Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
File:                     5B1AD82F0E7DC771819A9A26674992A3951B9373.mft (raw, json)
Hash identifier:          +NBfhsrLoJaSQprQ/SDRznzmi7FQKYCCbWveZUjXWgo=
Subject key identifier:   B9:67:AC:2C:3D:F8:EC:EE:A8:28:C5:9C:BC:1E:6E:07:68:88:7A:37
Authority key identifier: 5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
Certificate serial:       1DB6F3F11F0DBC0E5530C04866F45CB12EE9C218
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
Manifest number:          01C9
Signing time:             Mon 21 Sep 2026 09:44:58 +0000
Manifest this update:     Mon 21 Sep 2026 09:39:58 +0000
Manifest next update:     Tue 22 Sep 2026 12:03:58 +0000
Files and hashes:         1: AS138038.asa (hash: KKmPldYXt3ysMW1zmkDcuHEwZVj+9YLqpnHPpNiZ6wI=)
                          2: 323430333a616338303a3a2f33322d3438203d3e2033323034.roa (hash: EhlZ8VWsLIcahL80Kna7NguybhfAm6OixXVFTcU6KYM=)
                          3: 3230322e352e3232302e302f32322d3234203d3e2033323538.roa (hash: RSC0gS7HCZeuxKb2QI8cI8b8M+MPUL5V2oXXelhZ2i4=)
                          4: 323430333a616338303a3a2f33322d3438203d3e2036323333.roa (hash: xrQYPl9t9tUoSAIIwLyyf5tZCs6IBIvMyCjwbo0x1s8=)
                          5: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: LFwJ6OFasHUXdxn7Pjd2blvuD4fgYwkNxMcSghbaXHE=)
                          6: 5B1AD82F0E7DC771819A9A26674992A3951B9373.crl (hash: OxqDMrX4/F3wZnvQgpvmAxXMzsE2rl5W5PozJlxnQJE=)
                          7: 3230322e352e3232302e302f32322d3234203d3e2038383838.roa (hash: 8fu1VICLJqfb2qBAICSYNfZTWIi/AxU4hCyty2bGjds=)
                          8: 323430333a616338303a3a2f33322d3438203d3e2038383838.roa (hash: 2bNk+yWp4h43qvF4yFrmQ8mLArz/+MgHLxEbNOd6RNY=)
                          9: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: HjkZEK+ijp+3GCC4izGKPCe8HT2XcT7uY3Y9S6FXiZQ=)
                          10: 323430333a616338303a3a2f33322d3438203d3e2033323538.roa (hash: MmpXb0rPKztHTUH4vUupicWIpK5YF8fy8dhNRs6/rNo=)
                          11: 323430333a616338303a3a2f33322d3438203d3e2039333132.roa (hash: fgKSq0+6HaJmX4YRsGt9woaxxo2J+1VxHIL2NS4cwCQ=)
                          12: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: gMRDa6tXlNXXN9n511PW1vIGUannRwNsBy5I5ncCCYE=)
                          13: 323430333a616338303a3a2f33322d3438203d3e20393439.roa (hash: Io1C3hmlBpheIvmWooUeE5hcts6O231d+HMtZwF29mQ=)
                          14: 323430333a616338303a3a2f33322d3438203d3e2033323134.roa (hash: 4QyCXbAfHlwkTauczAzg6IO2Egdpg6w8hsQZuQRlN9I=)
                          15: 3130332e3230312e3132382e302f32322d3234203d3e2038383838.roa (hash: jroVYKFHmgPVzgsQ26TPXXr/n6bFbi/cJido3jfFoMg=)
                          16: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: v7yteh1WZLVmaCu2bY234mxu37OO1wWdr68ndeJ4RSk=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl
                          rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 12:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b6:f3:f1:1f:0d:bc:0e:55:30:c0:48:66:f4:5c:b1:2e:e9:c2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=5B1AD82F0E7DC771819A9A26674992A3951B9373
        Validity
            Not Before: Sep 21 09:39:58 2026 GMT
            Not After : Sep 22 12:03:58 2026 GMT
        Subject: CN=B967AC2C3DF8ECEEA828C59CBC1E6E0768887A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e2:f9:20:3a:37:49:10:b1:8a:87:1a:ac:ac:
                    d1:58:39:a2:5f:30:a4:5d:c7:45:01:12:76:2b:e6:
                    e0:cb:0c:c1:15:b9:c8:ee:34:72:a6:d6:e6:35:ab:
                    d9:e6:85:0b:6c:01:d8:8a:1a:a6:67:c1:6b:29:01:
                    3d:e0:56:9d:98:31:47:3d:fd:bc:7f:6b:47:7a:cf:
                    88:a4:44:45:0d:49:f9:1f:6e:c6:aa:93:43:a8:af:
                    6b:0e:54:e0:5c:58:f0:fe:59:a9:54:ae:b7:4c:3b:
                    6e:03:38:7c:7e:13:21:e6:11:01:e9:36:91:0f:86:
                    6b:97:9c:d4:93:ae:5f:90:fb:26:4f:7e:08:cc:88:
                    12:30:ba:6b:d1:83:ae:48:f9:61:58:13:aa:72:39:
                    18:0e:5b:d4:81:28:4f:bc:23:9b:d3:9a:92:7e:de:
                    f6:c4:2c:d9:d3:05:7f:40:35:32:81:28:a5:a9:e2:
                    b1:31:97:1f:8f:69:77:30:12:52:ff:5b:0a:e0:bc:
                    67:86:37:29:dd:18:03:d1:c2:75:3b:50:73:63:07:
                    f8:6f:fd:5a:eb:1f:bc:00:b6:30:34:07:0d:eb:42:
                    75:9b:8f:e5:44:05:b4:ee:87:07:ff:bf:ab:54:01:
                    6d:8d:98:ef:4c:f7:9b:e7:c7:4e:01:c0:64:59:db:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:AC:2C:3D:F8:EC:EE:A8:28:C5:9C:BC:1E:6E:07:68:88:7A:37
            X509v3 Authority Key Identifier:
                keyid:5B:1A:D8:2F:0E:7D:C7:71:81:9A:9A:26:67:49:92:A3:95:1B:93:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WxrYLw59x3GBmpomZ0mSo5Ubk3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/58/5B1AD82F0E7DC771819A9A26674992A3951B9373.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:f5:f8:0e:dd:03:ff:59:29:75:2d:67:f8:7e:62:76:b4:07:
         0e:ae:c9:9a:27:01:46:18:67:c2:24:27:67:d6:e9:e6:aa:d0:
         17:9b:7b:1a:33:da:2a:de:6d:c6:e0:84:75:76:5a:93:67:a8:
         b3:20:2f:b8:97:c8:bd:c8:2b:b9:ca:cc:cb:92:69:7b:fc:4e:
         4c:23:af:8f:83:d2:15:bf:79:4b:be:4a:42:2a:75:d1:2b:c2:
         38:69:f3:17:c9:3e:db:6f:71:a9:7a:fa:7b:8c:38:87:c2:e5:
         e5:3b:ec:68:6e:a3:09:fa:d0:83:74:7f:26:b2:a5:a5:19:df:
         de:9c:9b:8d:6d:b6:f7:06:71:5b:a9:c0:1c:69:01:ed:4d:d6:
         cb:af:8a:5b:8c:f8:65:6a:df:91:f6:dc:ac:f7:d2:ed:9b:4b:
         19:83:ea:05:66:b4:c9:d0:2f:36:9b:76:62:60:87:6d:62:22:
         ac:88:25:97:ab:82:20:1f:75:3b:5d:18:d0:23:d4:fd:5b:31:
         3f:e1:57:38:5e:2d:c0:0f:5a:90:3f:ce:e8:02:0d:1b:b4:8d:
         7b:69:58:b2:ed:d3:ba:dd:8c:2b:28:9d:c7:c7:ae:4e:3a:19:
         da:1a:db:03:d8:1c:37:c0:5f:d8:3d:df:1f:e6:f8:b7:0a:bc:
         92:d8:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----