Manifest

$ rpki-client -vvvf rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
File:                     5C6CE387337886989FB3C3D4E6186A370B728D50.mft (raw, json)
Hash identifier:          aW7W7yZam78EWxvqa1YBf7y+IKzn2JGuTF1oWjo8BZw=
Subject key identifier:   84:C8:70:4E:FA:98:D3:76:F1:03:76:70:67:D7:66:D0:5E:0D:7E:0E
Authority key identifier: 5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50
Certificate issuer:       /CN=A91C44A00000/serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
Certificate serial:       24888BA28E879CCC30A5BA8C81C044710F137825
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
Manifest number:          010E
Signing time:             Sun 20 Sep 2026 08:19:58 +0000
Manifest this update:     Sun 20 Sep 2026 08:14:58 +0000
Manifest next update:     Mon 21 Sep 2026 10:17:58 +0000
Files and hashes:         1: 5C6CE387337886989FB3C3D4E6186A370B728D50.crl (hash: Nsg1Qt/CB5zpWTylSeuaoy5xoZ4twWN7mnCMMvks2dE=)
                          2: 323430373a396534303a3a2f33322d3438203d3e20393439.roa (hash: o6CMRus2nCh6aUZaRs/wsY/VXBXH+eg8hSHOm97LRo4=)
                          3: 323430373a396534303a3a2f33322d3438203d3e2033323034.roa (hash: WSAKs2OyLKVY8lU20ExbA6hBKB8JX3WHuR62G8VYTbY=)
                          4: 323430373a396534303a3a2f33322d3438203d3e2038383838.roa (hash: CT8MGxoF5jRnFfM8LvVS4erJkAdXGfhtp9GsS8cjI0c=)
                          5: 3130332e3136392e39322e302f32332d3234203d3e2033323538.roa (hash: /M7x2kwyDiR3KQMuxiEOujL472HLQ7UD/cUaoplODxw=)
                          6: 323430373a396534303a3a2f33322d3438203d3e2033323134.roa (hash: og4bwPv9iegu9tI+ozKiaeg9RFGRu02IcSBCJG+J8rM=)
                          7: 323430373a396534303a3a2f33322d3438203d3e2039333132.roa (hash: YMJWO7/JGHkml3YyFWU4umkjg98j7BoveCFvevYNLfA=)
                          8: 323430373a396534303a3a2f33322d3438203d3e2033323538.roa (hash: zfhWgRiHrPoVZzzgbiGVGIAN02rHrEATYChkmuSmvVM=)
                          9: 323430373a396534303a3a2f33322d3438203d3e2036323333.roa (hash: jMqB1nTZ1LKvgd5chAvocdwe/Wp2mFf6s/+r+y83VW8=)
                          10: 323430373a396534303a3a2f33322d3438203d3e2034373835.roa (hash: HPO9bTZGrpFuFhc5KXOR0qdeFj7aSrH3kEoa9LCrJeY=)
                          11: 3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (hash: 2ynH3ZlcLbUkfH9QxYt0drp47MV4SL9VdzeXUvA/9DM=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl
                          rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 10:17:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:88:8b:a2:8e:87:9c:cc:30:a5:ba:8c:81:c0:44:71:0f:13:78:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C44A00000, serialNumber=5C6CE387337886989FB3C3D4E6186A370B728D50
        Validity
            Not Before: Sep 20 08:14:58 2026 GMT
            Not After : Sep 21 10:17:58 2026 GMT
        Subject: CN=84C8704EFA98D376F103767067D766D05E0D7E0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:e8:8f:59:81:93:c6:15:31:ab:c9:92:3c:
                    07:7d:c6:da:d7:b4:1e:fb:70:7f:fc:84:51:61:2c:
                    97:1a:24:72:3c:2d:fa:e5:86:e6:13:91:a6:bc:79:
                    63:9b:52:28:0a:bb:29:4c:3a:56:08:dd:6d:d2:17:
                    54:bc:df:7b:5c:3f:9b:29:03:fe:24:18:93:03:58:
                    3a:ed:a9:ff:46:cb:1f:be:ec:2d:95:b4:33:1b:07:
                    89:ed:4f:ea:21:18:6b:6a:c1:4b:5b:8d:7d:ac:82:
                    05:69:1c:35:bf:94:02:21:78:c4:3a:e6:f3:c8:e7:
                    dd:5a:bb:86:49:87:30:1c:16:da:1a:65:70:88:37:
                    19:bc:b4:4b:62:ef:43:e0:a2:c7:57:99:b1:cd:3a:
                    71:99:16:81:46:ec:af:a8:64:b2:4c:60:46:ac:5a:
                    9d:ba:f2:54:eb:32:82:c1:0b:70:4e:5e:7b:35:2b:
                    3e:95:16:0a:37:63:10:69:61:b6:c0:dc:e5:da:94:
                    2e:6a:ed:42:6c:ab:88:42:06:86:f9:1f:60:03:12:
                    17:a7:76:84:5f:4a:6a:df:99:c3:74:cf:15:f2:4d:
                    ef:c9:8e:0f:9f:a1:c2:dc:51:76:ab:4c:cd:05:28:
                    b2:8f:77:ec:7e:ef:08:9f:c1:af:3b:b5:c3:5a:aa:
                    40:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C8:70:4E:FA:98:D3:76:F1:03:76:70:67:D7:66:D0:5E:0D:7E:0E
            X509v3 Authority Key Identifier:
                keyid:5C:6C:E3:87:33:78:86:98:9F:B3:C3:D4:E6:18:6A:37:0B:72:8D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XGzjhzN4hpifs8PU5hhqNwtyjVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/63/5C6CE387337886989FB3C3D4E6186A370B728D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:93:38:52:d6:86:6a:ba:54:38:5e:ca:34:d4:c4:73:aa:76:
         2e:71:09:39:af:66:32:48:1e:ef:c0:f9:98:fc:a0:5b:7e:7f:
         95:66:4d:4f:88:5f:29:3a:d3:a5:77:45:42:c5:3e:81:a4:e6:
         bb:fa:78:5d:ba:2e:cf:a5:c9:a7:43:3d:69:cc:12:86:42:87:
         69:d4:05:e5:c1:db:5f:d5:49:41:12:87:2d:89:2c:45:b6:33:
         0d:a8:46:f9:52:ea:5b:87:0e:41:a5:51:bc:07:46:bf:62:e5:
         a5:07:a0:88:2f:63:c9:7d:f6:da:6c:38:bd:7c:0b:fe:1e:fb:
         c2:b1:09:89:c3:97:6e:e9:39:db:51:22:20:10:86:a8:2d:65:
         7e:8c:9d:67:02:5a:91:06:c1:4c:69:68:73:2b:b5:44:8e:49:
         8d:4a:a4:a9:9a:f9:02:2a:46:d0:80:25:12:9e:fb:b5:8f:6c:
         8a:e7:46:f1:1b:c0:a6:f7:7a:c8:30:2b:e2:ce:96:bb:a8:d0:
         47:9d:da:1c:e5:b6:23:cf:ef:54:1f:48:54:5d:7c:aa:24:2a:
         65:24:0c:b8:31:80:a2:9d:ba:c3:46:2a:ca:32:c0:1b:07:3e:
         5d:ba:5d:a2:45:61:d9:af:c3:1e:be:9f:d0:fb:67:fb:33:70:
         cc:15:ae:88
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIUJIiLoo6HnMwwpbqMgcBEcQ8TeCUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyg1QzZDRTM4NzMz
Nzg4Njk4OUZCM0MzRDRFNjE4NkEzNzBCNzI4RDUwMB4XDTI2MDkyMDA4MTQ1OFoX
DTI2MDkyMTEwMTc1OFowMzExMC8GA1UEAxMoODRDODcwNEVGQTk4RDM3NkYxMDM3
NjcwNjdENzY2RDA1RTBEN0UwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALm06I9ZgZPGFTGryZI8B33G2te0Hvtwf/yEUWEslxokcjwt+uWG5hORprx5
Y5tSKAq7KUw6VgjdbdIXVLzfe1w/mykD/iQYkwNYOu2p/0bLH77sLZW0MxsHie1P
6iEYa2rBS1uNfayCBWkcNb+UAiF4xDrm88jn3Vq7hkmHMBwW2hplcIg3Gby0S2Lv
Q+Cix1eZsc06cZkWgUbsr6hkskxgRqxanbryVOsygsELcE5eezUrPpUWCjdjEGlh
tsDc5dqULmrtQmyriEIGhvkfYAMSF6d2hF9Kat+Zw3TPFfJN78mOD5+hwtxRdqtM
zQUoso937H7vCJ/Brzu1w1qqQMMCAwEAAaOCAfUwggHxMB0GA1UdDgQWBBSEyHBO
+pjTdvEDdnBn12bQXg1+DjAfBgNVHSMEGDAWgBRcbOOHM3iGmJ+zw9TmGGo3C3KN
UDAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0fBFgwVjBUoFKgUIZOcnN5bmM6Ly9ycGtp
LnJvYS5uZXQvcnJkcC94VG9tLzYzLzVDNkNFMzg3MzM3ODg2OTg5RkIzQzNENEU2
MTg2QTM3MEI3MjhENTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZi
cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjEx
RTJCQjQ2OEY3QzcyRkQxRkYyL1hHempoek40aHBpZnM4UFU1aGhxTnd0eWpWQS5j
ZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzovL3Jwa2kucm9h
Lm5ldC9ycmRwL3hUb20vNjMvNUM2Q0UzODczMzc4ODY5ODlGQjNDM0Q0RTYxODZB
MzcwQjcyOEQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI6TOFLWhmq6VDheyjTUxHOqdi5xCTmvZjJI
Hu/A+Zj8oFt+f5VmTU+IXyk606V3RULFPoGk5rv6eF26Ls+lyadDPWnMEoZCh2nU
BeXB21/VSUEShy2JLEW2Mw2oRvlS6luHDkGlUbwHRr9i5aUHoIgvY8l99tpsOL18
C/4e+8KxCYnDl27pOdtRIiAQhqgtZX6MnWcCWpEGwUxpaHMrtUSOSY1KpKma+QIq
RtCAJRKe+7WPbIrnRvEbwKb3esgwK+LOlruo0Eed2hzltiPP71QfSFRdfKokKmUk
DLgxgKKdusNGKsoywBsHPl26XaJFYdmvwx6+n9D7Z/szcMwVrog=
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:21:25 2026 by rpki-client