Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          1Cy8CYvjCIS0iF1lMB4PW87oxAFb0WZoKa/1NjXbOTY=
Subject key identifier:   23:ED:A9:5C:7A:49:83:31:2E:DC:FE:95:1A:3A:FD:96:B8:0A:49:FD
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       2B47CC76956F2160269776D9303A4611B8A4F457
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          075B
Signing time:             Tue 09 Sep 2025 04:52:47 +0000
Manifest this update:     Tue 09 Sep 2025 04:47:47 +0000
Manifest next update:     Wed 10 Sep 2025 07:07:47 +0000
Files and hashes:         1: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
                          2: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
                          3: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
                          4: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
                          5: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
                          6: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
                          7: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
                          8: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
                          9: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
                          10: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 0ZQLfKonmuACHgWDrGXU5NxMyHq5d6VeBtky0/Wi/tA=)
                          11: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
                          12: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
                          13: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 07:07:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:47:cc:76:95:6f:21:60:26:97:76:d9:30:3a:46:11:b8:a4:f4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Sep  9 04:47:47 2025 GMT
            Not After : Sep 10 07:07:47 2025 GMT
        Subject: CN=23EDA95C7A4983312EDCFE951A3AFD96B80A49FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c8:bc:86:5c:f4:c5:ed:f2:dc:de:18:90:27:
                    02:55:95:db:91:0b:f9:25:7f:08:20:ed:6b:a2:48:
                    dd:82:a1:a0:aa:87:5e:82:96:3a:8e:d4:54:c3:97:
                    db:a2:b4:4d:3b:a1:d6:e6:67:6d:01:a1:15:11:21:
                    d7:79:ce:e1:fc:0a:17:a0:6a:0c:e1:73:e0:be:ab:
                    bf:a1:fd:08:e1:c9:1f:b6:22:b9:a2:b0:0d:5c:8c:
                    f2:fc:2c:17:1b:cc:9f:86:e9:8d:aa:95:98:2a:26:
                    0d:36:51:ef:51:2b:f2:d5:bd:45:89:14:38:3d:2b:
                    2c:c4:60:d4:fd:48:05:6e:72:6d:b4:ef:7b:53:99:
                    bc:26:31:be:25:89:09:44:03:2a:10:3f:c7:b1:c2:
                    20:10:57:a6:4f:d5:7d:c4:a4:7e:e0:f7:a0:23:e9:
                    05:bf:c9:48:2a:b3:61:e0:78:a1:e7:62:28:c1:cb:
                    1f:6f:1a:31:70:39:ed:10:d2:22:ec:5c:26:0a:9a:
                    f2:9a:bb:4b:40:e5:2c:f7:32:37:e5:f0:c3:0b:2e:
                    80:7c:15:4c:ce:52:58:8b:37:9a:40:14:27:ca:18:
                    9e:2b:8b:13:ab:54:f7:8a:48:47:5e:61:cb:22:86:
                    cc:04:ff:c9:9b:10:9b:28:71:a6:c3:93:4e:0f:e0:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:ED:A9:5C:7A:49:83:31:2E:DC:FE:95:1A:3A:FD:96:B8:0A:49:FD
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:21:ef:da:64:09:9f:2b:30:aa:88:92:53:17:1a:11:57:
         89:47:f7:ab:bd:f3:1d:b7:01:34:5b:4b:f1:76:59:16:63:1a:
         d8:63:93:e9:e9:b3:23:c8:d6:ea:1d:01:c5:90:3e:a7:6d:34:
         17:5b:a2:c3:97:c0:2f:46:2d:79:0a:40:d6:2b:45:ff:9f:af:
         2a:bb:df:18:ef:b8:f9:9c:8b:27:89:77:1a:c8:40:a1:98:05:
         72:42:d3:ac:f0:92:10:83:2f:64:9f:21:32:75:cb:25:24:24:
         ae:98:32:d4:7c:51:93:29:99:5f:ff:85:50:18:be:0e:d1:2e:
         36:07:17:01:fc:e7:9b:c9:93:ab:a9:ac:19:6a:f1:e6:6f:3e:
         43:72:37:55:7f:78:b4:63:af:64:36:ed:12:89:8a:80:4f:fe:
         99:2a:03:16:f6:11:87:6d:39:12:db:86:79:4a:65:3d:36:05:
         c6:b6:4a:8b:4a:68:6c:96:45:70:33:1b:1c:b0:f6:d8:6d:a6:
         da:a5:b0:63:7f:54:1c:be:38:76:78:18:df:71:77:f6:91:bc:
         27:43:45:03:2d:1d:06:07:56:c4:35:89:59:c4:df:a4:3e:70:
         e6:5a:e5:27:d2:81:4f:a5:c4:84:88:b3:a7:65:1f:a6:81:e2:
         d4:f4:fa:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUK0fMdpVvIWAml3bZMDpGEbik9FcwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB
M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI1MDkwOTA0NDc0N1oX
DTI1MDkxMDA3MDc0N1owMzExMC8GA1UEAxMoMjNFREE5NUM3QTQ5ODMzMTJFRENG
RTk1MUEzQUZEOTZCODBBNDlGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzIvIZc9MXt8tzeGJAnAlWV25EL+SV/CCDta6JI3YKhoKqHXoKWOo7UVMOX
26K0TTuh1uZnbQGhFREh13nO4fwKF6BqDOFz4L6rv6H9COHJH7YiuaKwDVyM8vws
FxvMn4bpjaqVmComDTZR71Er8tW9RYkUOD0rLMRg1P1IBW5ybbTve1OZvCYxviWJ
CUQDKhA/x7HCIBBXpk/VfcSkfuD3oCPpBb/JSCqzYeB4oediKMHLH28aMXA57RDS
IuxcJgqa8pq7S0DlLPcyN+XwwwsugHwVTM5SWIs3mkAUJ8oYniuLE6tU94pIR15h
yyKGzAT/yZsQmyhxpsOTTg/gaQ8CAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQj7alc
ekmDMS7c/pUaOv2WuApJ/TAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ
oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp
Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0
MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz
eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy
QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy
MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u
ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2
ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAenEh79pkCZ8rMKqIklMXGhFXiUf3q73zHbcBNFtL
8XZZFmMa2GOT6emzI8jW6h0BxZA+p200F1uiw5fAL0YteQpA1itF/5+vKrvfGO+4
+ZyLJ4l3GshAoZgFckLTrPCSEIMvZJ8hMnXLJSQkrpgy1HxRkymZX/+FUBi+DtEu
NgcXAfznm8mTq6msGWrx5m8+Q3I3VX94tGOvZDbtEomKgE/+mSoDFvYRh205EtuG
eUplPTYFxrZKi0pobJZFcDMbHLD22G2m2qWwY39UHL44dngY33F39pG8J0NFAy0d
BgdWxDWJWcTfpD5w5lrlJ9KBT6XEhIizp2UfpoHi1PT6Ow==
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:50:12 2025 by rpki-client