Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          aip0A+fjRDxCeCZ0lzOUR9pCJQV1/Db259V9atObWdQ=
Subject key identifier:   70:A9:A4:C8:5D:76:A6:84:78:89:80:02:75:CF:D0:1F:AD:13:DB:6A
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       14721CF7F9477614E0287286EEEA068176D47207
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          06CD
Signing time:             Tue 17 Jun 2025 17:08:03 +0000
Manifest this update:     Tue 17 Jun 2025 17:03:03 +0000
Manifest next update:     Wed 18 Jun 2025 17:10:03 +0000
Files and hashes:         1: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: tWRnU+tdEJIxCaDFfPwNfAoTd6uvr3uzZ5QAJ9M+Zng=)
                          2: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=)
                          3: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=)
                          4: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: z33pDE1uVCQz/+rMUZxr2CrKllnXqcBIx2p2sSpgt1w=)
                          5: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: Urm4fJQNtDp6SIxaK4P3H3Ws3eyWvAIY2xosgFCtd8I=)
                          6: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: qBNNAhrcYn7+7C6H5Usnl0BSwa+8x/tgu9RF6Ut6QGA=)
                          7: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +eDM5ZsnYy/K8Vcs+UsJ0vBbFc9QK/+4cHvdTH8CcFY=)
                          8: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=)
                          9: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=)
                          10: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: PZcihi+tKuobULExyy+RldrR5ZxGFpEQTkOgUfpHPaE=)
                          11: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=)
                          12: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
                          13: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: 5IN1mBons6emGRgnc66Qgb95UVAyOW4z9AvaGMzvRMM=)
                          14: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: ymAOwS4PLKpnSnnV8/IOAQp6MUyltwBjY+QUE6aswIU=)
                          15: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY=)
                          16: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=)
                          17: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: oAvLVEZUCqPZSKjbNm78EONoYmzYyZ6cmVQyo3qOyXU=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 17:10:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:72:1c:f7:f9:47:76:14:e0:28:72:86:ee:ea:06:81:76:d4:72:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: Jun 17 17:03:03 2025 GMT
            Not After : Jun 18 17:10:03 2025 GMT
        Subject: CN=70A9A4C85D76A6847889800275CFD01FAD13DB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f5:16:af:f6:36:56:c6:65:67:51:f1:cb:81:
                    3c:c6:de:45:64:68:f8:5e:e4:b7:bb:6a:eb:76:b5:
                    64:22:d1:64:d4:fc:25:96:fa:3e:a9:70:dd:a2:6d:
                    8f:69:6a:45:c3:82:a1:1b:e9:22:ec:a7:46:6b:bb:
                    56:6a:25:cb:0b:8a:65:c9:1e:12:1f:69:6f:13:d1:
                    71:6b:08:13:f7:65:37:6a:fb:3f:ed:bc:8f:95:5e:
                    54:13:c9:23:72:9f:29:b9:09:d0:38:b5:b2:79:9f:
                    d3:b3:e9:c7:40:d4:c7:0a:cd:ad:d4:7a:f5:7b:6f:
                    b4:2b:82:d7:97:13:59:1d:72:80:e5:75:d2:c7:61:
                    10:b0:d8:21:46:20:6d:ae:bc:6e:42:6a:23:e0:eb:
                    e0:d7:bf:26:5c:44:1c:e4:52:11:4f:6c:d3:1f:f7:
                    8d:0e:be:e5:14:00:93:8c:fa:34:34:71:a1:7a:21:
                    fe:ac:f1:b7:d0:14:e9:62:60:ef:49:a7:39:51:29:
                    cf:8f:8f:de:5a:20:78:fd:06:9a:9b:2c:53:4e:cb:
                    7b:39:1b:47:e7:45:f9:1e:9e:df:87:e1:80:60:47:
                    6a:ac:f7:2d:65:db:9a:d0:24:b0:f0:c1:d7:59:74:
                    07:b5:da:61:30:47:ac:12:38:cd:dc:ce:b7:58:66:
                    f6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A9:A4:C8:5D:76:A6:84:78:89:80:02:75:CF:D0:1F:AD:13:DB:6A
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e4:f5:9e:18:29:d2:66:f7:bd:dc:b6:ec:8d:1a:4b:22:6d:
         6c:19:db:bf:53:51:fd:e4:d3:fa:d3:0d:a9:7c:8c:bb:4f:e8:
         8c:50:ba:16:00:a5:ed:b9:ac:7b:e7:73:71:a3:ea:db:17:a9:
         e9:23:c5:49:08:63:e3:69:d6:cd:57:c0:ea:08:fa:fc:3b:b6:
         61:04:7f:8e:d9:60:20:59:b5:af:a5:83:f1:17:05:ad:05:1e:
         ba:db:48:e1:81:c3:00:93:7d:2b:31:fc:05:c8:c1:85:93:ba:
         31:2f:d9:a7:20:e6:a2:48:4c:3f:77:97:b9:9e:c3:20:f1:f9:
         c8:dc:cb:e6:4a:8d:b1:65:85:d0:81:7a:77:ff:ce:be:b3:38:
         b5:09:bc:38:a6:a5:74:11:e9:bd:5a:54:6a:80:20:9b:24:f7:
         ba:35:cc:67:65:9a:9d:da:41:b4:45:88:39:c9:20:6d:b7:5f:
         cd:0e:09:12:a3:b0:df:2c:2e:d2:17:d1:4c:75:74:44:8d:25:
         15:db:55:e0:8c:d7:f5:c5:3e:30:70:74:fe:a2:a1:80:e1:74:
         7f:07:05:b7:38:7f:9c:8c:57:20:7e:81:5d:c5:55:c6:3e:10:
         4d:5f:ff:15:45:26:ba:e6:d9:ab:be:d5:39:b5:e5:09:cd:c0:
         2c:fb:3b:6d
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUFHIc9/lHdhTgKHKG7uoGgXbUcgcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy
MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI1MDYxNzE3MDMwM1oX
DTI1MDYxODE3MTAwM1owMzExMC8GA1UEAxMoNzBBOUE0Qzg1RDc2QTY4NDc4ODk4
MDAyNzVDRkQwMUZBRDEzREI2QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALL1Fq/2NlbGZWdR8cuBPMbeRWRo+F7kt7tq63a1ZCLRZNT8JZb6Pqlw3aJt
j2lqRcOCoRvpIuynRmu7VmolywuKZckeEh9pbxPRcWsIE/dlN2r7P+28j5VeVBPJ
I3KfKbkJ0Di1snmf07Ppx0DUxwrNrdR69XtvtCuC15cTWR1ygOV10sdhELDYIUYg
ba68bkJqI+Dr4Ne/JlxEHORSEU9s0x/3jQ6+5RQAk4z6NDRxoXoh/qzxt9AU6WJg
70mnOVEpz4+P3logeP0GmpssU07LezkbR+dF+R6e34fhgGBHaqz3LWXbmtAksPDB
11l0B7XaYTBHrBI4zdzOt1hm9t8CAwEAAaOCAfUwggHxMB0GA1UdDgQWBBRwqaTI
XXamhHiJgAJ1z9AfrRPbajAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H
KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz
MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB
MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAETk9Z4YKdJm973ctuyNGksibWwZ279TUf3k
0/rTDal8jLtP6IxQuhYApe25rHvnc3Gj6tsXqekjxUkIY+Np1s1XwOoI+vw7tmEE
f47ZYCBZta+lg/EXBa0FHrrbSOGBwwCTfSsx/AXIwYWTujEv2acg5qJITD93l7me
wyDx+cjcy+ZKjbFlhdCBenf/zr6zOLUJvDimpXQR6b1aVGqAIJsk97o1zGdlmp3a
QbRFiDnJIG23X80OCRKjsN8sLtIX0Ux1dESNJRXbVeCM1/XFPjBwdP6ioYDhdH8H
Bbc4f5yMVyB+gV3FVcY+EE1f/xVFJrrm2au+1Tm15QnNwCz7O20=
-----END CERTIFICATE-----
Generated at Tue Jun 17 23:29:27 2025 by rpki-client