA5F3A4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
Manifest number:          0149
Signing time:             Thu 22 Oct 2026 06:08:11 +0000
Manifest this update:     Thu 22 Oct 2026 06:03:11 +0000
Manifest next update:     Fri 23 Oct 2026 08:53:11 +0000
Files and hashes:         1: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=)
                          2: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=)
                          3: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=)
                          4: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=)
                          5: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=)
                          6: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=)
                          7: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=)
                          8: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=)
                          9: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=)
                          10: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=)
                          11: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=)
                          12: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=)
                          13: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=)
                          14: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: SZcF8oAm+Rkc49k/Ur7MzkYFE+QfQpFuam73gJBiHGA=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl
                          rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 08:53:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:6e:bb:51:2a:82:16:dd:aa:26:e9:68:4c:43:0f:aa:5f:3a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113
        Validity
            Not Before: Oct 22 06:03:11 2026 GMT
            Not After : Oct 23 08:53:11 2026 GMT
        Subject: CN=1F46307627FD7D8A9A59D0152391E25124B77EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:41:15:e1:ea:82:47:44:99:d1:41:0a:2a:14:
                    ed:19:cb:2a:2c:b6:a5:73:78:38:60:87:e4:30:d1:
                    50:fa:b9:51:0d:d9:33:5e:7a:c1:80:e1:67:3b:99:
                    2d:a7:e8:f2:c4:8d:c8:dc:07:7c:e5:96:29:ca:f1:
                    cd:72:71:7c:63:37:3f:66:84:14:1c:66:77:bd:68:
                    d2:24:8d:2d:31:5d:7c:62:17:1a:7c:d9:d4:fc:a5:
                    b1:7c:3e:00:7f:c0:8a:5e:39:b9:c9:e6:ba:c6:5b:
                    e5:89:36:24:cf:48:cd:4b:5d:f3:ec:ca:e1:c0:f3:
                    be:3f:42:c0:d7:1e:1d:87:e6:34:22:9f:24:f4:b0:
                    a5:48:e5:b0:86:29:fc:76:01:63:8e:27:09:97:4a:
                    e1:ad:46:31:d1:48:06:ca:2a:d7:f4:6e:75:3e:19:
                    d1:a0:af:20:77:39:ad:35:b4:a5:b1:33:5a:35:80:
                    4a:31:d5:fc:cf:68:c2:07:ff:53:b4:95:37:29:77:
                    d1:f8:74:cf:12:37:2a:99:42:52:68:cd:4d:b9:11:
                    b8:5e:69:71:e4:ee:27:5d:fd:70:78:e5:f8:d7:6f:
                    4b:82:e4:41:f7:ea:4f:f9:90:4c:52:29:20:86:54:
                    76:11:6b:fe:75:e5:c1:44:d9:7a:8a:60:44:04:28:
                    e0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:46:30:76:27:FD:7D:8A:9A:59:D0:15:23:91:E2:51:24:B7:7E:A7
            X509v3 Authority Key Identifier:
                keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:76:6a:b8:d9:3f:01:cb:d7:2e:67:15:89:c6:54:66:20:29:
         0d:72:31:76:7f:be:ba:2e:9a:1d:4f:81:6c:0b:80:5a:ee:11:
         87:6f:a2:48:44:8b:a7:da:89:52:35:fd:ec:ea:66:b6:48:7a:
         ec:7e:57:46:4e:58:fa:47:33:7f:7e:a2:d4:85:00:a4:67:e2:
         56:e1:5b:87:78:61:d4:68:95:21:3e:1f:84:82:35:62:93:85:
         83:68:3f:00:03:ff:fb:89:86:27:56:cd:1f:cb:6d:50:cd:ee:
         ba:b1:8e:e9:f7:17:ec:2f:93:06:9a:12:7f:bc:b7:2f:77:6b:
         ee:c4:ef:40:7b:ee:df:bb:67:e4:2c:61:ad:1b:79:77:56:73:
         f9:8b:89:ea:88:e1:39:6e:7d:73:85:75:b7:cd:59:e5:bb:ea:
         db:20:a3:38:66:fb:17:ab:41:b3:a2:04:78:bf:03:86:c9:a4:
         8e:ff:8b:c0:6f:6a:10:d8:67:fe:d8:ac:1c:2d:5c:2d:17:9b:
         a9:8e:1c:a1:f4:7d:87:84:28:b0:cd:33:da:ee:96:72:8f:5d:
         50:c3:93:0b:b9:04:51:7d:2e:57:5c:30:91:df:a9:58:a2:a0:
         df:91:28:b3:a9:43:c8:53:f9:5c:76:16:ab:e9:29:12:f0:e9:
         31:bc:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:36:24 2026 by rpki-client