Manifest

$ rpki-client -vvvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          v9lO/oi7w0hbnzuOi67xmk2xdlpb8OoK+0wvzLiTR40=
Subject key identifier:   4C:CB:4D:49:60:92:0D:C1:89:67:21:0B:37:0E:21:81:F4:EC:B3:51
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       54531C75455925EE34404BD7C97DF300035FF089
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          0957
Signing time:             Sun 20 Sep 2026 12:58:50 +0000
Manifest this update:     Sun 20 Sep 2026 12:53:50 +0000
Manifest next update:     Mon 21 Sep 2026 13:42:50 +0000
Files and hashes:         1: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: 7B1hn/nseYyTK+M9pcx/g9/2nwENdaKXdibJCYVcHIg=)
                          2: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: cbo/b+qUiGch0Ee6VSG/U0yTchpOBV2gq0Anp3RIG0I=)
                          3: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: AjJdum5gnCa7+36v844jqAKHTrJ2KwRmgeY12DZxrgU=)
                          4: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: 4LnOGB1dGyO7Q0emrkIOW3zUlbs1dTODcAlhO8nJ7wE=)
                          5: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: mOEZZXlbvr0r+t4Err2xpXQIv0HG+ZQx0ZqgTehzL54=)
                          6: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: aFfHNz8vZ8PysUabJdPBqoXohTEKbttrZJTJ/VNXE5I=)
                          7: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: qT0lMgRpwLFso5naa/mhacL7Cn9IbDh6RYMw8Ne5qR4=)
                          8: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: i8MRPT4JW7IJt18fl2YHY7l2cFI+I1Mld1o5o64OPms=)
                          9: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: szqMQq51gue7SKW98pCvcyJemqw5be/J1zq30vj+ZYg=)
                          10: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: 3uAkrqhuez17TRSNGWL+mcT//fGQ/vDhgEfqbO+yR7c=)
                          11: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: 3oCbnlvZbHVrmm1N7RiXf87fk015oR3GhA9lb6aGQkw=)
                          12: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: 5onGKkrDsL9as4FtjV/uwdgkFR4S3pkEJeM8wIZlyF0=)
                          13: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: Om6NqlNn2mDqtN/aRlJUGsjJsBk9Lm1O1udLmvpblkw=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 13:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:53:1c:75:45:59:25:ee:34:40:4b:d7:c9:7d:f3:00:03:5f:f0:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Sep 20 12:53:50 2026 GMT
            Not After : Sep 21 13:42:50 2026 GMT
        Subject: CN=4CCB4D4960920DC18967210B370E2181F4ECB351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:71:ca:1d:7b:a2:42:31:ee:94:c9:31:71:c2:
                    86:22:e3:10:00:2d:24:c9:2a:64:9f:42:41:5f:78:
                    08:2a:1d:d1:1d:f9:9c:98:bd:7c:00:cc:9f:be:b8:
                    6f:28:f5:83:d9:7c:0d:cd:09:9e:c1:3e:9e:09:6d:
                    6a:f5:14:2d:de:3c:6b:cc:09:4d:30:98:a4:f7:69:
                    d0:cc:f9:80:7d:47:4f:9f:0f:2c:cb:00:92:20:65:
                    9f:20:e0:e0:71:23:e9:f1:01:92:e1:78:58:cf:16:
                    07:25:90:59:32:f8:da:3e:43:dc:21:c3:a4:e7:6a:
                    6c:eb:0a:81:f1:22:f3:a8:df:51:ec:f9:8f:36:d3:
                    be:65:5c:8d:b4:04:dc:d4:cf:67:df:73:10:32:9c:
                    29:ba:5d:88:89:e0:38:81:8d:04:5c:18:23:53:e1:
                    e5:74:5d:e4:4b:6c:7c:aa:82:f3:0d:0a:a7:80:62:
                    7b:0c:32:b4:88:f6:da:3a:88:92:ef:f9:f4:a0:c2:
                    8b:49:09:6e:98:a0:85:a9:ae:c0:97:5e:2b:1d:c5:
                    0f:f6:de:9a:28:9d:bd:7d:f3:24:cd:62:7a:1b:ac:
                    89:e5:f8:74:28:13:ac:3c:84:cd:7a:3a:71:f6:d5:
                    6e:56:17:2d:af:f3:69:c2:85:e0:d3:64:dd:61:88:
                    06:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CB:4D:49:60:92:0D:C1:89:67:21:0B:37:0E:21:81:F4:EC:B3:51
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:09:09:47:65:12:a3:eb:b0:73:02:bb:73:41:ce:3d:18:35:
         2c:76:6b:fd:81:fe:28:17:a8:4b:c9:61:97:35:d4:45:53:99:
         93:d4:d1:c5:b2:6f:aa:4f:a5:83:3c:63:ff:ba:d6:fa:8d:c2:
         95:03:e7:70:3f:25:11:89:6a:01:ed:24:1c:4c:c7:59:39:08:
         eb:c1:68:20:9c:94:54:54:55:51:18:81:f8:d8:c5:a2:f5:20:
         2d:c2:1b:1e:ae:ea:a4:49:bc:4c:57:68:61:c1:b1:7a:8c:68:
         4a:23:4e:0b:a2:0f:4f:6e:0d:6a:5d:63:12:34:d5:3a:8f:54:
         ec:50:16:56:c0:33:f5:1d:99:ba:21:49:97:57:da:ec:82:6b:
         96:7e:22:02:b0:5b:5b:4c:af:43:78:70:21:9e:4a:b6:36:4e:
         8f:4e:5c:55:06:62:1f:4d:bf:ce:80:fa:ac:4a:ea:99:78:a5:
         82:43:a3:f7:76:05:db:ab:bd:10:9e:8e:15:db:9e:27:f8:85:
         23:a0:fa:b9:ed:69:d3:10:d4:5a:b9:18:18:a7:47:41:c9:ca:
         65:3a:aa:7b:22:eb:f1:e2:22:8c:3b:80:ae:fe:7c:25:ae:56:
         65:ba:ed:8f:6a:2c:6d:22:ac:f1:40:4d:85:88:1a:cc:5e:ff:
         d6:e3:c6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----