
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File: 73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier: n38+cY3rvbjDWHLo3J5ms5b1wBg5qQ4rn/9PdAZJf30=
Subject key identifier: C5:06:48:3A:06:79:46:52:02:4A:4A:F9:56:6C:4D:E7:70:4F:14:F8
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer: /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial: 72C86F92077C74C1839B44A0108ABAFB3952CB07
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number: 0AC2
Signing time: Sun 20 Sep 2026 16:59:58 +0000
Manifest this update: Sun 20 Sep 2026 16:54:58 +0000
Manifest next update: Mon 21 Sep 2026 20:25:58 +0000
Files and hashes: 1: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: ZBCvQrt9jmxCcsQ1Irb0JFGfe2l4plIaXkDcbDfGXZs=)
2: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: UyMMYJgyl5S/+C2Vxy9PXgxWC4kDr9IB/xQnnwCGBig=)
3: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
4: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: nSIq3Ktu0CtREjqXA4frLl2aTdNOk6BH2dMOLgD/0oM=)
5: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
6: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
7: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
8: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
9: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: i0gHEOuZi54dtn0c9gwqSGIvQxxKmJe2VmG69FzuOIY=)
10: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
11: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
12: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
13: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
14: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: VUC+Vpp5QxVEFVXx+JAdTcylpbuvPwxoxQKzOe38Z/U=)
15: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
16: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
17: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: O443KDcBXPbDRxuG6PuLO3bSH9BQahWXO18dF+ya0U0=)
18: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: KnEr2JcfCkm4uZHEYfVkl5NJrbwbnNPS/S5USzcSlMA=)
19: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
20: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: xYIgwW4ex6+xJ6CaUGjn9dhWXQKOdoh70ILji5G1Rzk=)
21: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
22: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
23: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: Dsx9VJmpzSaseuCHeYCnaFTlOeGZE4oYdkGCn4lHCHM=)
24: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: gZ2OK+zFhoyWuVb4XNORoQlPyUIGW8mIOyLn4pZQrvc=)
25: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: ZXfJuEppiI0US5UxkJIlLpMpRAP3GzNB4LQC0hhLDHs=)
26: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
27: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: Mg2wIxfXjW3tO2VBvXj/XzfvDJAzyErskt04GvAFuWA=)
28: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: l2YrDgY8N3dny/S0BRZTi5eLQfrERU+8yu8b0yBs2EA=)
29: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
30: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: O18AYl2sq47VjIKvw6QMduD043GYDcQde3XRzulQHTs=)
31: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
32: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: TAkMXkNkfPTnQ+SpdpLm5AvojHrZpMjE8fzKq5rJvVc=)
33: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
34: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
35: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
36: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
37: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
38: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
39: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
40: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
41: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
42: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
43: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: KNkKmNt43Q4bZljaUYBfTbNjmZcMB+LIkDDkiCG7K/0=)
44: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
45: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: YXS9uSsZ37ptPQHrpRAGjTeBmE6KquFAv1WCPOj6Ew8=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 20:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:c8:6f:92:07:7c:74:c1:83:9b:44:a0:10:8a:ba:fb:39:52:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Validity
Not Before: Sep 20 16:54:58 2026 GMT
Not After : Sep 21 20:25:58 2026 GMT
Subject: CN=C506483A06794652024A4AF9566C4DE7704F14F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:7b:ec:29:f1:fd:a3:9a:32:c6:2f:a7:13:
11:bf:b8:92:3f:7a:5d:0d:bf:e1:b7:0c:16:70:7c:
99:83:0a:dc:7c:1b:08:2a:de:a6:fe:79:0d:b0:d9:
14:45:92:a2:dc:11:6a:30:94:3e:84:7a:41:a1:c8:
c9:3b:2a:0e:30:75:5c:95:ba:84:a5:bb:c7:46:69:
bc:fa:b9:75:61:52:13:d7:be:4f:9a:fd:6c:23:7b:
75:a7:16:a5:f0:92:2d:95:86:c3:7a:87:db:a2:b5:
e8:fc:3a:c1:ef:61:4a:58:39:82:8b:94:69:94:90:
5c:9a:ab:e0:e8:cc:95:2f:51:8e:b1:cb:1c:c1:c8:
8b:9a:8b:05:30:8e:51:35:30:78:f2:b9:51:24:9a:
9d:86:d7:43:04:2b:c2:47:31:ac:59:13:c0:b9:f0:
9c:95:a9:4a:42:0e:a8:f6:3f:70:cd:e0:b5:7c:ab:
72:64:7d:aa:31:e0:4a:e9:77:3b:ac:1f:33:a3:d3:
48:de:6c:aa:0a:8c:fa:8f:4e:85:09:46:c9:00:06:
24:d2:02:85:a5:40:65:51:fb:c9:b8:09:a1:3f:4a:
70:37:42:71:04:67:06:77:32:b4:d4:99:7e:d7:33:
f7:80:3c:24:17:78:b8:05:82:0a:25:e0:bc:fb:a8:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:06:48:3A:06:79:46:52:02:4A:4A:F9:56:6C:4D:E7:70:4F:14:F8
X509v3 Authority Key Identifier:
keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:28:7a:0c:01:b4:71:63:09:49:27:1b:fc:b9:1b:74:3a:2e:
c5:7a:c0:67:ba:db:ae:61:38:9c:02:db:49:5f:59:a3:4a:69:
89:95:a1:2c:6f:f0:43:77:0f:a5:b7:86:ae:41:7a:27:19:e3:
e8:0e:40:82:0e:6a:aa:fb:75:fe:9e:6c:fb:06:26:b2:90:d7:
9f:b0:d8:9f:d6:63:0b:79:29:d0:a8:b6:e3:91:08:40:de:bc:
c4:64:ba:cb:a5:c0:40:94:5f:1c:c2:3a:b1:3a:0b:45:78:f5:
f9:36:f2:e0:f4:20:03:3b:62:55:60:17:33:c3:2d:96:c5:c4:
1d:fc:53:d7:93:e6:b4:36:f5:f5:5c:34:c8:94:c3:e8:6b:07:
86:f6:a5:68:df:bd:19:7b:04:b8:f2:ac:4a:d4:2f:ad:ce:48:
8d:62:50:84:e6:9a:11:1e:f0:86:cb:66:f9:d7:b2:95:09:02:
e7:9e:bb:87:d6:4a:41:b1:73:20:3d:20:60:c9:ec:c3:11:3b:
ac:52:6d:d6:fc:81:f6:2a:13:97:57:1a:61:95:af:9a:a9:39:
d2:c8:39:46:b9:9f:08:de:d2:e2:05:63:67:92:14:ce:8a:92:
9e:f5:d4:a2:c8:7d:cf:47:31:64:97:20:e8:b7:c6:bf:42:d0:
c7:56:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:18:40 2026 by rpki-client