Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
File:                     5B1AD82F0E7DC771819A9A26674992A3951B9373.mft (raw, json)
Hash identifier:          hNX6zSVqDe00/ZvNk9AnVmlDqGIo6bzSPESXyD3Rva0=
Subject key identifier:   7E:8A:AA:D0:E3:6D:39:73:71:82:5E:37:BD:F6:93:97:FB:A1:06:DC
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial:       2CEB388A9644F19ECD685B8482874F2335297FD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
Manifest number:          017B
Signing time:             Tue 28 Jul 2026 03:39:57 +0000
Manifest this update:     Tue 28 Jul 2026 03:34:57 +0000
Manifest next update:     Wed 29 Jul 2026 03:59:57 +0000
Files and hashes:         1: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ=)
                          2: AS138038.asa (hash: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI=)
                          3: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=)
                          4: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (hash: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ=)
                          5: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (hash: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo=)
                          6: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (hash: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM=)
                          7: 3230322e352e3232302e302f32322d3234203d3e2033323538.roa (hash: RSC0gS7HCZeuxKb2QI8cI8b8M+MPUL5V2oXXelhZ2i4=)
                          8: 5B1AD82F0E7DC771819A9A26674992A3951B9373.crl (hash: 9rReG7y7LmMEpf/2rPiVIasTXh/2A5BJCfCew+jJrXs=)
                          9: 3130332e3230312e3132382e302f32322d3234203d3e2038383838.roa (hash: jroVYKFHmgPVzgsQ26TPXXr/n6bFbi/cJido3jfFoMg=)
                          10: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: LFwJ6OFasHUXdxn7Pjd2blvuD4fgYwkNxMcSghbaXHE=)
                          11: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (hash: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY=)
                          12: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (hash: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8=)
                          13: 323430333a616338303a3a2f33322d3438203d3e2039333132.roa (hash: fgKSq0+6HaJmX4YRsGt9woaxxo2J+1VxHIL2NS4cwCQ=)
                          14: 3230322e352e3232302e302f32322d3234203d3e2038383838.roa (hash: 8fu1VICLJqfb2qBAICSYNfZTWIi/AxU4hCyty2bGjds=)
                          15: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: gMRDa6tXlNXXN9n511PW1vIGUannRwNsBy5I5ncCCYE=)
                          16: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (hash: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
                          rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 03:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:eb:38:8a:96:44:f1:9e:cd:68:5b:84:82:87:4f:23:35:29:7f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
        Validity
            Not Before: Jul 28 03:34:57 2026 GMT
            Not After : Jul 29 03:59:57 2026 GMT
        Subject: CN=7E8AAAD0E36D397371825E37BDF69397FBA106DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:36:56:26:8a:76:25:8f:aa:a0:cf:1b:a7:
                    d2:80:11:63:55:ff:db:95:c9:41:13:cb:c1:40:4f:
                    1a:41:fc:8b:36:08:68:01:96:78:14:49:1a:95:18:
                    1d:8c:23:71:f9:70:ea:f1:05:2e:f4:e2:c3:da:c9:
                    1e:65:b0:31:0d:12:2a:c3:f5:f8:38:cf:bb:bc:db:
                    a9:60:7b:e2:bd:84:bb:7e:be:58:31:3c:1b:a9:2a:
                    24:8d:94:32:0e:37:49:6f:84:2b:6f:87:b4:ef:73:
                    c2:d3:f7:3b:6c:9c:41:de:6e:b8:23:ec:a4:41:e8:
                    77:28:1c:49:25:c4:5a:6e:4c:9c:ae:fa:7f:ba:65:
                    f4:2f:25:d7:fb:98:5c:be:de:6f:4c:fb:36:87:e0:
                    ce:8f:3a:d2:4c:04:dc:8a:fd:8d:fd:92:5a:f7:12:
                    5c:08:bd:8b:c5:16:09:1d:28:e6:12:18:6b:9a:47:
                    28:af:b0:7e:94:f9:d0:7a:44:14:ee:6e:0c:b5:a8:
                    b6:b3:d2:17:1c:97:46:c9:22:6c:28:12:d7:d0:0a:
                    ad:c5:17:fd:ff:78:a3:3f:87:a5:57:88:7a:27:64:
                    8f:ac:e7:3e:b7:b5:9f:18:4a:95:27:2c:ca:f9:80:
                    a3:a0:07:31:54:ef:00:f1:b6:7d:78:dd:2e:e4:fd:
                    46:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8A:AA:D0:E3:6D:39:73:71:82:5E:37:BD:F6:93:97:FB:A1:06:DC
            X509v3 Authority Key Identifier:
                keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:af:1e:1d:f0:99:63:e6:7b:39:7b:0e:e8:99:5e:75:38:b9:
         81:e6:5c:a8:c3:4c:57:0e:be:33:f2:0e:77:2f:58:19:c4:c5:
         f0:2b:1f:f1:c1:20:28:c9:93:0f:39:39:c1:77:24:9f:62:14:
         3d:c8:63:6c:79:3e:87:61:c4:2c:04:52:59:04:1d:63:2f:aa:
         10:bf:96:fe:22:48:c8:66:91:cf:3e:9b:24:7f:1b:c4:dc:14:
         b7:a8:5f:85:18:11:c3:ba:57:51:8e:9c:c8:44:34:64:51:9f:
         ac:d5:1c:e6:79:0a:e2:3b:4e:08:19:7e:5a:3a:5c:e4:ab:17:
         5e:ff:f6:b6:fd:16:ce:39:96:4d:7d:89:a5:7d:c3:ea:e2:23:
         bc:69:cc:2e:b6:56:51:88:ba:ed:4e:81:07:04:1c:64:5a:bd:
         65:38:59:00:7b:1f:3c:94:e1:1b:54:21:a3:fe:79:29:8c:1f:
         e8:fc:2a:f4:a8:cc:af:49:c1:e3:26:cf:aa:5c:8f:68:cf:39:
         51:2b:62:da:e1:b8:5d:f2:8e:34:d8:78:91:4c:da:6e:fd:55:
         86:5e:f3:f6:a1:23:39:9c:64:2e:a6:e6:1b:6c:14:30:1b:b1:
         1c:d5:94:4c:c2:d4:c7:2f:df:30:4a:40:a9:30:ec:10:6c:1e:
         7a:4d:61:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:14:18 2026 by rpki-client