
$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier: d7c+JvrCXRapzwAZFABKTzzInqu4RmeuIxJT6TDyv8M=
Subject key identifier: E8:E0:A0:47:32:B4:42:A0:28:63:50:51:8C:C0:C3:D0:D3:35:9F:A0
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 64FE92AE24A847C6EBE8A4779C9A11BC63A02F00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number: 085B
Signing time: Tue 17 Mar 2026 03:08:59 +0000
Manifest this update: Tue 17 Mar 2026 03:03:59 +0000
Manifest next update: Wed 18 Mar 2026 06:34:59 +0000
Files and hashes: 1: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
2: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
4: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
5: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
6: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
7: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
8: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
9: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
10: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
11: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
12: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: iCopBG4gVCZkUzw35236lFleO+RQtGPCOeMjiGzz+po=)
13: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 18 Mar 2026 06:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fe:92:ae:24:a8:47:c6:eb:e8:a4:77:9c:9a:11:bc:63:a0:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: Mar 17 03:03:59 2026 GMT
Not After : Mar 18 06:34:59 2026 GMT
Subject: CN=E8E0A04732B442A0286350518CC0C3D0D3359FA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ba:81:c9:bd:51:4a:0c:f2:1a:92:22:4f:eb:
36:b1:10:88:ad:aa:2e:3b:40:b2:35:02:a9:ae:e1:
8b:3c:f9:c3:25:dd:53:ed:f6:1d:0a:8c:5e:fb:60:
66:5c:fc:52:1b:e2:2b:18:b0:f7:44:d3:ae:10:af:
3b:af:25:90:e0:b5:47:8d:42:02:d0:29:9b:1b:d3:
18:85:03:92:de:fb:01:a9:48:6e:77:04:5e:f2:28:
f7:d7:d3:78:20:6f:b9:15:53:a8:bb:01:1b:d4:40:
f9:d5:72:29:fb:5a:33:03:e5:5d:01:b1:ad:ea:9d:
6a:cc:64:88:92:01:6f:15:9b:d7:1d:96:10:48:b4:
00:b3:5c:ab:31:10:38:4a:3c:da:15:8e:c3:d8:23:
c1:08:fd:88:8f:2b:46:3e:84:26:53:03:02:25:2f:
ea:f0:12:ca:05:8d:55:cb:52:c3:45:cc:05:04:60:
94:fe:00:b1:f8:f8:b2:10:f2:84:b3:2b:4d:24:73:
7d:c6:94:47:75:5f:9a:95:be:f1:b4:31:8e:5a:60:
61:e5:cf:24:fd:c7:dd:9b:74:66:ed:d0:c7:45:81:
d2:6a:98:97:b8:47:8d:4b:ca:c5:8c:87:2d:c1:19:
7b:a6:3a:a3:31:dc:50:b0:be:44:ef:dc:97:90:57:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:A0:47:32:B4:42:A0:28:63:50:51:8C:C0:C3:D0:D3:35:9F:A0
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:29:ff:db:ff:c9:bf:c8:e2:f0:76:f4:92:af:33:2c:e7:1b:
46:83:83:78:99:95:7a:fc:5a:d5:f4:bd:c8:09:62:40:86:8d:
a2:d6:ae:bd:32:a7:d9:08:7c:74:8e:7e:b5:0a:74:5c:3a:a8:
7e:81:0f:61:ae:68:89:d8:99:28:16:67:46:5e:49:df:b5:b2:
8a:df:b8:54:60:e8:ea:6b:47:9e:ec:35:ee:be:f0:6f:65:8e:
a3:6e:45:68:79:78:4a:b7:8e:50:56:fe:05:d0:fd:d6:ed:b0:
bd:18:4d:6b:cf:3a:9f:09:ac:8c:e2:fb:3c:e0:42:2c:b3:d6:
a4:cd:e3:c2:61:a5:98:9e:3b:1d:61:07:3e:84:46:66:df:41:
d6:02:a5:c0:05:d2:4c:d2:53:34:02:2e:93:e2:c0:fc:fc:fc:
55:25:f4:fe:f7:32:b1:8c:7e:3b:ef:6c:aa:4f:08:ef:e0:24:
fd:a5:b9:ba:5f:19:1d:0d:47:37:a3:41:66:9d:24:3a:21:eb:
5f:9f:d0:08:de:bd:15:ac:ff:20:05:86:e0:73:90:86:4c:4f:
fa:a0:6d:3b:a6:ac:4f:6b:c3:b0:3f:b4:62:bc:2e:b7:ef:f4:
8d:c2:a1:f3:10:d3:da:88:7e:bc:93:9b:e3:1f:14:1b:42:93:
43:a8:ce:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 19:13:44 2026 by rpki-client