Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          5IDJTTLbyb8kjjGB9u01kE4VxBZJUDa82DIlTbGieP4=
Subject key identifier:   C2:62:59:0C:C8:7D:4A:AC:ED:94:86:2B:AB:29:86:AB:94:22:AD:CE
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       1A8F7BA3BBAB08D903CE074007547FED449569AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          095C
Signing time:             Mon 09 Nov 2026 00:33:46 +0000
Manifest this update:     Mon 09 Nov 2026 00:28:46 +0000
Manifest next update:     Tue 10 Nov 2026 04:06:46 +0000
Files and hashes:         1: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
                          2: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
                          3: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
                          4: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
                          5: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
                          6: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
                          7: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
                          8: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
                          9: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
                          10: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
                          11: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
                          12: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
                          13: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
                          14: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: eV+0uTi+F4LE6TsQvYB+BWoa4iXgZP6sf4n3jpX3z/0=)
                          15: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
                          16: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
                          17: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
                          18: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
                          19: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
                          20: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
                          21: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Nov 2026 04:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8f:7b:a3:bb:ab:08:d9:03:ce:07:40:07:54:7f:ed:44:95:69:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Nov  9 00:28:46 2026 GMT
            Not After : Nov 10 04:06:46 2026 GMT
        Subject: CN=C262590CC87D4AACED94862BAB2986AB9422ADCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:a6:50:2c:41:16:14:fe:d6:a4:30:1c:99:
                    80:d0:72:40:e0:83:bb:d2:36:76:3d:96:34:b4:b0:
                    ee:a2:d8:b5:22:3b:f6:62:db:3e:bc:14:1d:93:a0:
                    d1:2a:10:38:f4:42:08:73:00:45:06:a7:e0:e1:05:
                    eb:45:f5:05:3a:57:39:7c:3a:c5:be:17:95:bd:61:
                    94:20:20:3d:6e:42:04:32:13:8c:d5:13:10:7b:c1:
                    98:94:89:cd:7f:f8:dd:61:86:8f:27:64:81:d9:04:
                    bf:76:4c:45:d7:be:07:00:b5:9f:51:56:07:86:51:
                    fb:8d:a0:e2:ed:a2:72:2d:15:55:37:55:1d:bb:b9:
                    93:b9:ed:8b:bb:00:24:2a:80:aa:71:89:25:bc:cb:
                    b8:c4:b3:31:8f:66:fa:c7:c4:31:59:a1:69:35:a6:
                    5c:0a:ad:8c:e7:ce:99:9a:04:e5:d7:6a:93:db:b7:
                    32:8c:8e:04:87:65:a9:41:e7:7a:05:1e:fb:5c:53:
                    de:ab:5d:ab:63:25:92:37:f0:02:da:e9:39:31:af:
                    a2:37:1e:b7:7b:78:fa:3b:97:b9:4d:c8:15:c7:74:
                    7a:92:d7:45:1c:18:c3:49:17:1e:81:1c:fc:0b:20:
                    ca:83:3b:8d:ea:e0:e2:e6:5f:6d:64:1a:e7:fd:f5:
                    8c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:59:0C:C8:7D:4A:AC:ED:94:86:2B:AB:29:86:AB:94:22:AD:CE
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:0d:94:5f:fe:05:0c:f9:2f:35:ca:bb:c3:af:2f:44:0d:
         e7:81:de:dc:36:dd:58:25:10:89:67:aa:14:14:32:4b:5a:9c:
         9f:70:e0:cc:56:bc:0d:39:b6:fd:07:41:53:be:75:28:ef:6b:
         25:98:ea:c4:94:47:17:15:38:d2:6c:52:46:11:4c:94:82:4d:
         d3:3d:0d:6e:4d:69:3f:c3:a8:7c:3d:a1:dc:2c:d1:70:c7:68:
         70:7a:d7:0a:41:34:83:40:1d:8a:96:96:a3:9f:da:d3:58:9d:
         46:d1:0d:f9:35:92:98:a7:b4:8a:c0:3f:96:2c:b0:c1:7d:58:
         b8:52:63:46:64:24:fc:d6:b2:39:73:b6:e7:1f:3e:42:0c:d2:
         b7:31:7f:69:90:7e:ff:09:59:3a:85:f8:89:5b:41:3b:a5:f7:
         ce:3e:68:4a:a4:07:89:f1:01:49:03:24:4a:9c:d1:88:be:7e:
         54:82:47:49:30:e8:fe:ab:0c:0c:0e:39:ea:c6:8f:7b:de:51:
         f1:96:d8:f9:d6:eb:4b:29:66:b6:fa:3e:00:2c:04:0c:57:d4:
         14:1a:24:c2:12:97:19:cf:41:50:2d:48:e7:6a:77:98:04:2e:
         e8:5e:d7:2e:3c:af:f5:49:fa:9d:5d:65:23:38:80:11:70:50:
         77:ba:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 08:42:25 2026 by rpki-client