Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          tH9wLxrQA3Em2GPx3RWprJy6o6j2Takp8bcNZ3EiBjQ=
Subject key identifier:   33:00:C7:71:20:DD:96:6E:D5:37:A4:87:34:0F:09:E9:1F:C0:0B:10
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       35BF5825D2E127A4AF125B96EBDE5A983E8E4780
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          0799
Signing time:             Fri 24 Oct 2025 04:52:52 +0000
Manifest this update:     Fri 24 Oct 2025 04:47:52 +0000
Manifest next update:     Sat 25 Oct 2025 08:35:52 +0000
Files and hashes:         1: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
                          2: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
                          3: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
                          4: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
                          5: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
                          6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
                          7: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
                          8: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 0bJ25tSH/SEnRShZofV5FRjFUt9BCkJlZegKQlTz9l0=)
                          9: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
                          10: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
                          11: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
                          12: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
                          13: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 08:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:58:25:d2:e1:27:a4:af:12:5b:96:eb:de:5a:98:3e:8e:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Oct 24 04:47:52 2025 GMT
            Not After : Oct 25 08:35:52 2025 GMT
        Subject: CN=3300C77120DD966ED537A487340F09E91FC00B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:92:53:82:d1:65:df:fe:e8:60:94:d6:49:
                    d3:30:d1:2a:95:0c:46:c8:92:52:ff:2a:f5:7d:96:
                    3a:a2:07:63:68:02:12:c9:77:ac:b9:bc:8f:df:2e:
                    15:4f:c8:21:4a:16:f2:bd:e4:2a:90:55:2a:1d:69:
                    5f:30:75:fb:18:a1:89:4c:e4:dd:9a:cc:6c:c6:0a:
                    be:c9:64:e3:26:c5:da:c2:38:b5:3b:76:1e:98:05:
                    9d:4b:17:9e:70:58:e5:d5:6a:f4:a3:68:9b:ad:75:
                    e7:a5:c4:ac:73:12:c3:01:e9:01:f8:b4:b4:ff:20:
                    bb:e0:83:55:46:3b:97:95:06:6f:18:52:9c:cf:4d:
                    b5:fe:e0:d1:db:f0:c3:ae:f3:01:9c:71:8a:aa:4a:
                    87:c4:19:00:fc:d7:80:07:16:4f:e3:8a:7b:d3:4a:
                    fb:8c:62:06:49:e3:8f:1f:fd:74:fc:e3:3d:92:c0:
                    ce:2e:ac:fb:ae:f3:11:ed:b8:c8:18:c7:a7:4e:0a:
                    79:c8:10:9e:84:a9:62:a2:5a:9c:69:aa:e8:a2:bd:
                    4b:39:b7:53:e0:ce:8b:eb:83:51:49:a7:b6:bb:5f:
                    53:0e:bc:c7:a2:15:30:58:02:33:93:67:04:e9:bc:
                    96:2e:f3:dc:89:e3:ac:7f:00:f2:91:20:03:62:98:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:C7:71:20:DD:96:6E:D5:37:A4:87:34:0F:09:E9:1F:C0:0B:10
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:65:12:a2:ed:1b:05:e5:be:d3:a9:af:35:44:dc:3f:7b:dc:
         b2:53:b5:bc:5c:8f:95:4f:8a:5d:03:eb:6f:a7:74:dd:03:b1:
         05:a9:89:82:bd:8d:17:c7:00:4b:91:1d:89:23:b2:33:30:5a:
         3e:dd:f1:18:94:a2:27:92:b4:c8:df:d0:33:b8:47:41:da:a2:
         72:da:2b:96:26:5f:08:7e:24:5a:2c:20:30:9a:aa:01:75:bb:
         e7:83:90:d8:7e:80:d9:73:4e:80:29:77:2e:a5:73:62:bb:3a:
         b1:0d:01:88:36:5b:42:ef:7c:86:94:a1:df:33:8b:e4:12:25:
         c1:b8:b6:7a:64:8a:54:12:e5:d5:c0:83:57:a6:2b:5b:7c:46:
         d6:75:7a:80:1d:aa:c1:93:94:fa:68:01:d0:0a:4d:d2:97:77:
         0d:5a:a4:4f:fd:a3:fb:9a:5c:79:b9:84:b5:21:06:de:69:3a:
         c4:22:dc:d8:25:b5:10:34:3d:12:be:85:8d:0b:ee:ab:f2:75:
         be:a0:b8:94:ca:7e:76:43:77:8c:24:94:f9:9b:e2:91:54:c6:
         28:e2:be:75:23:f2:93:a6:21:ef:95:5a:6e:db:61:3b:1d:96:
         cc:4a:f6:c7:e7:cf:21:3e:46:35:2f:8c:87:5c:2b:37:6c:f2:
         5b:f0:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 01:20:30 2025 by rpki-client