Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          Mt51eQnqQyyja4WlDqjR7VIxc2b5MMrQTTqTYpQnrfg=
Subject key identifier:   86:2D:DA:2C:F9:F9:97:E4:1A:B7:46:7C:BC:97:2E:5B:B1:DC:13:41
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       1A8C03F84BA535BFACDC99A394DC70E7D7C87537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          085D
Signing time:             Sun 10 Aug 2025 01:27:16 +0000
Manifest this update:     Sun 10 Aug 2025 01:22:16 +0000
Manifest next update:     Mon 11 Aug 2025 02:18:16 +0000
Files and hashes:         1: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: sr7r8uO67cDPo72NjWdP3dlG7qJrC9xZ+w35SmZvRyk=)
                          2: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: ndq0LGrdRAIfChD7aMbaP54wYrqoXqIBNh0lVfJSFaU=)
                          3: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: Se1kElTDtTHyunNZ20CviOqqJYoWbn/Tmfcy/ve9hfQ=)
                          4: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: nZRdseJLG8pcz60dA2dIP+lQPJZ68YEbyLu8K+1sxGI=)
                          5: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jmlPHqT2zn/G8VxGtz4qGDGVkC091Y4a8xRHPA/+0+0=)
                          6: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: XsSHiraeLYNQTJR5HGAY6vwQ9Scu9lRrIHdSI54V+7M=)
                          7: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: YBRtGgVo128HYmmYrlq/rtgksrT7YQggo7xicgUIVnM=)
                          8: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: EgTEvWkEj9tFsTMbk/n0zK+dqN6n3waLR4ZItrLlEq4=)
                          9: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: mSlFEjiZLGlNSjU5ZFMts848IVhplWjk8p0UJrCQGYU=)
                          10: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: C3K+WGLs2QlNW8KfADo1lgYtDVhfDY/WxaHP6YqnW70=)
                          11: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: ZrvYS50YQF552hC3f+cs9XyoGFb0P/9oEvKFKmLIhAI=)
                          12: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: zVyF6jJ4txeTdRaatXCN+HfB5Icua3krS/M0wjETr/8=)
                          13: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: eglNokA0036JbGNEJ4JBpUI9W7LtrNCo3IjzCiifpEo=)
                          14: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: ky4gN4X8Kk/a3uT+GoFgjorYPoni8Qhbdyxyd/1eQao=)
                          15: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: I5d60IB2KEbvET4bHgVAmjL+rNNj+/RMDX5hP7I5oUM=)
                          16: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: mK1H0q2nScB12+HzJP5Ci9eZPi+rL/uehN1iZQBOZZg=)
                          17: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: 6x3832+oWvYQF0jxhDPp5oNsobHdrbU4T4SEczclfpE=)
                          18: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: 6oVWbbqVFk6Pwgux9V8jfDQRsMYOVT5jirPBSL3Wig4=)
                          19: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: 7c9jMtUbgGoPhR4Cn4grcg92ice/vIsoAgLxdNOL2jI=)
                          20: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: rjHLbg5RxNx+OSrihRQaxhyOJyLwHXme40chbILQOQQ=)
                          21: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: lqCEmZ9NaCjaWEhq0OXTc04xBaaLhH59AP38axB9xQk=)
                          22: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: GMRaZkN3zIDxVuJVnldek+MoIhPgvQ/+nioWSoYNFg0=)
                          23: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: QbKuW5JSVD7SwP6FCC3P3TnaaLBUrOOiffHhmxAIliI=)
                          24: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: lW2/fc4/wvMxp/fL9pvtCp6oAHhd5IEZ0JrDs5edNJo=)
                          25: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: afHMEGHzbUT5cZVLHaZvFHWQh333rAdnWIeWwLNhMCM=)
                          26: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: 7rljejRrrqEOqarZWl8ZH7E32QukCaHhhwY0bAZHFpo=)
                          27: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: UWEL7CudYC92zt8CEiOQCyv8nDS9DnU3NbY49hTr/LU=)
                          28: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: QLlOhGApGpab+CelOkA2cuBfqCbVJhUFQdhgy+GcygA=)
                          29: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: FayS7IHAAkpO4bVu+bSgTXwWFTtA3QN6s2Mvp+H5N/s=)
                          30: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: uL0NI5HaYP5v+elT90/EatVuCLlrKQFX1n9YTboLp2k=)
                          31: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: RIk7xcVMnbCIgx+Zshg3ApVSzt3mjOjYr0DL9FosY+U=)
                          32: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: pvW8+6JnmjAbAPlcqudfu9Zq7kXq735/LbZQ+cssRyw=)
                          33: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: 0IFzsgdmIkTePGQbwUiKnfwbtvZN1COce0Ht2Uow9js=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 02:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8c:03:f8:4b:a5:35:bf:ac:dc:99:a3:94:dc:70:e7:d7:c8:75:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Aug 10 01:22:16 2025 GMT
            Not After : Aug 11 02:18:16 2025 GMT
        Subject: CN=862DDA2CF9F997E41AB7467CBC972E5BB1DC1341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:27:0e:59:41:68:2c:07:22:cb:34:b1:1e:d4:
                    76:e3:70:a0:0a:1e:62:c5:bc:97:a9:31:f9:3f:3b:
                    b8:50:18:a1:52:05:45:bc:2c:30:18:e6:63:a3:e5:
                    9e:cf:93:34:d7:f6:0f:cd:fc:86:5a:cc:06:74:07:
                    6d:d4:41:38:19:d2:62:04:87:ee:39:ae:a5:ce:f2:
                    2f:9a:ff:f5:ad:c5:df:62:10:9c:5e:1a:88:8f:aa:
                    e7:e2:8b:ea:cd:a1:89:dc:07:15:1b:cb:11:42:7e:
                    8f:40:bc:22:35:7d:94:cf:b9:6a:d5:34:b9:28:a6:
                    f2:9c:b5:81:e2:be:92:88:9f:b1:05:f2:c5:1c:51:
                    08:f1:f5:91:ad:aa:17:ae:1a:1f:20:f0:80:04:06:
                    61:60:bd:40:d4:9e:23:cb:15:02:b9:73:8a:2a:ea:
                    39:8e:42:90:ea:90:09:7a:09:53:de:41:e6:04:de:
                    7e:8d:05:b0:7e:37:cc:dd:ae:9f:56:a1:36:75:eb:
                    25:ea:d9:a0:0e:cd:d7:7d:da:61:d6:72:5a:f5:13:
                    cc:9b:cf:e6:25:eb:a5:aa:62:44:a4:7e:aa:db:43:
                    bf:b5:c5:7c:39:63:48:42:b0:af:4a:8c:76:f9:c5:
                    ee:36:c1:78:c1:0e:00:91:22:da:17:49:b7:6f:3c:
                    31:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2D:DA:2C:F9:F9:97:E4:1A:B7:46:7C:BC:97:2E:5B:B1:DC:13:41
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:de:7c:7f:2c:eb:9b:1d:fc:ca:9e:e9:0c:67:54:da:15:e7:
         85:5f:54:17:25:65:e9:da:fb:5a:f6:b2:e4:91:4f:32:78:87:
         45:a3:92:1c:f1:9c:b8:fe:4c:21:12:b9:3a:ac:2f:49:a5:9c:
         6c:f9:a4:b1:72:27:8c:35:1f:d7:ee:3e:98:99:4c:e6:4d:75:
         83:41:03:2c:af:63:fd:d9:3f:8e:08:dd:29:b8:2a:75:8e:ef:
         03:41:26:eb:7b:f8:32:84:cf:21:50:5e:25:c8:48:0e:34:ba:
         ee:f3:3a:df:e9:d2:52:74:4b:84:35:e8:a8:53:44:85:7b:f4:
         4b:b5:61:a9:0e:a0:47:7e:de:f4:9c:ee:10:6d:38:a6:7f:60:
         84:c5:58:91:23:38:ba:a9:fd:2a:d3:17:ab:bf:3f:cb:cd:c5:
         12:82:e9:e7:e3:3a:5e:11:b4:64:92:17:e7:8c:49:53:e1:e8:
         77:41:04:fd:d8:03:7c:61:fd:7f:12:9f:93:b0:87:d1:ba:50:
         ea:8a:ce:18:f9:62:a7:92:d5:c6:d4:4a:c9:f6:b0:34:a1:56:
         ca:b5:67:61:1b:ce:aa:16:f5:5e:ee:ea:4c:52:cb:70:1d:02:
         5a:85:d3:9b:31:e5:c9:9b:00:00:32:3a:38:5a:d9:5a:0c:a5:
         f3:19:eb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:41:20 2025 by rpki-client