This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
File:                     AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft (raw, json)
Hash identifier:          pvxfWlVkU7GxhLwGUnYFMVtn+yH2U1VzNjUJWFAAih0=
Subject key identifier:   D7:90:3D:AC:64:42:9D:86:99:CB:85:BF:28:8A:FA:57:B0:BD:40:C2
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Certificate issuer:       /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial:       0894AAD92774CE9ED62286AC12197DFC62BFFC1D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
Manifest number:          0B
Signing time:             Mon 26 Jan 2026 19:16:02 +0000
Manifest this update:     Mon 26 Jan 2026 19:11:02 +0000
Manifest next update:     Tue 27 Jan 2026 21:19:02 +0000
Files and hashes:         1: 3130332e3232372e38302e302f32322d3232203d3e203536323832.roa (hash: 67Oh/ymrInnyN9IsmBRAf4Oqr+sTsFG1G6E3Ho7F13Y=)
                          2: 3231312e3135352e38382e302f32312d3231203d3e203233373234.roa (hash: oiQVtHJ3uNb8QOBB9izDh02SvyMImPV2UxDp/+mGsRc=)
                          3: 3130332e3233312e36342e302f32322d3232203d3e203233373234.roa (hash: LpvK5C59OgH2zOKIAf1omS7fD9yuG55reZjtWDkxCvk=)
                          4: 3130332e3233312e36342e302f32322d3232203d3e2034383038.roa (hash: nRRFpOXt7+r1r4HHhB0TdnD+tb4rzqeupmIIbMHWcPY=)
                          5: 3130332e3233352e3232382e302f32322d3232203d3e203233373234.roa (hash: cSekYoXWo4F97nCKQ9LiLYgABNxkEbnTEZkEIaXWjG4=)
                          6: 3130332e32362e302e302f32322d3232203d3e2034383038.roa (hash: hES7KnWjszOm1orkc01aAlgaOEAc3n79ifMNYlhogjE=)
                          7: 3231312e3135352e38382e302f32312d3231203d3e2034383038.roa (hash: p4fyfGNxAe76CjzdibjAUATy2TsPOlwMbPqb3NiuGKA=)
                          8: 3130332e3233352e3232302e302f32322d3232203d3e203536323832.roa (hash: X8o34ROwXxUIvMj22mGm3ExvXR7zXrq28moPkyZq7U4=)
                          9: 3130332e3233352e3232302e302f32322d3232203d3e2034383038.roa (hash: K/BUO9D2gJDFUOFnsTn+bu4RijrNmL2WXhJe6lTExSQ=)
                          10: 3130332e3233352e3232302e302f32322d3232203d3e203233373234.roa (hash: 5+04lzm1kZVQl2jHRAmUi4aImYXffFMCeG2lf7tuUT8=)
                          11: 3231312e3135352e39322e302f32322d3232203d3e203536323832.roa (hash: Oud9vLusnBYO5V/oOK0QCRmEsa02XweE3QgWrixGdbY=)
                          12: 3130332e3232372e37362e302f32322d3232203d3e2034383038.roa (hash: Hf9k2SJcA/xP1ErQqm29WhIrSfaOziA5BA7Ts2+4KIA=)
                          13: 3130332e3233352e3233322e302f32322d3232203d3e203233373234.roa (hash: 6HkpCfuvi7d2b5JTtXvx5y5uDPvD3zn+PFyvB7H8AaI=)
                          14: 3231312e3135352e38382e302f32312d3231203d3e203536323832.roa (hash: G6NzSwnjHuwXvCFCTMM1FDciaAnXWZw1fvYtgzPqHkw=)
                          15: 3130332e3233352e3233362e302f32322d3232203d3e203536323832.roa (hash: Xs6GZADdNRP1LIbbJAD2x90PgWF5NZ71n13/7Myfb6Q=)
                          16: 3130332e3233352e3233362e302f32322d3232203d3e203233373234.roa (hash: hOFFxJZSCtTfa2utTwRhvncMcw1tnlhy0thackZF5dk=)
                          17: 3130332e3234392e3235322e302f32322d3232203d3e203233373234.roa (hash: 1WBs6BppIFH0tyxeChtNBzDAXXZi9kK1gmCwk3RWTFo=)
                          18: 3130332e32362e302e302f32322d3232203d3e203536323832.roa (hash: l4wiNQJR+y8NzxUY0+C+9W6BHJv1urB3s8HDTzyTXSw=)
                          19: 3130332e3233312e36382e302f32322d3232203d3e2034383038.roa (hash: 8S3KWRNb0/Iteu4mNRrbOAaKLyXnnWRnw4jAyEQHBOk=)
                          20: 3130332e3232372e38302e302f32322d3232203d3e203233373234.roa (hash: XeSiJljtfNIQ1QNcYk6lRg7M2ASKlzajd2eY/EQYSM4=)
                          21: 323430363a346430303a3a2f34382d3438203d3e2034383038.roa (hash: 2uNGZKNPkXDb+cBaW04Kj0JovDPXkDMs8xvwIjEzk3g=)
                          22: AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl (hash: xrSrVzYd2TD/34Nl5h05vOVdwcGkROk2FHO0IWheZ7I=)
                          23: 3130332e3233352e3233322e302f32322d3232203d3e2034383038.roa (hash: LvIz0HxxaDpvm/3DSxcGIZnvupUdznL2kgEGSmjy5qk=)
                          24: 3130332e32362e302e302f32322d3232203d3e203233373234.roa (hash: 3byVHWNmJp/2EX7LmRxD4s69SGAdvhL0UmPbmDzOCM8=)
                          25: 3130332e3233352e3232342e302f32322d3232203d3e203536323832.roa (hash: 4MwjG50X/nBCM4rZdoBVw0vIQd2e2k+alLWmgojSfbA=)
                          26: 323430363a346430303a3a2f34382d3438203d3e203233373234.roa (hash: rRMv5qvSwQGSPk+JjA1TNxIYPjTFDxwyjZnHizvQI3s=)
                          27: 3130332e3234392e3235322e302f32322d3232203d3e203536323832.roa (hash: aCY8rSMAxv7seXtdLE3Sx44spVXVDzHEaKsU+pGe2yM=)
                          28: 3130332e3233312e36342e302f32322d3232203d3e203536323832.roa (hash: uXsXBVMLc9CSkdwbGdKuhtgJxCWm9r/OJld+/XbAd2Y=)
                          29: 3130332e3233352e3232382e302f32322d3232203d3e203536323832.roa (hash: xP7nMAZ+jb5uBbP0Yz6ClJWEoaE3SkfQMNvQkbdgTR0=)
                          30: 3130332e3233312e36382e302f32322d3232203d3e203536323832.roa (hash: wEw1MvonFWnRmkF7XaWDFr8v781+GQM1bCe5yjSrewg=)
                          31: 3130332e3232372e38302e302f32322d3232203d3e2034383038.roa (hash: Ub2YiOuWmf66zRiG6c5/Kt3RHinddf8M7kz+iwfuBkI=)
                          32: 3130332e3233352e3233322e302f32322d3232203d3e203536323832.roa (hash: rqA17roVk2OYFjjATeew0QhEs2Dl1lN/XReDe2t/+wY=)
                          33: 3130332e3232372e37362e302f32322d3232203d3e203536323832.roa (hash: koFAnclV0VwMTFVvBzHMWh9CcYC0evzkfvuw3oC/9B0=)
                          34: 3130332e3233352e3232382e302f32322d3232203d3e2034383038.roa (hash: EaQ3PZUtcd6hEBlEphYTz7qn9eqtcMN6rjWrxuqTEX8=)
                          35: 3130332e3233352e3233362e302f32322d3232203d3e2034383038.roa (hash: UrLZO0SNnYdGOHmktaYva1LeY/50x97Gb+svkVkI7qE=)
                          36: 3130332e3233312e36382e302f32322d3232203d3e203233373234.roa (hash: aH5qNlQa1gUeKMoyfPRsXJM7qgS/0cpKGUHT4IHU1kY=)
                          37: 3130332e3233352e3232342e302f32322d3232203d3e2034383038.roa (hash: JKCuI56UVOY9acAQVCrOY3pHaAZOXOhroASOdVhxWoA=)
                          38: 3130332e3232372e37362e302f32322d3232203d3e203233373234.roa (hash: ob1gq8SWltCSR9T+Y7Acxj74r+9vls30VHLpIxpSgpA=)
                          39: 3130332e3234392e3235322e302f32322d3232203d3e2034383038.roa (hash: wYkRiToQcgtywHxF4nlDNt1pJe6kJa/wahpn40b7OLE=)
                          40: 3130332e3233352e3232342e302f32322d3232203d3e203233373234.roa (hash: ED7GjEqXdWxdnve4xU4KVyiyGh/sNDt31pjZBOKMjPc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Jan 2026 09:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:94:aa:d9:27:74:ce:9e:d6:22:86:ac:12:19:7d:fc:62:bf:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
        Validity
            Not Before: Jan 26 19:11:02 2026 GMT
            Not After : Jan 27 21:19:02 2026 GMT
        Subject: CN=D7903DAC64429D8699CB85BF288AFA57B0BD40C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:dd:da:b8:ed:13:2d:05:da:31:c5:cf:51:
                    ed:08:1f:42:7e:af:5f:35:e2:21:cc:f2:1a:57:c5:
                    7b:42:7a:26:99:c2:15:e8:c0:af:fd:a5:7f:08:1b:
                    56:2b:41:d4:27:8d:23:04:28:87:89:99:ea:ca:44:
                    f2:f7:3b:fa:7e:f7:35:7f:a7:d7:1b:0c:50:44:94:
                    6c:48:42:64:bc:f9:ee:4e:05:a4:e9:b7:60:97:79:
                    27:92:f9:bf:dd:bf:1f:31:8e:51:0f:66:49:19:64:
                    c9:f6:9f:81:0c:5d:5d:d4:87:54:03:d6:55:ea:22:
                    e0:e5:5d:7a:a4:09:58:96:38:b2:65:4d:de:54:7b:
                    99:ba:19:6d:d9:2e:c2:e4:fa:d5:e7:68:ad:b9:bb:
                    ca:e1:57:08:01:4e:70:fb:7a:8a:f1:cb:f2:6d:e0:
                    5a:d2:bb:c6:a6:7b:9b:cd:09:52:a4:c3:8b:fe:cc:
                    0a:4f:29:43:4e:32:59:f7:e0:f1:24:1c:30:6a:52:
                    b1:a1:29:dd:d7:d3:14:42:7e:7f:05:3b:72:b7:ef:
                    f6:31:31:70:62:39:a7:50:9f:ac:db:8e:4c:b4:5f:
                    0a:77:59:60:3a:d1:d2:66:bc:c6:75:53:3a:d0:5f:
                    01:28:d2:64:d4:30:03:fd:63:f4:f6:ea:08:d2:87:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:90:3D:AC:64:42:9D:86:99:CB:85:BF:28:8A:FA:57:B0:BD:40:C2
            X509v3 Authority Key Identifier:
                keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e5:9c:4e:ca:3f:ca:4b:52:0a:63:8a:ed:e8:d1:8d:d3:b6:
         e7:6b:b7:8a:d8:30:65:a4:d1:59:d0:79:82:db:a6:13:a7:46:
         7c:eb:62:cc:df:ec:78:25:5e:1c:d9:80:6b:d3:cc:c2:8a:43:
         4c:d1:d4:7c:8a:41:22:d4:0b:7b:96:4c:77:d9:a1:1b:23:6d:
         b0:d2:c8:43:f2:61:93:01:a8:63:f7:0b:f0:61:13:dd:80:91:
         d5:f8:6e:39:fa:cb:76:9e:78:3e:17:6d:79:eb:a7:93:8a:1f:
         aa:5c:40:aa:1f:b9:d6:9d:e4:50:e3:ae:96:23:e5:31:a0:50:
         81:cd:d3:52:7d:3a:c8:78:90:0a:8f:de:82:39:21:2c:9d:40:
         62:ce:cf:48:5e:41:72:d4:8f:03:42:51:0b:59:d6:36:81:15:
         68:d3:b9:58:0e:51:32:3c:ad:dd:f2:de:d9:05:39:ee:9e:df:
         b6:c6:86:89:e3:7e:b9:ee:b4:94:a0:6a:09:2d:2b:bd:ad:9a:
         75:49:1b:a4:fe:7c:c2:94:8d:a8:bc:08:5d:ca:25:96:36:bc:
         d8:ff:35:4a:07:49:ef:e7:ec:7f:aa:81:ba:df:92:fe:e0:50:
         a3:64:7b:ec:84:53:63:90:aa:52:02:0b:a0:08:5f:f2:e1:d6:
         e6:c0:59:65
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCJSq2Sd0zp7WIoasEhl9/GK//B0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjAxMjYxOTExMDJaFw0yNjAxMjcyMTE5MDJaMDMxMTAvBgNV
BAMTKEQ3OTAzREFDNjQ0MjlEODY5OUNCODVCRjI4OEFGQTU3QjBCRDQwQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ393auO0TLQXaMcXPUe0IH0J+
r1814iHM8hpXxXtCeiaZwhXowK/9pX8IG1YrQdQnjSMEKIeJmerKRPL3O/p+9zV/
p9cbDFBElGxIQmS8+e5OBaTpt2CXeSeS+b/dvx8xjlEPZkkZZMn2n4EMXV3Uh1QD
1lXqIuDlXXqkCViWOLJlTd5Ue5m6GW3ZLsLk+tXnaK25u8rhVwgBTnD7eorxy/Jt
4FrSu8ame5vNCVKkw4v+zApPKUNOMln34PEkHDBqUrGhKd3X0xRCfn8FO3K37/Yx
MXBiOadQn6zbjky0Xwp3WWA60dJmvMZ1UzrQXwEo0mTUMAP9Y/T26gjShw4pAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU15A9rGRCnYaZy4W/KIr6V7C9QMIwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2Njg0ODEvMC9BRjM4MjJCQTdBNTg1
MERBMDY5OTNCRjIyRDk5MEIyQkNBRjJCREU4Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+WcTso/yktS
CmOK7ejRjdO252u3itgwZaTRWdB5gtumE6dGfOtizN/seCVeHNmAa9PMwopDTNHU
fIpBItQLe5ZMd9mhGyNtsNLIQ/JhkwGoY/cL8GET3YCR1fhuOfrLdp54Phdteeun
k4ofqlxAqh+51p3kUOOuliPlMaBQgc3TUn06yHiQCo/egjkhLJ1AYs7PSF5BctSP
A0JRC1nWNoEVaNO5WA5RMjyt3fLe2QU57p7ftsaGieN+ue60lKBqCS0rva2adUkb
pP58wpSNqLwIXcollja82P81SgdJ7+fsf6qBut+S/uBQo2R77IRTY5CqUgILoAhf
8uHW5sBZZQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 22:25:17 2026 by rpki-client