This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier: xJkYpCPxSqhNOLgNSon+USACJKBZv2pGUsvFDQMuDYg=
Subject key identifier: 56:FE:A6:6B:F8:9E:0A:7F:64:AA:5A:3A:1E:75:D6:0F:94:59:D7:4A
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 78C658F494B9E67CD456846278E97066C3170066
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number: 0817
Signing time: Mon 26 Jan 2026 12:32:54 +0000
Manifest this update: Mon 26 Jan 2026 12:27:54 +0000
Manifest next update: Tue 27 Jan 2026 16:19:54 +0000
Files and hashes: 1: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
2: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
3: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
4: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
5: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
6: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
7: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
8: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
9: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
10: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
11: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: tgWsQwxkMJubVkJeP6eQ4xWOPXYlDLsOrKdvRSvwI+Y=)
12: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
13: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Jan 2026 16:19:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c6:58:f4:94:b9:e6:7c:d4:56:84:62:78:e9:70:66:c3:17:00:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: Jan 26 12:27:54 2026 GMT
Not After : Jan 27 16:19:54 2026 GMT
Subject: CN=56FEA66BF89E0A7F64AA5A3A1E75D60F9459D74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:61:8b:f5:fe:af:3f:4d:a0:42:06:53:2e:
ba:c7:6a:e7:8a:c0:e4:2e:e2:00:44:0d:b3:9d:10:
b8:cb:eb:0c:ac:23:a9:4a:09:8e:d5:58:6f:4e:ec:
38:cb:72:55:81:2e:e2:ee:89:44:91:c0:b3:a6:85:
81:d9:51:7f:76:65:ec:3a:22:6a:3a:82:20:4f:85:
ae:24:83:e9:e2:1a:9c:59:59:76:14:69:a0:f3:72:
bf:02:8d:f3:ea:3a:bb:b7:4a:9f:46:88:c7:e3:27:
b5:32:c4:36:a5:58:bf:0d:db:37:59:52:e3:eb:53:
81:03:06:fb:4c:12:09:91:2d:89:b3:4a:ac:3c:de:
d4:84:b6:b3:6a:bb:d1:a0:a8:f3:ea:36:b9:c8:b2:
5b:69:25:fb:54:fa:46:b3:4c:8e:dc:b3:07:4a:ea:
0d:69:c6:19:75:40:d1:2d:3f:c9:49:e2:8f:96:1c:
4c:fb:53:30:25:03:8f:b6:96:9e:ef:9d:75:40:66:
82:50:30:65:35:6d:00:e6:ea:b5:52:fb:c0:8e:58:
07:20:39:fa:17:3e:68:dc:68:a6:06:3e:27:2e:4a:
f5:6d:9a:1c:1b:4d:5b:7b:78:2d:81:42:36:e2:03:
46:de:14:33:f7:f9:05:42:03:c7:61:ff:f1:ac:5c:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:A6:6B:F8:9E:0A:7F:64:AA:5A:3A:1E:75:D6:0F:94:59:D7:4A
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:65:e8:92:d8:7f:d1:c9:c3:b3:90:5c:67:6a:3c:f5:80:7c:
be:d7:ed:db:dc:84:c3:a3:cb:7a:b3:63:b1:94:b5:5c:02:1d:
8b:cf:74:fa:b3:f7:8b:6d:75:b5:92:b0:4f:8a:2e:20:1c:ae:
ee:24:ca:be:e3:ea:d5:76:25:66:a3:0e:14:a3:2c:d5:22:0a:
f9:ac:70:63:2e:fe:f2:03:69:7d:6d:fa:6e:97:16:fe:d7:17:
32:cc:80:c6:03:62:08:f9:c1:f2:f0:81:ab:60:db:9c:93:56:
c3:52:06:86:b5:4c:c9:6f:83:05:17:10:34:33:5e:a9:f5:0f:
14:ea:41:f0:37:eb:da:72:17:06:7f:5c:23:d1:37:b6:c8:f7:
34:fa:99:a1:06:54:8f:18:72:d0:62:ce:83:63:6e:0f:08:75:
bb:d5:15:16:8d:82:77:6c:ee:85:49:44:4e:73:1f:51:35:bc:
bd:eb:e9:8d:cc:6c:3e:19:4e:3e:02:d8:c3:09:51:e1:b0:c2:
9e:cf:35:6a:0c:62:79:fe:5c:bd:2b:ec:a7:b4:76:7a:9c:26:
d0:4e:25:f1:68:b1:0a:fa:40:5f:98:ef:ac:ea:84:91:99:da:
5d:b3:f7:cd:0a:8a:2b:c4:82:10:84:66:e8:c6:5f:83:7f:2a:
8b:c3:2c:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUeMZY9JS55nzUVoRieOlwZsMXAGYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRkE2ODMwMDAwMTEwLwYDVQQFEygzNDA3MUE4NjNB
M0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2ODk1MEEwMB4XDTI2MDEyNjEyMjc1NFoX
DTI2MDEyNzE2MTk1NFowMzExMC8GA1UEAxMoNTZGRUE2NkJGODlFMEE3RjY0QUE1
QTNBMUU3NUQ2MEY5NDU5RDc0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKy9YYv1/q8/TaBCBlMuusdq54rA5C7iAEQNs50QuMvrDKwjqUoJjtVYb07s
OMtyVYEu4u6JRJHAs6aFgdlRf3Zl7DoiajqCIE+FriSD6eIanFlZdhRpoPNyvwKN
8+o6u7dKn0aIx+MntTLENqVYvw3bN1lS4+tTgQMG+0wSCZEtibNKrDze1IS2s2q7
0aCo8+o2uciyW2kl+1T6RrNMjtyzB0rqDWnGGXVA0S0/yUnij5YcTPtTMCUDj7aW
nu+ddUBmglAwZTVtAObqtVL7wI5YByA5+hc+aNxopgY+Jy5K9W2aHBtNW3t4LYFC
NuIDRt4UM/f5BUIDx2H/8axc81ECAwEAAaOCAfEwggHtMB0GA1UdDgQWBBRW/qZr
+J4Kf2SqWjoeddYPlFnXSjAfBgNVHSMEGDAWgBQ0BxqGOjxu8t02eV9FVA4vtolQ
oDAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9ycGtp
Lm93bC5uZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0
MEUyRkI2ODk1MEEwLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz
eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy
QkI0NjhGN0M3MkZEMUZGMi9OQWNhaGpvOGJ2TGRObmxmUlZRT0w3YUpVS0EuY2Vy
MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtpLm93bC5u
ZXQvcnJkcC9vd2wvMC8zNDA3MUE4NjNBM0M2RUYyREQzNjc5NUY0NTU0MEUyRkI2
ODk1MEEwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN
BgkqhkiG9w0BAQsFAAOCAQEAX2Xokth/0cnDs5BcZ2o89YB8vtft29yEw6PLerNj
sZS1XAIdi890+rP3i211tZKwT4ouIByu7iTKvuPq1XYlZqMOFKMs1SIK+axwYy7+
8gNpfW36bpcW/tcXMsyAxgNiCPnB8vCBq2DbnJNWw1IGhrVMyW+DBRcQNDNeqfUP
FOpB8Dfr2nIXBn9cI9E3tsj3NPqZoQZUjxhy0GLOg2NuDwh1u9UVFo2Cd2zuhUlE
TnMfUTW8vevpjcxsPhlOPgLYwwlR4bDCns81agxief5cvSvsp7R2epwm0E4l8Wix
CvpAX5jvrOqEkZnaXbP3zQqKK8SCEIRm6MZfg38qi8MsBw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 17:48:16 2026 by rpki-client