Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          lmhQ+o4I2gvOUmUHw0cVwURDXHQM1NGF91SZIarnjqo=
Subject key identifier:   DE:C7:7C:9D:54:DE:78:D2:23:0A:60:B8:30:6B:77:EC:97:1E:F2:87
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       0151EA6AC5F82A3983D5652737149922AA45F002
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          0916
Signing time:             Mon 21 Sep 2026 04:59:58 +0000
Manifest this update:     Mon 21 Sep 2026 04:54:58 +0000
Manifest next update:     Tue 22 Sep 2026 05:38:58 +0000
Files and hashes:         1: 323430333a326538303a3a2f33322d3438203d3e20393439.roa (hash: O0wBz/vGQuvqMOutUayb6PfXmoQvHX5Er2FmP+/2y5E=)
                          2: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: 6q1TZMf4UQM8B4HdPg9pJZraT0XvnwKcInMf+qLjoYU=)
                          3: 323430333a326538303a3a2f33322d3438203d3e2033323538.roa (hash: 0Yr4yYTauvseYZuWws7Ze9KPr5VkpPw09c2zsK6eTro=)
                          4: 323430333a326538303a3a2f33322d3438203d3e2036323333.roa (hash: 6S1j8Kq+GloljshVlZxJyDdTvcUuuN+byX3RUFl1tws=)
                          5: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: Tg0ry1Xc42xloiZJKlxqZ8CtIHEffMs0cknXxuT3QI4=)
                          6: 323430333a326538303a3a2f33322d3438203d3e2034373835.roa (hash: 1jnoZxPe5SSzC7QBrF3XLADaU181iSca6erVevfS2Gg=)
                          7: 323430333a326538303a3a2f33322d3438203d3e2033323034.roa (hash: togIFwsr7LPkQ3u7uoHpi2x0DIORY4Cc9CSPE6UqEhk=)
                          8: 34352e3131372e3130302e302f32322d3234203d3e2033323538.roa (hash: KWTsLxWIFcXKjNjL6LfQgdvsCq/JmPqGWhOtCfjvM28=)
                          9: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: BLpuxHzo5e8gWefVyj5QHUb/n2TOiqCMw75eFhv8M+w=)
                          10: 323430333a326538303a3a2f33322d3438203d3e2033323134.roa (hash: hj8vegeypC1yBmMP6b7mRj86CFSBcvsexQrkKVn3w+0=)
                          11: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: hhY3cR9E6USKWRMa0ec98yZ5tXpJLlYcvtxYbge+8a4=)
                          12: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: //JswlNWTSiSlrSxtrnKxN5f5oY7NYkmo/zaupBeYTI=)
                          13: 3130332e35372e3136342e302f32322d3234203d3e2033323538.roa (hash: UqIC9u7BB9Id3IMbYgH9FX+luoFs+hXH+2V/k9wpOTU=)
                          14: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: ynjMXrsQLLYOSNdr3hQtVoJCytczIL2RR8aRPlca13U=)
                          15: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: 9OjQu+QrdbPXB6eQWmc7cWH9JopQEKd0ct/UXIYO+pA=)
                          16: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: SMT7XFjxkMjzHkq2Fnbne2HkKczo1CVeG5G+hpJD8KI=)
                          17: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: Q50L2ggypFJhBDxb72JPbQ8vfvBzQvLxbPS4XoQ6A/M=)
                          18: 34352e3131372e3130302e302f32322d3234203d3e2038383838.roa (hash: voPiakdEWPirMq/WncFYq7Upw23ZrCEb5LKsM3/mXvw=)
                          19: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: dR2ZQC/PxLMZ1AvfjUkRD7QJ6bkwGzgCrWZcLDSC9u0=)
                          20: 323430333a326538303a3a2f33322d3438203d3e2039333132.roa (hash: qqk7e8uxzOkB8GUG5o23m5c3mVHln1GCREam6WLy9MY=)
                          21: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: 6XCFMJGNRGBmCET8oOjdTjfOKtjmZrGxZr8+vIDJ7TE=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 05:38:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:51:ea:6a:c5:f8:2a:39:83:d5:65:27:37:14:99:22:aa:45:f0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Sep 21 04:54:58 2026 GMT
            Not After : Sep 22 05:38:58 2026 GMT
        Subject: CN=DEC77C9D54DE78D2230A60B8306B77EC971EF287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:83:19:c4:2b:93:c1:0b:67:20:64:45:2d:
                    4e:6a:57:ca:52:19:bf:07:fa:c0:36:88:aa:7f:d4:
                    1e:04:d2:0a:10:cb:23:f6:95:16:dd:ca:d1:94:f6:
                    b3:38:d9:09:4e:73:28:c2:c3:45:5a:b0:57:fb:29:
                    87:c1:bc:72:d7:1b:16:75:55:46:6d:bc:12:83:12:
                    ae:90:7d:95:e2:d6:15:58:21:aa:35:fe:38:07:e0:
                    12:4e:28:cc:d5:ee:9b:2b:a6:9e:f8:4a:f2:6a:12:
                    99:84:7e:d8:9e:eb:69:5c:78:56:9b:8d:48:cd:a7:
                    68:5b:bf:b4:ca:1a:c7:d0:2a:1d:c1:67:a7:06:5c:
                    94:51:3b:b8:04:5d:af:a7:36:9c:87:b7:1f:4b:8e:
                    e6:34:f4:ff:44:55:e9:58:10:f0:bc:08:b6:ed:a2:
                    64:db:a0:19:07:48:f0:aa:28:41:91:3f:f6:3b:8d:
                    19:74:ae:0b:00:7d:59:78:b4:1c:44:da:10:17:aa:
                    89:e6:17:ae:66:d0:f5:ed:0f:59:3e:5e:d0:2d:66:
                    bb:86:d1:80:54:97:05:f2:bc:20:d1:e7:86:d7:44:
                    57:08:15:89:fe:4e:e0:e5:fd:8f:60:92:d4:2d:39:
                    c3:0f:a9:64:cd:62:48:14:e5:3d:e3:df:84:f8:77:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C7:7C:9D:54:DE:78:D2:23:0A:60:B8:30:6B:77:EC:97:1E:F2:87
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:3c:2c:e6:4f:a2:0c:85:c9:66:0e:06:2d:4d:6f:f5:12:
         05:54:15:0b:c6:88:58:0b:6d:1c:5f:d3:b8:6c:a7:4e:5d:e1:
         1e:d9:df:02:d6:7f:6e:c5:f4:61:67:30:48:d4:b8:74:42:30:
         cc:7b:e1:c9:2b:60:ea:ec:87:c3:31:c6:4f:58:3b:9e:db:d9:
         bb:04:96:66:63:b6:9b:91:26:9e:d0:5d:09:0c:b5:15:f6:7f:
         b2:03:2b:1c:47:71:76:06:4a:2f:a6:98:1e:dd:18:29:35:41:
         40:17:fa:59:ff:81:47:29:58:22:1a:7c:b6:79:09:70:9b:61:
         a0:fd:0b:3b:f9:82:48:59:0a:83:b8:df:d1:8c:99:5f:11:52:
         bb:8f:e9:e3:9d:1d:40:e0:ca:24:69:89:22:a2:1d:0f:52:8c:
         bf:80:2b:08:7e:a4:7c:f3:fe:dc:72:4f:55:1b:09:f5:43:92:
         67:03:ba:fc:01:31:4d:a0:93:ee:05:3e:16:d0:3e:3f:4c:0b:
         ef:35:5f:3b:e0:e1:fc:90:22:53:ec:1b:f4:7d:08:ac:43:d4:
         32:9d:e1:a7:0f:0a:47:d9:f4:3a:7d:01:29:49:af:5b:90:e7:
         27:b6:49:e5:24:ab:ef:2e:02:44:fc:bd:9d:87:d9:1e:f0:b7:
         92:50:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:08:32 2026 by rpki-client