
$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File: E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier: IDmt8oXvhbfcK+cI/tHcALJrKs9BHk4uUnBH+xPD5/k=
Subject key identifier: 84:58:AB:5D:43:1A:D6:6E:CA:68:16:C9:EC:35:6E:27:4C:25:C4:05
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer: /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial: 4BE348C9D0D67223E04F2D3BAA8378721BDEDD37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number: 087B
Signing time: Fri 17 Apr 2026 01:36:32 +0000
Manifest this update: Fri 17 Apr 2026 01:31:32 +0000
Manifest next update: Sat 18 Apr 2026 04:17:32 +0000
Files and hashes: 1: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: Htu/V2y38yOKGvQGIl/2tyBeGdGkz4OS4hYU0pDILN8=)
2: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: 4pYlh/OT4LG+Q0qsenBszj7xv0ft6rJjxBMe9B061DA=)
3: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: 3WgGrlxaBO9Ar4c9GWgQ8/GsIn0hvSdwAUxUpv/ynYU=)
4: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: G84m2N1G+TVoj6GKSFRUIddzsWwuDvGcho5tXDH5RJo=)
5: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: l5CeHNLX4OcayLMVYXXsTREShlMAAW9Qd+Wguhd8yNE=)
6: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: W0T6w63WKR9io27F0+3ASBqM/TU19GJIeZtf1akjnMk=)
7: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: wCwDW1j5iZbyETk3GvAh7vVDQGfVJAJJ8jdYCDhodm0=)
8: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: dE4bGlsMCdjov1or8sc0opE29kEBsHxvokP2UtbRWag=)
9: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: MvuQjiML9fPNQJaOv1xhkbVdEsuIF5gN0yK0yJ0k8cQ=)
10: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: pVI7zwVJ3eFI6cvnEg0lfUzCoaycVAOPNZXkjyp1F20=)
11: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: aTsr7S6UBsL6VIBm3wL7fdiYpTPk035liHyUU7yat7U=)
12: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: 0O+3MdkaNltIobwAkM5RP52uTwvWhiqsqlMkm4meRLg=)
13: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: NKj7/sWfdpunwWe+rIAS24n4snm54JrLQ/b+EqozKvw=)
14: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: T2g8N5/r0n9+AFvisfdLDm8qvrUNtqSonA48EgOSxAo=)
15: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: cwa8Vg+Uq+7/lMmS8MPpZ0CwbXc3yZgnHJXtf96ZYGk=)
16: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: s/pH0SHC4iBtM2isI0BGDvrzKx3Enp130LjtabBklX8=)
17: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: jHmsGnIx5S5BnpJ8LEdP4ssJ3+QbRLS8foBKmccCWWA=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 04:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e3:48:c9:d0:d6:72:23:e0:4f:2d:3b:aa:83:78:72:1b:de:dd:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Validity
Not Before: Apr 17 01:31:32 2026 GMT
Not After : Apr 18 04:17:32 2026 GMT
Subject: CN=8458AB5D431AD66ECA6816C9EC356E274C25C405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:62:19:92:6a:02:c4:10:1e:6a:3d:72:49:
02:86:b0:63:d2:7a:be:6e:25:94:c3:15:0d:e1:79:
ad:1c:9c:98:79:b0:d2:b8:9f:30:56:57:18:4d:9c:
c9:fa:91:b4:1e:48:65:d4:5a:5b:22:e7:80:6a:b9:
2e:94:48:ec:af:8c:3d:73:1d:19:95:15:7f:b3:b1:
a9:4d:f9:86:62:1e:7d:63:d0:14:45:67:6d:be:93:
2d:6a:0a:c7:31:ac:44:cd:ee:b5:6c:89:12:3b:0d:
6a:30:42:4d:1e:fc:f0:ae:b8:26:3f:83:20:08:ae:
2f:b3:de:4a:37:6a:97:a0:3f:6d:19:70:a9:7e:b8:
70:c1:5f:9d:5b:ca:1f:8e:59:43:f7:44:4f:b8:0b:
45:0e:22:8d:b0:1d:60:ca:56:a5:be:25:58:c4:fb:
8a:09:db:9f:30:74:32:3a:c1:18:65:9f:71:4b:2b:
65:79:d1:32:3c:3e:c9:14:97:fc:96:6c:7a:1f:ae:
1b:df:c2:01:d2:60:2b:9a:9c:00:59:28:de:64:78:
6a:40:6d:52:4a:a5:65:0a:22:94:fc:02:dc:e3:ed:
42:f7:54:64:cb:af:f7:27:fb:ff:c5:0c:67:aa:76:
da:32:50:98:23:a0:51:44:b0:0f:e8:8d:6c:3f:61:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:58:AB:5D:43:1A:D6:6E:CA:68:16:C9:EC:35:6E:27:4C:25:C4:05
X509v3 Authority Key Identifier:
keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b6:6f:ef:02:02:1e:41:9a:46:11:cc:0a:87:ac:7f:e9:4c:
1a:38:6c:fd:d5:6c:a3:73:6f:23:3e:f1:59:b5:f2:67:bc:c4:
cc:99:35:9a:ee:41:7a:8d:06:66:f5:1d:62:7b:8c:e9:0b:e8:
12:9d:92:50:2a:e8:39:a8:23:32:23:59:aa:8f:11:0b:a6:7e:
3e:92:04:bf:25:a9:46:bd:70:06:fe:45:2f:4f:63:79:4b:a1:
ce:48:57:cd:26:98:65:b4:c1:06:84:7d:99:f0:fb:cb:56:2f:
0a:7c:30:42:2e:c5:28:21:0a:91:77:82:c9:bb:83:a0:17:62:
33:b2:f4:6b:6a:c7:31:68:e6:ca:39:3a:2e:72:e7:f4:18:7c:
bf:c2:84:33:85:fa:17:51:c2:63:19:cb:50:6f:5a:30:12:3b:
bd:83:e5:7e:67:0d:05:ce:43:b0:c3:2f:45:cb:db:6b:88:20:
2d:40:07:74:14:88:bd:86:34:f5:62:8c:ae:5f:6d:a2:a1:f6:
92:06:73:39:49:7d:9a:83:fb:e6:63:5c:2b:81:d3:a5:b4:db:
23:80:f1:26:5c:70:83:3d:68:ca:a1:b3:47:ac:0f:4a:09:23:
c1:82:f8:b5:30:ce:f1:72:d8:f4:f8:de:33:8c:49:5d:0f:43:
e5:ff:3f:55
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUS+NIydDWciPgTy07qoN4chve3TcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODFGQzQwMDAwMTEwLwYDVQQFEyhFMTNENzc0NEIy
MTU2RTQxNTBBMUFGNUQ3MzJFMkExMDk5NEQ4NzI5MB4XDTI2MDQxNzAxMzEzMloX
DTI2MDQxODA0MTczMlowMzExMC8GA1UEAxMoODQ1OEFCNUQ0MzFBRDY2RUNBNjgx
NkM5RUMzNTZFMjc0QzI1QzQwNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK9hYhmSagLEEB5qPXJJAoawY9J6vm4llMMVDeF5rRycmHmw0rifMFZXGE2c
yfqRtB5IZdRaWyLngGq5LpRI7K+MPXMdGZUVf7OxqU35hmIefWPQFEVnbb6TLWoK
xzGsRM3utWyJEjsNajBCTR788K64Jj+DIAiuL7PeSjdql6A/bRlwqX64cMFfnVvK
H45ZQ/dET7gLRQ4ijbAdYMpWpb4lWMT7ignbnzB0MjrBGGWfcUsrZXnRMjw+yRSX
/JZseh+uG9/CAdJgK5qcAFko3mR4akBtUkqlZQoilPwC3OPtQvdUZMuv9yf7/8UM
Z6p22jJQmCOgUUSwD+iNbD9hYucCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSEWKtd
QxrWbspoFsnsNW4nTCXEBTAfBgNVHSMEGDAWgBThPXdEshVuQVChr11zLioQmU2H
KTAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzU2L0UxM0Q3NzQ0QjIxNTZFNDE1MEExQUY1RDcz
MkUyQTEwOTk0RDg3MjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyLzRUMTNSTElWYmtGUW9hOWRjeTRxRUpsTmh5ay5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNTYvRTEzRDc3NDRCMjE1NkU0MTUwQTFBRjVENzMyRTJB
MTA5OTREODcyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJG2b+8CAh5BmkYRzAqHrH/pTBo4bP3VbKNz
byM+8Vm18me8xMyZNZruQXqNBmb1HWJ7jOkL6BKdklAq6DmoIzIjWaqPEQumfj6S
BL8lqUa9cAb+RS9PY3lLoc5IV80mmGW0wQaEfZnw+8tWLwp8MEIuxSghCpF3gsm7
g6AXYjOy9GtqxzFo5so5Oi5y5/QYfL/ChDOF+hdRwmMZy1BvWjASO72D5X5nDQXO
Q7DDL0XL22uIIC1AB3QUiL2GNPVijK5fbaKh9pIGczlJfZqD++ZjXCuB06W02yOA
8SZccIM9aMqhs0esD0oJI8GC+LUwzvFy2PT43jOMSV0PQ+X/P1U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:21 2026 by rpki-client