
$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File: 5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier: 5IDJTTLbyb8kjjGB9u01kE4VxBZJUDa82DIlTbGieP4=
Subject key identifier: C2:62:59:0C:C8:7D:4A:AC:ED:94:86:2B:AB:29:86:AB:94:22:AD:CE
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer: /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial: 1A8F7BA3BBAB08D903CE074007547FED449569AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number: 095C
Signing time: Mon 09 Nov 2026 00:33:46 +0000
Manifest this update: Mon 09 Nov 2026 00:28:46 +0000
Manifest next update: Tue 10 Nov 2026 04:06:46 +0000
Files and hashes: 1: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
2: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
3: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
4: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
5: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
6: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
7: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
8: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
9: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
10: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
11: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
12: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
13: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
14: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: eV+0uTi+F4LE6TsQvYB+BWoa4iXgZP6sf4n3jpX3z/0=)
15: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
16: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
17: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
18: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
19: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
20: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
21: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
Validation: OK
Signature path: rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 04:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:8f:7b:a3:bb:ab:08:d9:03:ce:07:40:07:54:7f:ed:44:95:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Validity
Not Before: Nov 9 00:28:46 2026 GMT
Not After : Nov 10 04:06:46 2026 GMT
Subject: CN=C262590CC87D4AACED94862BAB2986AB9422ADCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b9:a6:50:2c:41:16:14:fe:d6:a4:30:1c:99:
80:d0:72:40:e0:83:bb:d2:36:76:3d:96:34:b4:b0:
ee:a2:d8:b5:22:3b:f6:62:db:3e:bc:14:1d:93:a0:
d1:2a:10:38:f4:42:08:73:00:45:06:a7:e0:e1:05:
eb:45:f5:05:3a:57:39:7c:3a:c5:be:17:95:bd:61:
94:20:20:3d:6e:42:04:32:13:8c:d5:13:10:7b:c1:
98:94:89:cd:7f:f8:dd:61:86:8f:27:64:81:d9:04:
bf:76:4c:45:d7:be:07:00:b5:9f:51:56:07:86:51:
fb:8d:a0:e2:ed:a2:72:2d:15:55:37:55:1d:bb:b9:
93:b9:ed:8b:bb:00:24:2a:80:aa:71:89:25:bc:cb:
b8:c4:b3:31:8f:66:fa:c7:c4:31:59:a1:69:35:a6:
5c:0a:ad:8c:e7:ce:99:9a:04:e5:d7:6a:93:db:b7:
32:8c:8e:04:87:65:a9:41:e7:7a:05:1e:fb:5c:53:
de:ab:5d:ab:63:25:92:37:f0:02:da:e9:39:31:af:
a2:37:1e:b7:7b:78:fa:3b:97:b9:4d:c8:15:c7:74:
7a:92:d7:45:1c:18:c3:49:17:1e:81:1c:fc:0b:20:
ca:83:3b:8d:ea:e0:e2:e6:5f:6d:64:1a:e7:fd:f5:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:62:59:0C:C8:7D:4A:AC:ED:94:86:2B:AB:29:86:AB:94:22:AD:CE
X509v3 Authority Key Identifier:
keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:0d:94:5f:fe:05:0c:f9:2f:35:ca:bb:c3:af:2f:44:0d:
e7:81:de:dc:36:dd:58:25:10:89:67:aa:14:14:32:4b:5a:9c:
9f:70:e0:cc:56:bc:0d:39:b6:fd:07:41:53:be:75:28:ef:6b:
25:98:ea:c4:94:47:17:15:38:d2:6c:52:46:11:4c:94:82:4d:
d3:3d:0d:6e:4d:69:3f:c3:a8:7c:3d:a1:dc:2c:d1:70:c7:68:
70:7a:d7:0a:41:34:83:40:1d:8a:96:96:a3:9f:da:d3:58:9d:
46:d1:0d:f9:35:92:98:a7:b4:8a:c0:3f:96:2c:b0:c1:7d:58:
b8:52:63:46:64:24:fc:d6:b2:39:73:b6:e7:1f:3e:42:0c:d2:
b7:31:7f:69:90:7e:ff:09:59:3a:85:f8:89:5b:41:3b:a5:f7:
ce:3e:68:4a:a4:07:89:f1:01:49:03:24:4a:9c:d1:88:be:7e:
54:82:47:49:30:e8:fe:ab:0c:0c:0e:39:ea:c6:8f:7b:de:51:
f1:96:d8:f9:d6:eb:4b:29:66:b6:fa:3e:00:2c:04:0c:57:d4:
14:1a:24:c2:12:97:19:cf:41:50:2d:48:e7:6a:77:98:04:2e:
e8:5e:d7:2e:3c:af:f5:49:fa:9d:5d:65:23:38:80:11:70:50:
77:ba:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 08:42:25 2026 by rpki-client