Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
File:                     5B1AD82F0E7DC771819A9A26674992A3951B9373.mft (raw, json)
Hash identifier:          T70HF2Xb5dNasTFAcNg/qfcP8G7y1b++xuxD3N5axRQ=
Subject key identifier:   90:6D:CF:89:63:69:E5:31:25:0A:BD:40:B4:21:40:9B:B1:82:78:D5
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial:       418A6A06F702ADBDA9C4DC7AEA08B5A844BB8405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
Manifest number:          01C8
Signing time:             Sun 20 Sep 2026 16:39:58 +0000
Manifest this update:     Sun 20 Sep 2026 16:34:58 +0000
Manifest next update:     Mon 21 Sep 2026 17:44:58 +0000
Files and hashes:         1: AS138038.asa (hash: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI=)
                          2: 323430333a616338303a3a2f33322d3438203d3e2039333132.roa (hash: fgKSq0+6HaJmX4YRsGt9woaxxo2J+1VxHIL2NS4cwCQ=)
                          3: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (hash: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I=)
                          4: 3230322e352e3232302e302f32322d3234203d3e2038383838.roa (hash: 8fu1VICLJqfb2qBAICSYNfZTWIi/AxU4hCyty2bGjds=)
                          5: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (hash: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY=)
                          6: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (hash: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM=)
                          7: 3230322e352e3232302e302f32322d3234203d3e2033323538.roa (hash: RSC0gS7HCZeuxKb2QI8cI8b8M+MPUL5V2oXXelhZ2i4=)
                          8: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: LFwJ6OFasHUXdxn7Pjd2blvuD4fgYwkNxMcSghbaXHE=)
                          9: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (hash: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8=)
                          10: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (hash: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo=)
                          11: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (hash: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ=)
                          12: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: gMRDa6tXlNXXN9n511PW1vIGUannRwNsBy5I5ncCCYE=)
                          13: 3130332e3230312e3132382e302f32322d3234203d3e2038383838.roa (hash: jroVYKFHmgPVzgsQ26TPXXr/n6bFbi/cJido3jfFoMg=)
                          14: 5B1AD82F0E7DC771819A9A26674992A3951B9373.crl (hash: OwdX1f/+TpNr9yza4GjOu4E1o/iXVlHURTD3U3SOsL4=)
                          15: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=)
                          16: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
                          rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 17:44:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:8a:6a:06:f7:02:ad:bd:a9:c4:dc:7a:ea:08:b5:a8:44:bb:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
        Validity
            Not Before: Sep 20 16:34:58 2026 GMT
            Not After : Sep 21 17:44:58 2026 GMT
        Subject: CN=906DCF896369E531250ABD40B421409BB18278D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:49:b1:11:5f:fe:8b:cb:7e:b6:4a:a5:2a:98:
                    97:4e:5e:70:a0:be:89:0a:7c:cb:5c:c2:7b:dd:f3:
                    e9:c3:e6:a9:de:dc:e5:ff:55:20:14:99:3b:69:05:
                    bd:d4:09:fa:79:e1:21:ca:85:b9:ae:6b:fb:f3:1b:
                    fc:6f:21:67:b9:3f:31:e7:e1:39:e2:a4:99:3e:dd:
                    57:fe:f3:08:71:ef:49:c5:86:be:d4:d9:34:ce:12:
                    f7:5c:b9:d6:28:f8:70:ee:a4:97:40:a9:83:1b:3f:
                    dd:f4:e9:ad:35:ea:14:9e:b6:f7:e7:86:76:01:b0:
                    da:5e:d7:f6:5a:07:7a:7a:c8:49:50:e3:97:67:cb:
                    44:01:6c:f3:df:8c:79:2a:e6:a1:1f:4d:31:12:1c:
                    37:54:df:d0:a4:e9:f2:6a:65:b7:ec:fe:52:ed:54:
                    69:9c:28:c6:2d:a7:6a:3a:ff:52:a2:66:e5:c5:c2:
                    fc:f9:b7:fa:1b:d5:9f:d9:54:eb:b2:b7:76:4d:98:
                    af:67:83:a8:18:3c:11:c9:a3:13:8d:37:f7:ac:7d:
                    6f:4b:bf:66:80:33:c6:a9:13:4a:e6:fc:ed:e9:4e:
                    69:08:2b:40:92:1a:28:a6:e9:35:56:70:b6:39:f6:
                    3a:d6:53:e1:15:98:aa:78:a6:34:d0:96:59:bc:d3:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6D:CF:89:63:69:E5:31:25:0A:BD:40:B4:21:40:9B:B1:82:78:D5
            X509v3 Authority Key Identifier:
                keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8e:f4:8b:65:2c:d8:14:65:3e:ba:a5:58:4c:b5:84:bf:bc:
         b7:93:9d:63:b9:02:b3:af:5e:e9:b2:6b:e4:14:c2:22:90:b3:
         1e:09:96:c5:de:7a:16:72:41:21:ff:3e:f7:72:c5:39:ae:f1:
         91:66:eb:80:f7:aa:a3:c6:44:6e:ba:29:47:9d:8d:2b:82:9f:
         f9:dc:60:4c:2c:50:a6:c8:92:d8:c1:c4:91:de:dd:b3:9a:c8:
         1f:c6:69:8e:c0:16:47:7a:00:07:73:1d:d4:e6:68:9f:cc:1b:
         ca:21:84:87:76:91:45:fd:bd:0b:3d:be:94:05:a8:74:fa:d3:
         4f:93:08:f7:32:65:21:5b:16:43:55:73:f5:8b:b1:3a:6d:1b:
         29:bd:ed:4e:f2:b0:99:f9:d4:af:f1:80:6b:76:2f:b8:51:ed:
         48:22:c0:7f:e7:ff:ec:c5:6f:2b:a9:85:aa:26:b6:d7:bc:02:
         db:a6:aa:3d:80:fa:19:b7:d9:5c:8d:73:f9:dc:3b:3b:0e:1e:
         b9:7f:e0:30:e3:78:a8:7d:2a:3c:52:43:14:4e:0a:38:a6:2f:
         b7:ff:1a:e2:f4:77:29:e6:3e:38:5b:0a:1f:a1:ea:e4:25:5d:
         ae:a7:a2:aa:8d:2c:64:42:e9:dc:4e:ec:e4:c2:db:e6:59:e9:
         86:d3:37:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----