
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
File: DAEAFB37164B3F2015820693231F24002ADC2113.mft (raw, json)
Hash identifier: /IGXpywAsL/TDG8PWYPpRhPLJo6TfHTFfpEsK0A1og8=
Subject key identifier: 1F:46:30:76:27:FD:7D:8A:9A:59:D0:15:23:91:E2:51:24:B7:7E:A7
Authority key identifier: DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
Certificate issuer: /CN=A9124B5E0000/serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113
Certificate serial: 57026EBB512A8216DDAA26E9684C430FAA5F3A4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
Manifest number: 0149
Signing time: Thu 22 Oct 2026 06:08:11 +0000
Manifest this update: Thu 22 Oct 2026 06:03:11 +0000
Manifest next update: Fri 23 Oct 2026 08:53:11 +0000
Files and hashes: 1: 3130332e3133362e3134342e302f32322d3234203d3e2033323538.roa (hash: 44857mPnflbld8sAjrxn24bZ5Kn4lYc5chLLJ4ZXsck=)
2: 323430343a393534303a3a2f33322d3438203d3e2039333132.roa (hash: MpsZ8doWob/GmPe/U1+mm62uQdxOQ+oTUg4TpxOic5U=)
3: 323430343a393534303a3a2f33322d3438203d3e203234323432.roa (hash: 9Jlu+M3rXD12EuJzqhRW5ZFTf/kwx838RQdRoAP5znc=)
4: 3130332e3133362e3134372e302f32342d3234203d3e203433333537.roa (hash: rFVQUYAqJTODcy+KMuheW/SnFVOlgYrcWihzZ85NvXY=)
5: 323430343a393534303a3a2f33322d3438203d3e2038383838.roa (hash: 8+BeBOd+Sg85FryuL+rY8K085PVHEl0yXTuWTPoQkCU=)
6: 323430343a393534303a3a2f33322d3438203d3e2033323538.roa (hash: 8e7aU8h98dsVQOSg3SUELmLP5Svikvupj0cKmbd7QW4=)
7: 3130332e3133362e3134342e302f32322d3234203d3e203234323432.roa (hash: thQvr/N0a8AQrIYugr9DeDyUSsLd2ILFdpj+ZmdXBk4=)
8: 3130332e3133362e3134342e302f32322d3234203d3e2038383838.roa (hash: gkSWhIsG/cKa7Lp3wtklJFQ2S+B1JBQrTCHMmOqyJOY=)
9: 323430343a393534303a3a2f33322d3438203d3e2033323134.roa (hash: NYNz19CF8bYEbE06OdWJsgFvAF2ZJFnCdeT938IzW9I=)
10: 323430343a393534303a3a2f33322d3438203d3e2036323333.roa (hash: sKF2LNVfJ7NgB8+tPK/uabcxn7F494ZVrQRp9kB7NWk=)
11: 323430343a393534303a3a2f33322d3438203d3e20393439.roa (hash: C9V8/vbCluwWVJU+9hH5LnWBf9vwYnTM3rv8nuYfNtU=)
12: 323430343a393534303a3a2f33322d3438203d3e2033323034.roa (hash: gaXEsSAwuIm7XM1Kspg5xVloHOPbfnwpJPDod32ocPs=)
13: 323430343a393534303a3a2f33322d3438203d3e2034373835.roa (hash: BDoJeu6sCoBQOoM3Lajr/zX+1iHrACq1FLdDtmNXxrc=)
14: DAEAFB37164B3F2015820693231F24002ADC2113.crl (hash: SZcF8oAm+Rkc49k/Ur7MzkYFE+QfQpFuam73gJBiHGA=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl
rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 23 Oct 2026 08:53:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:02:6e:bb:51:2a:82:16:dd:aa:26:e9:68:4c:43:0f:aa:5f:3a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9124B5E0000, serialNumber=DAEAFB37164B3F2015820693231F24002ADC2113
Validity
Not Before: Oct 22 06:03:11 2026 GMT
Not After : Oct 23 08:53:11 2026 GMT
Subject: CN=1F46307627FD7D8A9A59D0152391E25124B77EA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:15:e1:ea:82:47:44:99:d1:41:0a:2a:14:
ed:19:cb:2a:2c:b6:a5:73:78:38:60:87:e4:30:d1:
50:fa:b9:51:0d:d9:33:5e:7a:c1:80:e1:67:3b:99:
2d:a7:e8:f2:c4:8d:c8:dc:07:7c:e5:96:29:ca:f1:
cd:72:71:7c:63:37:3f:66:84:14:1c:66:77:bd:68:
d2:24:8d:2d:31:5d:7c:62:17:1a:7c:d9:d4:fc:a5:
b1:7c:3e:00:7f:c0:8a:5e:39:b9:c9:e6:ba:c6:5b:
e5:89:36:24:cf:48:cd:4b:5d:f3:ec:ca:e1:c0:f3:
be:3f:42:c0:d7:1e:1d:87:e6:34:22:9f:24:f4:b0:
a5:48:e5:b0:86:29:fc:76:01:63:8e:27:09:97:4a:
e1:ad:46:31:d1:48:06:ca:2a:d7:f4:6e:75:3e:19:
d1:a0:af:20:77:39:ad:35:b4:a5:b1:33:5a:35:80:
4a:31:d5:fc:cf:68:c2:07:ff:53:b4:95:37:29:77:
d1:f8:74:cf:12:37:2a:99:42:52:68:cd:4d:b9:11:
b8:5e:69:71:e4:ee:27:5d:fd:70:78:e5:f8:d7:6f:
4b:82:e4:41:f7:ea:4f:f9:90:4c:52:29:20:86:54:
76:11:6b:fe:75:e5:c1:44:d9:7a:8a:60:44:04:28:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:30:76:27:FD:7D:8A:9A:59:D0:15:23:91:E2:51:24:B7:7E:A7
X509v3 Authority Key Identifier:
keyid:DA:EA:FB:37:16:4B:3F:20:15:82:06:93:23:1F:24:00:2A:DC:21:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ur7NxZLPyAVggaTIx8kACrcIRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/62/DAEAFB37164B3F2015820693231F24002ADC2113.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:76:6a:b8:d9:3f:01:cb:d7:2e:67:15:89:c6:54:66:20:29:
0d:72:31:76:7f:be:ba:2e:9a:1d:4f:81:6c:0b:80:5a:ee:11:
87:6f:a2:48:44:8b:a7:da:89:52:35:fd:ec:ea:66:b6:48:7a:
ec:7e:57:46:4e:58:fa:47:33:7f:7e:a2:d4:85:00:a4:67:e2:
56:e1:5b:87:78:61:d4:68:95:21:3e:1f:84:82:35:62:93:85:
83:68:3f:00:03:ff:fb:89:86:27:56:cd:1f:cb:6d:50:cd:ee:
ba:b1:8e:e9:f7:17:ec:2f:93:06:9a:12:7f:bc:b7:2f:77:6b:
ee:c4:ef:40:7b:ee:df:bb:67:e4:2c:61:ad:1b:79:77:56:73:
f9:8b:89:ea:88:e1:39:6e:7d:73:85:75:b7:cd:59:e5:bb:ea:
db:20:a3:38:66:fb:17:ab:41:b3:a2:04:78:bf:03:86:c9:a4:
8e:ff:8b:c0:6f:6a:10:d8:67:fe:d8:ac:1c:2d:5c:2d:17:9b:
a9:8e:1c:a1:f4:7d:87:84:28:b0:cd:33:da:ee:96:72:8f:5d:
50:c3:93:0b:b9:04:51:7d:2e:57:5c:30:91:df:a9:58:a2:a0:
df:91:28:b3:a9:43:c8:53:f9:5c:76:16:ab:e9:29:12:f0:e9:
31:bc:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 14:36:24 2026 by rpki-client