
$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File: 34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier: Xk5zzQXhsoDRY7wmeHyV/IjGIMUEoNN8+dbb+Ggm26c=
Subject key identifier: 2B:57:0C:DB:0D:52:6A:C5:72:B8:A8:1F:38:D2:6E:17:B8:FF:CF:91
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer: /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial: 58A68F6390FD2EBA21A8857CA82E1A8351863202
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number: 0886
Signing time: Sat 18 Apr 2026 21:49:23 +0000
Manifest this update: Sat 18 Apr 2026 21:44:23 +0000
Manifest next update: Mon 20 Apr 2026 00:32:23 +0000
Files and hashes: 1: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 5rh5xKoFim9+qzXuz9ue2E9gTTOhHmo70qMX7Q8lZTQ=)
2: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
3: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: VZm+1A419bpjhNHk7oa8SlaXnBnjm4UoiyMj6yzbhMQ=)
4: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=)
5: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: MrNH1x9FQXsg2Aw/EtoyyBRObtKZxhGXirCqqhyFGbI=)
6: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=)
7: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=)
8: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: cDTbMfGHTly+QeOfyQG+o4pg0zroCRCYVzgE6JjA/GY=)
9: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=)
10: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=)
11: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: pZv8WRdNlBV4IKDx6bNv7oBg2N/5UFROImiToIit/aA=)
12: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
13: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: lWIr6sYh7jORalo3knn4O8Tkqys/QMzZOqOsz0HK/gg=)
Validation: OK
Signature path: rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 00:32:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a6:8f:63:90:fd:2e:ba:21:a8:85:7c:a8:2e:1a:83:51:86:32:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Validity
Not Before: Apr 18 21:44:23 2026 GMT
Not After : Apr 20 00:32:23 2026 GMT
Subject: CN=2B570CDB0D526AC572B8A81F38D26E17B8FFCF91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:e5:34:f5:fa:3e:ef:6e:ea:1b:89:0a:8e:
29:e7:a8:3a:fd:41:3d:5c:27:2e:7d:5e:9e:0c:0f:
b7:9f:9c:9c:8d:b3:f6:08:38:e8:14:e9:4f:fe:7f:
45:50:23:31:81:0a:3b:45:70:aa:25:ce:6d:75:e1:
4e:8f:e1:b1:89:41:af:4b:29:93:09:72:d3:5f:e5:
22:eb:ed:0c:e1:5a:33:1f:3a:36:d1:af:7a:0a:98:
ac:dc:85:87:ed:f9:aa:3b:de:77:9b:82:63:25:71:
76:dd:1d:6f:a8:a5:c1:8f:74:0b:de:1f:38:25:24:
f6:1e:e5:ca:89:83:ed:a9:e3:7c:6b:85:67:d8:a9:
0c:7a:ca:42:9e:90:6f:4f:ef:5b:49:07:00:62:8a:
cb:8d:67:35:4c:d8:07:32:65:88:6b:87:4a:95:7f:
b8:7e:dc:bc:1f:3e:21:f8:01:13:4f:0b:b0:67:13:
98:1b:36:e5:f2:a1:38:7f:ce:aa:b6:45:18:b6:09:
67:a2:de:97:27:db:14:51:7b:81:71:e7:0f:ab:af:
ea:f0:17:02:8e:89:49:89:7b:a6:1a:15:b4:88:58:
30:b1:33:91:31:1e:2e:bf:d0:c6:f1:8b:29:de:06:
ce:dd:4f:b7:b1:56:ba:8f:40:3d:33:10:82:36:89:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:57:0C:DB:0D:52:6A:C5:72:B8:A8:1F:38:D2:6E:17:B8:FF:CF:91
X509v3 Authority Key Identifier:
keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:81:a3:2c:31:88:cc:e6:b1:f6:b6:01:87:5a:0c:98:d4:09:
a7:a3:ad:ad:38:d9:d7:c6:c4:c2:3c:82:12:cd:bd:80:21:f2:
a8:fb:02:87:87:a6:bb:c1:5e:ed:f2:99:f6:f1:7e:2f:2c:06:
1f:68:b3:46:e0:2b:27:d7:e3:31:ae:70:dd:30:b7:80:a2:80:
d3:42:0b:c9:0f:cf:3a:68:4b:41:aa:00:19:56:cf:84:b6:7f:
42:0f:72:08:81:69:53:a0:16:25:a5:10:00:8a:a8:fb:72:1f:
58:e7:e6:e7:e8:75:70:51:80:97:5d:0f:e5:d7:8c:f8:6f:eb:
e1:9d:e8:69:22:ab:63:f7:5c:2f:99:2d:f0:b5:4d:b6:6f:2c:
fc:6c:f6:60:31:d6:31:e8:c5:74:1e:86:54:a4:9e:2c:15:a4:
a2:0b:72:ad:8f:4e:5d:46:43:a8:4d:71:e3:27:1a:18:38:8a:
63:36:aa:b1:33:bd:c7:fe:c4:dd:06:c6:45:7f:8f:88:22:3c:
58:f2:f1:23:a9:09:0c:95:78:8c:b5:fb:e5:7c:71:8a:ef:ba:
a9:34:20:f2:e1:fd:73:1b:0f:7f:47:69:49:0a:ba:ac:9b:84:
61:61:e2:92:8a:d4:ed:fa:23:05:52:30:87:a4:34:67:15:5c:
3c:b7:16:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:31:30 2026 by rpki-client