Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          dU3x5naz4XUtXymh5ZjZjaGNFVlW+cBB8Q2+B1UAsnU=
Subject key identifier:   FB:B3:26:3B:BF:07:54:1A:75:81:CF:C5:3E:3B:EA:4E:8F:2E:23:8C
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       268150DFC7FF0802274FE0A5AF40C35C3FE14685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          071B
Signing time:             Wed 23 Jul 2025 10:53:31 +0000
Manifest this update:     Wed 23 Jul 2025 10:48:31 +0000
Manifest next update:     Thu 24 Jul 2025 11:42:31 +0000
Files and hashes:         1: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: gleXammGNco3AiF4159jPajnO5VNN8RX+h5bhpaHj2c=)
                          2: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
                          3: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
                          4: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
                          5: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: DN/E6aOFiV8KoFntSlnkk78fDXrIalkTpGLDVfdtSoM=)
                          6: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
                          7: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
                          8: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M=)
                          9: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: f6TUhFqS3isV+/cNk8PgUfCkyR1D652ScYlagjbFUVg=)
                          10: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: YBcj0Y7Hb7dgFTi+rZqUgqhjt4rx48fgaI0O88QVy6s=)
                          11: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
                          12: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: JFgikoosW77rCCGiBkowQ97xtUQuU8MrNrAShHYoknM=)
                          13: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: WrLcm4jQMnbKzNmciHUuBkqAnQIN97idL/OJDSjSqvI=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Jul 2025 11:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:81:50:df:c7:ff:08:02:27:4f:e0:a5:af:40:c3:5c:3f:e1:46:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Jul 23 10:48:31 2025 GMT
            Not After : Jul 24 11:42:31 2025 GMT
        Subject: CN=FBB3263BBF07541A7581CFC53E3BEA4E8F2E238C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:73:e3:99:a9:9e:45:35:33:4c:40:36:50:
                    14:f2:3c:c5:40:5b:44:15:d2:8e:1e:bd:88:71:ff:
                    4b:dd:f0:7e:df:9b:b4:a0:ec:3b:35:19:02:7a:c7:
                    f7:6b:ce:08:4e:c5:98:84:05:82:95:68:e5:c6:9a:
                    77:e4:c6:70:3c:80:dc:3a:3a:bd:7a:9c:61:ed:5a:
                    0a:6e:e3:0b:0e:2c:be:f4:f9:9b:35:9f:6b:58:18:
                    d0:3c:3b:9a:72:a4:8f:ec:0a:56:f1:ec:c7:88:bd:
                    c7:7e:53:bd:bf:a4:96:6a:6e:29:b1:d1:17:2a:63:
                    d0:17:57:7b:4c:ef:3a:27:dc:17:e8:38:5f:d9:33:
                    02:59:ba:ed:07:ad:d1:c5:73:74:4a:f8:ea:51:dd:
                    be:24:c4:8e:13:a7:2e:91:43:58:d2:a8:cc:52:8d:
                    a0:f2:6f:fe:4c:e2:71:9f:0f:8c:18:3f:cb:37:88:
                    6f:22:e7:77:a6:76:b3:8d:a1:3e:67:81:0d:75:86:
                    b9:9a:0b:0b:17:e7:6c:b7:2e:55:e0:aa:27:cf:fc:
                    19:ab:e9:77:5b:a8:68:40:1e:f9:19:ff:58:b5:1e:
                    72:24:c1:7d:a5:82:e1:c5:4c:c1:82:9c:e6:26:c2:
                    da:1c:40:74:12:12:42:95:8b:41:4a:fc:17:5d:c2:
                    0a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B3:26:3B:BF:07:54:1A:75:81:CF:C5:3E:3B:EA:4E:8F:2E:23:8C
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e2:1e:4f:bb:92:69:9e:8e:f2:32:ae:d7:83:e3:99:38:1a:
         34:5f:ff:16:79:b2:9f:7d:5c:13:44:de:ed:f8:56:4f:e2:8e:
         e9:d9:6e:86:cb:2c:ae:4e:91:45:20:2a:f2:98:af:78:24:09:
         74:4e:29:ec:9d:12:9b:e7:9f:f5:fb:81:7e:95:e1:29:26:d6:
         b0:70:19:c0:a2:7a:3e:0e:bf:51:81:2d:48:e3:29:59:0f:cb:
         c1:c6:2b:87:36:8b:05:7f:e0:9f:a6:fa:03:64:30:70:c0:9f:
         c8:e8:e3:34:35:48:ef:b6:61:02:79:32:bf:14:65:76:73:e5:
         18:80:68:de:cd:f7:9f:7d:eb:a8:78:ec:c7:fc:d6:c9:00:44:
         32:2d:37:98:f7:a5:69:3d:6d:f1:f4:3d:c6:c9:59:b6:61:bf:
         2e:8f:64:d4:8f:77:41:62:0b:23:dd:ee:e0:ff:1f:6d:3d:06:
         14:64:3a:07:43:4a:56:cb:65:f6:af:2c:35:69:e1:4a:e7:81:
         34:a7:06:a5:ce:1f:3f:48:2c:d6:18:4c:9b:36:66:b8:bd:46:
         2c:ed:e7:91:e6:84:53:42:29:80:e6:fd:30:19:c1:e0:70:a8:
         82:05:a7:aa:fa:26:4d:74:d1:64:2e:25:07:7b:21:1c:f6:b8:
         cf:8b:bd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:41 2025 by rpki-client