Manifest

$ rpki-client -vvvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          s7aY7wW3l6N0SzEuVbG+YyEaPzilgvWoXe/uV2LeG1w=
Subject key identifier:   91:66:5F:49:22:FE:93:B8:62:2D:6A:85:32:08:C9:0F:01:5D:AE:44
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       27AC833CBCFC3B78B44799BD1023DD96A7659C94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          095C
Signing time:             Thu 24 Sep 2026 00:58:50 +0000
Manifest this update:     Thu 24 Sep 2026 00:53:50 +0000
Manifest next update:     Fri 25 Sep 2026 04:23:50 +0000
Files and hashes:         1: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 4Ksn+ziHxr8t8oiA8D3tleDg+7+zFohrCJ87bU2o4vU=)
                          2: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: szqMQq51gue7SKW98pCvcyJemqw5be/J1zq30vj+ZYg=)
                          3: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
                          4: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: 3uAkrqhuez17TRSNGWL+mcT//fGQ/vDhgEfqbO+yR7c=)
                          5: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
                          6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AjJdum5gnCa7+36v844jqAKHTrJ2KwRmgeY12DZxrgU=)
                          7: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=)
                          8: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=)
                          9: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 7B1hn/nseYyTK+M9pcx/g9/2nwENdaKXdibJCYVcHIg=)
                          10: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: 3oCbnlvZbHVrmm1N7RiXf87fk015oR3GhA9lb6aGQkw=)
                          11: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: cbo/b+qUiGch0Ee6VSG/U0yTchpOBV2gq0Anp3RIG0I=)
                          12: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=)
                          13: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 04:23:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ac:83:3c:bc:fc:3b:78:b4:47:99:bd:10:23:dd:96:a7:65:9c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Sep 24 00:53:50 2026 GMT
            Not After : Sep 25 04:23:50 2026 GMT
        Subject: CN=91665F4922FE93B8622D6A853208C90F015DAE44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3e:12:ff:56:7a:71:16:bd:67:9a:1b:2c:97:
                    e6:86:2b:12:3c:87:2f:43:e1:b1:99:98:50:05:15:
                    b1:4b:5a:ab:62:c7:bb:aa:d6:9f:92:bc:39:8c:7e:
                    cc:80:5b:be:fb:89:25:b5:29:56:8e:7f:49:b6:36:
                    b7:c9:60:dd:87:2d:9c:4c:e9:ff:cc:65:3f:7e:63:
                    73:63:74:b9:a0:e9:6a:e8:c9:30:7c:47:13:01:8f:
                    56:45:24:a3:ad:e2:78:1d:fc:1d:0b:3b:49:08:db:
                    62:37:94:b5:2b:4d:6b:2b:c5:93:40:1b:97:9b:d4:
                    30:6f:7a:71:32:cf:c7:0e:d4:f3:d2:29:a6:14:ec:
                    ba:ab:26:a3:f8:64:70:17:ed:c6:69:1a:cd:46:68:
                    83:21:56:90:42:fd:8b:95:84:40:6a:58:34:6f:d3:
                    92:2a:8a:d5:fa:c9:54:ef:e2:ff:b7:26:5b:45:1c:
                    50:c7:bc:a1:3e:7b:7d:1e:49:21:20:4c:c8:45:eb:
                    f6:91:7c:6b:55:7f:8c:d8:43:0c:24:60:05:d6:ef:
                    1e:96:0c:93:39:a3:71:8b:5f:8a:cf:2d:77:75:52:
                    c2:68:09:0d:72:7b:ef:e9:4d:c0:db:46:80:7a:b6:
                    48:70:17:4d:8f:aa:60:32:b5:a5:b2:01:16:27:fd:
                    87:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:66:5F:49:22:FE:93:B8:62:2D:6A:85:32:08:C9:0F:01:5D:AE:44
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:a2:d3:71:d2:51:47:1a:e7:e3:d5:43:d2:f7:2a:28:ad:a9:
         55:ae:37:be:4e:e6:26:5f:4a:d7:ca:f5:54:2e:68:2d:7c:69:
         02:04:9f:53:6a:e0:75:58:c7:72:98:aa:76:fb:ab:cb:d3:5c:
         54:2d:d8:ef:28:de:5a:0b:c8:57:9e:2a:e9:99:4d:a0:4a:7d:
         8d:83:3f:07:75:3e:9c:a2:ca:bf:8b:26:c9:5e:93:81:6d:30:
         04:f5:86:5d:a0:1a:2c:ef:55:28:bb:d1:b8:ac:78:cc:10:43:
         4c:cc:99:e6:47:6c:50:bd:82:f7:91:92:51:98:40:6a:d2:a4:
         e0:3c:58:65:c0:1e:4a:65:5e:ef:66:b8:fa:6b:93:8a:b4:1e:
         d5:81:c4:5e:97:4e:7f:e6:a7:68:e1:03:33:14:f3:61:23:1b:
         20:5f:43:b0:f6:94:24:20:50:be:9c:b8:70:89:47:e2:b4:ce:
         6d:a8:d0:6d:67:bb:ba:b9:8a:d3:9d:0b:33:b2:9a:54:b7:0a:
         a3:f0:dd:72:e8:de:2d:bf:fd:9c:a8:be:66:f1:06:01:51:8f:
         71:7b:f4:de:77:cd:06:84:43:36:38:bc:07:4d:5d:7d:00:83:
         aa:ee:47:4c:93:e5:61:aa:f5:80:fc:3a:ee:99:26:22:b0:1b:
         a2:c9:e8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----