This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          w2k++79GIh0km9POw3J6mwwZ8UdXtlwKbBOVvSo/0nk=
Subject key identifier:   E4:08:AB:DF:3E:22:8E:D6:6E:9E:5B:E7:31:27:94:0B:FE:4A:2A:22
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       03CF6A31EDC1525E71947DEB6D0447077FAC317D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          07E5
Signing time:             Sat 20 Dec 2025 03:12:54 +0000
Manifest this update:     Sat 20 Dec 2025 03:07:54 +0000
Manifest next update:     Sun 21 Dec 2025 03:14:54 +0000
Files and hashes:         1: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
                          2: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 5Brhm2QbQWW6T7H6N7ZZHpGq+hUDcBe5RkulDovf4e8=)
                          3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
                          4: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
                          5: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
                          6: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
                          7: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
                          8: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
                          9: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
                          10: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
                          11: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
                          12: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
                          13: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Dec 2025 03:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:cf:6a:31:ed:c1:52:5e:71:94:7d:eb:6d:04:47:07:7f:ac:31:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Dec 20 03:07:54 2025 GMT
            Not After : Dec 21 03:14:54 2025 GMT
        Subject: CN=E408ABDF3E228ED66E9E5BE73127940BFE4A2A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:2d:1d:88:bf:95:46:4b:ac:73:1d:95:73:
                    f7:e9:fd:7f:ae:4a:ef:fd:b1:57:18:f5:60:5c:2a:
                    77:f2:d9:b2:08:33:e1:f2:96:87:ef:d1:de:1e:9c:
                    bb:ea:49:9b:c6:16:cd:d7:c7:9c:b4:63:05:66:5c:
                    8d:4c:aa:0e:5c:16:17:a7:7d:94:fc:97:d2:18:65:
                    85:a6:87:c4:51:9a:4f:52:8a:f8:ac:ab:dd:7d:8c:
                    c1:9f:b3:3a:82:ef:9a:e2:f3:de:be:c6:d1:09:2d:
                    f8:84:6b:9e:38:96:37:14:00:ea:c6:c9:c7:d0:2a:
                    ad:80:8e:6a:cc:c3:05:40:96:07:cc:db:b6:c4:e2:
                    ff:8b:df:26:68:71:1f:e2:0c:cc:ec:4b:c8:71:02:
                    2b:3c:b2:a9:76:9e:73:fb:1c:18:d3:c8:80:e3:12:
                    76:5d:0f:ef:26:7a:f6:e2:b1:3d:97:f1:70:66:7b:
                    9c:11:a0:f0:35:1a:04:69:ef:ef:2b:7c:c2:0f:8d:
                    ea:e9:7e:27:72:87:36:82:b3:1d:0e:64:37:b6:a1:
                    b2:e6:17:49:6a:2c:04:ae:16:54:fd:13:cd:42:e4:
                    6d:75:84:15:a7:c8:4e:1b:e6:18:b7:5b:53:d3:4b:
                    80:8b:07:7d:3e:6b:55:67:b2:fd:6c:ef:d8:18:3d:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:08:AB:DF:3E:22:8E:D6:6E:9E:5B:E7:31:27:94:0B:FE:4A:2A:22
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:bf:ca:a3:da:f9:97:13:28:62:2a:bc:5d:e5:0d:c8:83:
         1e:ff:ac:73:e2:ea:36:4f:a4:7e:70:b9:7f:2f:1f:12:bf:d6:
         0a:f2:b6:ab:02:3c:3a:4a:d6:c7:85:c9:fe:99:8f:cd:d6:ec:
         4b:e2:3c:d2:12:e3:e3:45:94:38:47:17:91:1b:09:d0:f6:91:
         f4:fa:6b:ba:94:ee:1b:45:1d:e3:a1:4b:be:d3:92:98:2d:38:
         2f:ea:3f:b8:4e:cc:9d:a8:a6:a0:ce:95:b7:62:26:41:e0:d4:
         ad:b6:1e:e3:ce:06:a7:f4:9e:04:3f:78:f9:34:fc:28:54:51:
         09:9c:c4:c4:50:27:31:7d:3b:a4:bd:85:92:47:64:7b:1e:73:
         cc:a4:5f:d7:52:5f:e4:c5:27:fa:2e:f9:db:d0:66:4d:35:b6:
         d9:bb:f6:3a:86:9e:4e:7f:52:d3:54:be:23:33:08:7e:63:22:
         b4:b9:68:b0:b0:73:45:c5:f9:6c:49:ab:8f:ca:ff:7f:e8:e7:
         81:ac:4b:d3:74:28:5a:7f:8b:8c:68:98:8e:f9:9b:f7:08:a3:
         9e:ee:60:8a:f1:b5:cf:31:97:10:b2:3e:97:17:03:3c:1c:78:
         bb:75:7a:90:c0:22:d2:6f:97:98:9c:56:1c:22:f0:23:21:e5:
         f4:ca:2b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 13:59:26 2025 by rpki-client