Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
File:                     73683CF31A4147336D82C5218D7389B5D741DE1B.mft (raw, json)
Hash identifier:          zsjqgfWPcp9IbsRkxP1KSm58/08kHgEWJWpLX9nMvtA=
Subject key identifier:   7D:36:C8:AA:2F:24:A8:FD:DE:2F:01:2D:DC:29:6D:57:A9:BD:99:A7
Authority key identifier: 73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B
Certificate issuer:       /CN=A913250A0000/serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
Certificate serial:       2EA09CBCD3B92554B9FA4BF0A010F359D2F93B30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
Manifest number:          0B09
Signing time:             Mon 09 Nov 2026 23:58:46 +0000
Manifest this update:     Mon 09 Nov 2026 23:53:46 +0000
Manifest next update:     Wed 11 Nov 2026 01:20:46 +0000
Files and hashes:         1: 3138302e3233352e3133382e302f32342d3234203d3e2034373835.roa (hash: xJE2AqBAK4oKopcCGP6ABZXtGlBHerxLGakZVaxAyqw=)
                          2: 3130332e3139322e3232372e302f32342d3234203d3e2039333132.roa (hash: 2w+AH0IhUOm6FFsIzDcX0F34UK7lSsK7xqsvXrsuuyk=)
                          3: 34352e3132352e302e302f32322d3234203d3e2039333132.roa (hash: SN2nhvQfS2OfPTVFsUBXSCqZpaMV5rj1gnmcVemdcvQ=)
                          4: 323430333a326338303a3a2f33312d3438203d3e2036323333.roa (hash: 40V4xCSkVeRXlhpDYvWOvkf2jeDzZUEO7yPFkacKBrc=)
                          5: 3130332e35362e35322e302f32322d3234203d3e2033323538.roa (hash: bAt1nsusFLM+ZCRZET+QEw5B1gUZV4Rf5h/Igv5F1vI=)
                          6: 3130332e3139322e3232362e302f32342d3234203d3e2036313334.roa (hash: Dsx9VJmpzSaseuCHeYCnaFTlOeGZE4oYdkGCn4lHCHM=)
                          7: 3130332e35362e35322e302f32322d3234203d3e2039333132.roa (hash: 6Vq2Epv09RLEy9mQ88GwW6OBiBmO24RWtHlVgplt4mE=)
                          8: 3130332e3139322e3232342e302f32322d3234203d3e2033323538.roa (hash: Slt5vsqq5UsOx6jm7IB9mJDWbBmiBM00uFA5aoC89U8=)
                          9: 34352e3132342e3131322e302f32322d3234203d3e2039333132.roa (hash: V38UxP1QF8Du/xK16V8Wo1mLpNmUo5bmpOmOE+5agb8=)
                          10: 323430333a326338303a3a2f33312d3438203d3e2039333132.roa (hash: qUo2BBvVbYW2cyZTPv+IlzNoJZ4x3p1VdEEE2hIFoCk=)
                          11: 3130332e3139322e3232342e302f32322d3234203d3e2038383838.roa (hash: Y5xk0HgmU5B6rsHLMJ2S0rdGq1nh0JqmDrpfTZtDSYU=)
                          12: 3138302e3233352e3133362e302f32342d3234203d3e2039333132.roa (hash: 7PCH1M8iZWZAD+sIIZW/znFaui9K+FOcimz0S9d3EMg=)
                          13: 34352e3132342e3131322e302f32322d3234203d3e2033323538.roa (hash: c32CtCZO4oZ+NW3XaEk7SjtFrVeduaenb5wMIP1c/YM=)
                          14: 34352e3131362e31322e302f32322d3234203d3e2039333132.roa (hash: 0LOaeTf9UfSrZzlL5KsEYfVHovJu8XkRrO407XD8z6c=)
                          15: 34352e3131362e31322e302f32322d3234203d3e2033323538.roa (hash: UHKVWMFzMVyFVqSza93k1ckY7kakeCnMqn4ivbLVC5c=)
                          16: 3135372e3131392e3130302e302f32322d3234203d3e2033323538.roa (hash: sc69R9vAdanZQ+NbTnaF2aGiBUb0ehbokEhu8uw4L4g=)
                          17: 34352e3132352e302e302f32322d3234203d3e2038383838.roa (hash: nR9V1a8wTcpVYLCSYWjeNRG+Eboo9U0hctABbOhg+QQ=)
                          18: 73683CF31A4147336D82C5218D7389B5D741DE1B.crl (hash: 7NaBUMPYoAHzkS04psQbi31EY6BFIwSUPYOVPc/VUjc=)
                          19: 34352e3131362e31342e302f32342d3234203d3e2034373835.roa (hash: jjkj9tX7iQXLfL9CK67ssC2u6kBIQPkWD/Qwf7orFrY=)
                          20: 3135372e3131392e3130302e302f32322d3234203d3e2038383838.roa (hash: /CYLvURw59IiLHUhysjwJTIil0oBYGTnjEfLaY9H+LE=)
                          21: 34352e3132342e3131322e302f32322d3234203d3e2038383838.roa (hash: dxeh2qMmFE7v1GJtBi0G5NcAZZ1Lw1ojmFzrgDpNaqU=)
                          22: 323430333a326338303a3a2f33312d3438203d3e2038383838.roa (hash: OBV4ZFJLvTdSFuHk3fjTcPXliInxv1toV3WVumwu7OQ=)
                          23: 323430333a326338303a3a2f33312d3438203d3e2033323538.roa (hash: 079Zs1bGsEEe2f4E0yXRYt9WQrId6b0Ze9cnyOpVnbU=)
                          24: 323430333a326338303a3a2f33312d3438203d3e2034373835.roa (hash: kbogsXqOD+Xtq1KsmAkNClD6hxFLPcOANdjbuRQcuEI=)
                          25: 3130332e3139322e3232342e302f32342d3234203d3e2039333132.roa (hash: SuGChQDA8FP6eDN6mrRxwBO3SYTXbO4KgZtM3G3Wpo4=)
                          26: 323430333a326338303a3a2f33312d3438203d3e2033323134.roa (hash: wXhcS+achu+xQLcb1LqvmjN8NsDtOV1kQAADRCdvlQA=)
                          27: 34352e3131362e31332e302f32342d3234203d3e2034373835.roa (hash: Kib1vvyhtYxXaoU6EqWmAoLKeWKHqzH+09E9ysj6FqM=)
                          28: 3138302e3233352e3133372e302f32342d3332203d3e2039333132.roa (hash: w4pKm5N/rDBRMwugzh3tQ3TgLHB/D7bVPmkVqLJmQ10=)
                          29: 3138302e3233352e3133362e302f32322d3332203d3e2039333132.roa (hash: cmFyy+88J8Y/efGG6XIznmPhDb8QWFT+0UT0MLEAxN8=)
                          30: 323430333a326338313a313131303a3a2f34382d3438203d3e20323132353132.roa (hash: u+O33ciWAk1dD0a7moGyfiT9OhXEB36SeFnpi3eT3uI=)
                          31: 34352e3132352e302e302f32322d3234203d3e2033323538.roa (hash: SyfEG7gmZIZn63hFp1VFWA0sIhHtgU1u86ZSrexTPeE=)
                          32: 3138302e3233352e3133362e302f32322d3234203d3e2033323538.roa (hash: /e78cwnOUM92thWeIGla2ZcfpRkvlxOIP2VUYR4Z/sI=)
                          33: 34352e3131362e31322e302f32322d3234203d3e2038383838.roa (hash: OKPuGpLUqy2yFELi5wqT2BYeYGgg3O+zUqfSWLISZL0=)
                          34: 323430333a326338303a3a2f33312d3438203d3e2033323034.roa (hash: Rce0XXA/78XUmVopfU+70pvOR6jCGUBkYmrLSgHpLBk=)
                          35: 3138302e3233352e3133372e302f32342d3332203d3e2033323538.roa (hash: SC1ROahhu5b/WlirfJMBS1lnnp2yNpJw/qZ1H/qmHoA=)
                          36: 3130332e3139322e3232342e302f32322d3234203d3e2039333132.roa (hash: zRDKe5BfPJyhdZH7Xfc0Y/MF+sHhLqCVKJhXYaB1JLc=)
                          37: 3135372e3131392e3130302e302f32322d3234203d3e2036323333.roa (hash: xcBvmyb3W2lEeOsRnPbsSXmrWKXmJ7BMKd3I+HHRKaQ=)
                          38: 3130332e35362e35332e302f32342d3234203d3e2038383838.roa (hash: 0OUfHZje7mzMPQCCx1u2DnERXr58XyIIXXPaPiLZjkQ=)
                          39: 3130332e3139322e3232362e302f32342d3234203d3e20313337343433.roa (hash: ZBCvQrt9jmxCcsQ1Irb0JFGfe2l4plIaXkDcbDfGXZs=)
                          40: 3130332e3139322e3232352e302f32342d3234203d3e2039333132.roa (hash: JEFnXp5wAzjNpCsHb9+jXTULusKKyIPJYkAF5GHq1d8=)
                          41: 3130332e35362e35322e302f32322d3234203d3e2038383838.roa (hash: WRCT4O2uRBdNWdzM4UC9aL+sFKMOjyPJI66H1PJD9uA=)
                          42: 3135372e3131392e3130302e302f32322d3234203d3e2039333132.roa (hash: 7gdzP7mh3pAdSoN304WGSe1lpBsarX9cg8LaGZoZu84=)
                          43: 3138302e3233352e3133362e302f32322d3234203d3e2038383838.roa (hash: 9DIb3Y4dolSmPH25z/ti1YL78unGobr+URauHcbsqv0=)
                          44: 3130332e35362e35352e302f32342d3234203d3e2034373835.roa (hash: mdQoEIV6yOmesEfv/VwO8qQ/9hODN3mm0W85clUVWzI=)
                          45: 323430333a326338303a3a2f33312d3438203d3e20393439.roa (hash: H70GzSzb8X6zxUKqcbYVjky6SBTLB6MwkH654o7uqis=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl
                          rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Nov 2026 01:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a0:9c:bc:d3:b9:25:54:b9:fa:4b:f0:a0:10:f3:59:d2:f9:3b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913250A0000, serialNumber=73683CF31A4147336D82C5218D7389B5D741DE1B
        Validity
            Not Before: Nov  9 23:53:46 2026 GMT
            Not After : Nov 11 01:20:46 2026 GMT
        Subject: CN=7D36C8AA2F24A8FDDE2F012DDC296D57A9BD99A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:ec:14:91:32:ea:cd:ad:29:f3:38:ab:2d:
                    72:96:dc:0c:56:ee:5a:b5:74:a3:1a:43:8d:47:37:
                    38:19:0a:d0:76:7e:2c:35:9c:b4:92:14:b3:6e:7a:
                    7c:b3:f8:91:5a:1c:0c:ad:59:cf:63:b9:fe:9c:8c:
                    93:1c:02:23:9d:74:d3:5b:84:cc:23:69:f5:d5:43:
                    9a:37:7b:98:dc:4f:e3:0a:4f:5e:fb:58:54:2f:20:
                    77:ce:06:9d:6a:97:f8:bf:4a:1c:38:47:3a:d5:d5:
                    2f:05:97:8e:ca:1e:7e:99:99:f3:6e:6e:90:8c:3a:
                    d6:01:d1:bb:5c:7a:69:a6:9a:41:8a:d2:30:8f:a6:
                    07:11:87:5d:7c:46:c2:61:0f:85:10:09:9e:d5:7a:
                    4d:d0:72:d6:9a:93:f1:70:6e:ba:fc:f4:8a:11:c3:
                    f3:c2:bf:1e:5c:14:41:a4:53:fa:70:da:80:e9:3c:
                    f4:3b:0d:8f:48:76:2d:15:9c:45:a5:10:37:24:39:
                    0e:4c:75:72:1b:bb:88:e2:38:a6:29:da:7c:6e:aa:
                    14:be:e3:39:7b:2f:14:54:62:8c:56:36:3f:fa:97:
                    fb:23:5d:12:09:f0:85:25:19:22:4c:da:a9:af:6e:
                    0a:b6:9e:77:8a:f9:97:3a:b1:42:16:98:5c:39:41:
                    19:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:C8:AA:2F:24:A8:FD:DE:2F:01:2D:DC:29:6D:57:A9:BD:99:A7
            X509v3 Authority Key Identifier:
                keyid:73:68:3C:F3:1A:41:47:33:6D:82:C5:21:8D:73:89:B5:D7:41:DE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c2g88xpBRzNtgsUhjXOJtddB3hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/42/73683CF31A4147336D82C5218D7389B5D741DE1B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:f2:f7:37:78:91:5e:0f:30:96:e5:25:56:c5:a1:4b:ee:22:
         13:1f:69:a6:89:f7:db:42:7b:c4:d9:0c:27:f3:97:21:7a:23:
         e9:ac:f3:d7:02:ba:cf:95:f0:40:88:15:17:f8:1a:f1:91:04:
         c7:5e:5c:d6:c3:a4:c4:f9:48:4b:a9:2c:8e:cb:d1:7e:90:9b:
         ed:03:eb:67:78:3d:0d:12:34:2b:af:c5:dc:76:96:17:63:f3:
         79:56:3c:1f:56:36:ff:6b:55:cd:1b:70:1f:0e:80:37:9f:ac:
         56:a0:64:7a:b9:a2:01:21:f2:14:b2:4e:68:bd:93:06:12:16:
         c5:a5:d9:74:ef:c3:30:cc:b4:fe:4d:ee:60:40:b6:f9:f7:75:
         17:d3:f5:82:59:e2:0d:85:76:9c:ac:c0:30:79:4b:8a:81:8c:
         72:b3:9e:0f:e5:15:d5:f5:73:30:af:65:66:c3:70:62:02:be:
         6e:ba:13:28:b4:50:c8:83:a3:2d:6f:71:c2:d7:39:26:da:63:
         ec:1e:8f:f0:fd:05:9a:d9:b1:7b:5e:01:44:43:dd:e5:4d:6e:
         34:ba:56:c5:14:53:03:b5:fa:0f:03:39:4f:53:0f:ad:62:fd:
         db:47:ae:94:19:ea:49:72:25:2c:bc:72:f7:c0:a6:8d:d2:53:
         55:38:99:b3
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIULqCcvNO5JVS5+kvwoBDzWdL5OzAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMzI1MEEwMDAwMTEwLwYDVQQFEyg3MzY4M0NGMzFB
NDE0NzMzNkQ4MkM1MjE4RDczODlCNUQ3NDFERTFCMB4XDTI2MTEwOTIzNTM0NloX
DTI2MTExMTAxMjA0NlowMzExMC8GA1UEAxMoN0QzNkM4QUEyRjI0QThGRERFMkYw
MTJEREMyOTZENTdBOUJEOTlBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALHH7BSRMurNrSnzOKstcpbcDFbuWrV0oxpDjUc3OBkK0HZ+LDWctJIUs256
fLP4kVocDK1Zz2O5/pyMkxwCI51001uEzCNp9dVDmjd7mNxP4wpPXvtYVC8gd84G
nWqX+L9KHDhHOtXVLwWXjsoefpmZ825ukIw61gHRu1x6aaaaQYrSMI+mBxGHXXxG
wmEPhRAJntV6TdBy1pqT8XBuuvz0ihHD88K/HlwUQaRT+nDagOk89DsNj0h2LRWc
RaUQNyQ5Dkx1chu7iOI4pinafG6qFL7jOXsvFFRijFY2P/qX+yNdEgnwhSUZIkza
qa9uCraed4r5lzqxQhaYXDlBGfUCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBR9Nsiq
LySo/d4vAS3cKW1Xqb2ZpzAfBgNVHSMEGDAWgBRzaDzzGkFHM22CxSGNc4m110He
GzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzQyLzczNjgzQ0YzMUE0MTQ3MzM2RDgyQzUyMThE
NzM4OUI1RDc0MURFMUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL2MyZzg4eHBCUnpOdGdzVWhqWE9KdGRkQjNocy5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNDIvNzM2ODNDRjMxQTQxNDczMzZEODJDNTIxOEQ3Mzg5
QjVENzQxREUxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAPy9zd4kV4PMJblJVbFoUvuIhMfaaaJ99tC
e8TZDCfzlyF6I+ms89cCus+V8ECIFRf4GvGRBMdeXNbDpMT5SEupLI7L0X6Qm+0D
62d4PQ0SNCuvxdx2lhdj83lWPB9WNv9rVc0bcB8OgDefrFagZHq5ogEh8hSyTmi9
kwYSFsWl2XTvwzDMtP5N7mBAtvn3dRfT9YJZ4g2FdpyswDB5S4qBjHKzng/lFdX1
czCvZWbDcGICvm66Eyi0UMiDoy1vccLXOSbaY+wej/D9BZrZsXteAURD3eVNbjS6
VsUUUwO1+g8DOU9TD61i/dtHrpQZ6klyJSy8cvfApo3SU1U4mbM=
-----END CERTIFICATE-----
Generated at Tue Nov 10 05:36:55 2026 by rpki-client