Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          rSqWUg30KftFYiCtbYWEduTkbG3XRKbXtY7pHLRJ9yM=
Subject key identifier:   55:3E:60:60:B8:2E:65:19:10:84:DC:56:61:14:9E:B0:38:79:19:0C
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       29DAFEE415D126EE9F6B64F0D83255F349976562
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          08DB
Signing time:             Sun 21 Jun 2026 02:22:43 +0000
Manifest this update:     Sun 21 Jun 2026 02:17:43 +0000
Manifest next update:     Mon 22 Jun 2026 06:13:43 +0000
Files and hashes:         1: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
                          2: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
                          3: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
                          4: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
                          5: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
                          6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
                          7: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
                          8: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=)
                          9: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
                          10: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=)
                          11: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=)
                          12: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=)
                          13: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: V6n0ErxdcGq4zOreMoRiqtuwwwLVllKuUPzq93VfmYE=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 06:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:da:fe:e4:15:d1:26:ee:9f:6b:64:f0:d8:32:55:f3:49:97:65:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Jun 21 02:17:43 2026 GMT
            Not After : Jun 22 06:13:43 2026 GMT
        Subject: CN=553E6060B82E65191084DC5661149EB03879190C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:3c:90:d5:90:d0:55:69:af:de:19:1e:c0:
                    94:0d:20:91:53:3f:98:f6:fc:12:b6:3f:e6:89:95:
                    ff:de:e7:b6:4d:b4:f6:dd:b1:31:1e:4d:1d:1f:05:
                    d7:db:85:26:0a:ba:8f:48:0b:14:1b:a7:37:15:ab:
                    c8:df:63:f1:7b:f5:24:a2:ee:0b:b5:b3:29:52:5a:
                    57:a6:d0:33:2d:80:4a:f2:d6:13:06:87:2c:e2:cc:
                    57:ca:09:42:43:15:ac:a8:26:27:49:3a:f6:2b:3f:
                    58:53:4e:e0:00:b4:e6:be:9b:0b:c3:00:30:19:1f:
                    ba:22:75:8e:cd:14:2d:c2:76:7c:09:a6:7f:2f:9c:
                    26:58:46:02:7a:ee:e3:43:74:37:ff:52:f1:67:78:
                    f2:9e:49:41:6e:55:95:99:5b:c3:e1:14:4d:ca:c3:
                    02:d9:11:97:6e:d8:f9:c6:bf:d4:b2:84:98:4d:4e:
                    51:fb:35:d8:b4:46:9d:08:47:9f:ee:aa:fb:46:4a:
                    67:ed:fd:99:ff:60:8f:a1:58:19:be:37:01:51:b5:
                    c9:86:46:33:da:e5:ce:19:22:03:e4:98:15:0a:53:
                    f9:0a:2d:e8:33:1e:6d:98:d5:41:dd:64:18:c3:f0:
                    63:9d:e7:74:fc:4b:43:86:7c:e1:8e:0e:9f:78:7b:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3E:60:60:B8:2E:65:19:10:84:DC:56:61:14:9E:B0:38:79:19:0C
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:c3:40:4e:45:94:1c:38:b0:c2:fc:78:81:ce:79:1f:a3:
         7b:f5:c2:a4:72:50:51:45:50:9a:e6:f1:7a:96:5f:60:e8:c5:
         5b:70:24:5a:41:9b:df:e3:93:dc:0f:ce:22:ca:81:47:66:95:
         19:63:8a:7a:15:29:b6:69:a8:7a:c4:33:33:7d:c0:9c:cf:97:
         8b:08:78:eb:d6:7b:cb:3d:57:6a:b0:82:7c:dd:b7:fe:31:f1:
         ba:85:5a:8d:58:82:5a:77:3c:7c:f5:16:1c:b0:b8:80:2f:6a:
         45:f1:a5:d8:24:40:77:6d:28:df:e4:e1:80:5f:8c:b0:cd:8d:
         54:60:0f:89:7e:98:dd:81:12:c8:38:ad:d6:a7:f1:03:e6:a7:
         3f:7e:f9:f7:0d:db:e1:1d:bd:62:b6:fd:cf:44:03:44:4c:79:
         b5:aa:6e:16:48:a4:31:4f:7b:8d:8d:bd:0e:28:6f:c0:34:c2:
         57:4f:1f:ef:90:60:f2:53:cd:4f:5e:09:52:89:39:54:c3:bc:
         ea:79:8a:e8:d6:55:b9:48:0b:ca:85:f4:3b:07:83:18:94:5c:
         47:07:db:d2:6c:67:09:fc:cf:15:8b:a2:c7:1f:9a:8f:2b:e0:
         c2:a5:dd:87:6d:22:93:e2:19:04:59:06:0a:a2:1e:ff:1b:d1:
         85:d3:b3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 19:39:25 2026 by rpki-client