Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File:                     8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier:          IX24XiKgBYDNutCtKAsWVp6Ufw0KvEwqPdpWzMuGpl4=
Subject key identifier:   6A:D8:8F:98:60:1A:D7:C8:E7:26:28:92:77:A6:AB:57:1E:BA:B8:9A
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       766E438ECBA8E2190FC05E29E064928354D2598D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number:          096A
Signing time:             Tue 07 Jul 2026 02:28:59 +0000
Manifest this update:     Tue 07 Jul 2026 02:23:59 +0000
Manifest next update:     Wed 08 Jul 2026 04:23:59 +0000
Files and hashes:         1: AS17816.roa (hash: tN3zd8fp1oUerrwzNp3Y5o1t6y/22a39ctPNqAVSk+g=)
                          2: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
                          3: AS4808.roa (hash: PrDxYVrCUkt6mVWujFeZI9E7xKyQfcRywyZA9RbTStI=)
                          4: AS17622.roa (hash: 1QBktm0aSfEfVDBH0Io2ulU77Qgk36+xqhwrGYDSH8c=)
                          5: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
                          6: AS140886.roa (hash: tIGhfy98u9aOuXMKeDjEM5Fc1ERJ4zFfjcQrRPXJkxA=)
                          7: AS17623.roa (hash: AJxAFWpD8AfWKY6+jZ6I1cyE71fIvsPRyw4hw5aoirQ=)
                          8: AS136958.roa (hash: tJ7clGUxwjgHAvKUf5JFZJKtEu7C2WHAFWD+fqLqwxI=)
                          9: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
                          10: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
                          11: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
                          12: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
                          13: AS136959.roa (hash: +LHPZscb+4mNB8auhA86ZR5EQMndpw4c5/Ap0L3KAyM=)
                          14: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
                          15: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
                          16: AS140979.roa (hash: mgWen9u5xr5vgwQUtT9yhur6d5s8RLRyDezfDQAOhnA=)
                          17: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
                          18: AS135061.roa (hash: rxjrTJDpcLBQN5KNwi5bdCExhuM+ewDi6e5z64f7kLs=)
                          19: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: GmZrDRPY6cvuoIG/3sgd/y8bWkkv0cFDhLwbROOO2js=)
                          20: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
                          21: AS9929.roa (hash: jI7O+83RVUXJZyh8MDGyLwHbkJUrQs1z78Iw5ulrT74=)
                          22: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
                          23: AS4837.roa (hash: s3AX8bV5X3ToOKbmeGtGLfSfxqQmlNuLi869DBskCEE=)
                          24: AS134543.roa (hash: fxU9hlqZead/iB7oBP3LV5LREN+d7pwXKIPYcdTROrc=)
                          25: AS138421.roa (hash: Se4QZj2/NWj99HUCHHCaMRJdzoKaGE9rkO4n0naMvsg=)
                          26: AS17621.roa (hash: HIED5sDCeZSsEPUfZqFM2Xy5g60N7tMhj6LJZsNT74U=)
                          27: AS140726.roa (hash: sduvi5H/w3JTDxxgFugQCgDVHT4rmmt2mCzvQjJson4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 Jul 2026 04:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6e:43:8e:cb:a8:e2:19:0f:c0:5e:29:e0:64:92:83:54:d2:59:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: Jul  7 02:23:59 2026 GMT
            Not After : Jul  8 04:23:59 2026 GMT
        Subject: CN=6AD88F98601AD7C8E726289277A6AB571EBAB89A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:73:da:68:7e:1a:e8:c9:99:a6:67:73:ce:48:
                    78:0c:c7:79:fc:bb:f6:fe:55:cf:c6:d9:2e:5e:d1:
                    0e:fb:4b:5a:ef:a3:12:1e:80:cd:a2:12:f7:56:4f:
                    55:36:83:87:bb:fd:4e:12:7a:a3:65:fd:94:02:8e:
                    d5:49:67:83:51:46:ac:9c:3b:ee:e0:e4:73:9d:2c:
                    de:83:03:0e:6c:8d:a9:40:a4:d3:79:e2:96:18:c5:
                    41:83:39:39:9b:0d:1d:5d:27:aa:12:07:be:f0:be:
                    1c:f3:f3:48:ba:0f:d3:7e:b1:14:a2:1e:12:36:b8:
                    96:4c:db:de:86:3b:d7:f4:e2:fe:fb:1a:0c:01:ad:
                    05:c7:46:bb:14:b3:2f:48:b9:44:5a:d2:5a:25:63:
                    8c:b4:f7:2d:4c:76:5d:52:71:1b:5d:b8:fd:08:09:
                    5a:3f:03:fa:54:7d:68:e8:b4:51:a8:73:54:88:3c:
                    42:bf:7b:82:05:55:57:3a:6e:4b:7a:01:aa:7c:90:
                    97:71:1a:47:5f:a8:6d:b1:92:83:9e:23:43:d0:53:
                    54:1d:cb:df:e6:8a:1b:68:5c:9f:57:70:97:4b:54:
                    0d:3a:3d:63:20:04:da:ef:a2:10:4b:51:66:fa:58:
                    13:30:b7:07:a8:74:86:8d:07:3d:c5:80:ae:3b:ab:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D8:8F:98:60:1A:D7:C8:E7:26:28:92:77:A6:AB:57:1E:BA:B8:9A
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:05:f3:12:1f:97:0c:ca:02:99:b1:12:8d:fd:b4:28:55:86:
         25:eb:35:89:fd:1e:ea:b7:47:85:61:1b:ea:f0:a4:5e:46:79:
         42:72:7e:d7:65:c4:4d:7c:71:0a:d2:ee:c0:51:f1:2d:75:52:
         f2:25:b5:75:b4:62:45:80:05:a0:60:f2:ae:93:76:ba:d0:d8:
         dd:d7:0f:58:a2:b5:d0:34:e5:30:a6:5a:59:9e:ea:4b:a5:81:
         f8:9e:60:bd:a2:aa:04:c7:97:e7:39:86:b6:48:c0:9f:08:e4:
         dc:fc:2c:f5:b0:a6:ec:4d:d1:45:ee:97:9f:1a:b0:42:88:f8:
         52:8f:db:84:99:31:20:30:21:5a:c8:73:45:c7:b7:e2:4e:ae:
         56:86:4c:ea:59:2d:51:b1:26:37:71:f5:f8:38:b5:2e:56:29:
         10:41:1f:3a:1a:7c:a5:1b:e7:2e:b3:aa:6a:5c:0d:9d:f4:bb:
         f2:25:ff:37:70:3e:87:9c:36:fd:4f:a0:ce:5f:24:77:cb:aa:
         ef:88:10:6e:ff:18:97:ae:1f:53:77:3d:a6:b2:03:44:9a:fa:
         c4:03:b6:5e:93:eb:20:86:f8:6a:91:16:a9:a3:4d:05:f3:72:
         9d:b4:52:b8:58:29:8e:f4:62:b3:a9:fa:b2:8a:66:ec:cf:49:
         17:b0:19:ff
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdm5Djsuo4hkPwF4p4GSSg1TSWY0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz
Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDcwNzAyMjM1OVoX
DTI2MDcwODA0MjM1OVowMzExMC8GA1UEAxMoNkFEODhGOTg2MDFBRDdDOEU3MjYy
ODkyNzdBNkFCNTcxRUJBQjg5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMpz2mh+GujJmaZnc85IeAzHefy79v5Vz8bZLl7RDvtLWu+jEh6AzaIS91ZP
VTaDh7v9ThJ6o2X9lAKO1Ulng1FGrJw77uDkc50s3oMDDmyNqUCk03nilhjFQYM5
OZsNHV0nqhIHvvC+HPPzSLoP036xFKIeEja4lkzb3oY71/Ti/vsaDAGtBcdGuxSz
L0i5RFrSWiVjjLT3LUx2XVJxG124/QgJWj8D+lR9aOi0UahzVIg8Qr97ggVVVzpu
S3oBqnyQl3EaR1+obbGSg54jQ9BTVB3L3+aKG2hcn1dwl0tUDTo9YyAE2u+iEEtR
ZvpYEzC3B6h0ho0HPcWArjur2QMCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRq2I+Y
YBrXyOcmKJJ3pqtXHrq4mjAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z
JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF
NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY
eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8xLzhBMUI0RTRBNjMyOTVGMThCNEYwNkZGRjZBRDAyQzMxNjVCRjk5
MjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQANBfMSH5cMygKZsRKN/bQoVYYl6zWJ/R7qt0eFYRvq8KRe
RnlCcn7XZcRNfHEK0u7AUfEtdVLyJbV1tGJFgAWgYPKuk3a60Njd1w9YorXQNOUw
plpZnupLpYH4nmC9oqoEx5fnOYa2SMCfCOTc/Cz1sKbsTdFF7pefGrBCiPhSj9uE
mTEgMCFayHNFx7fiTq5WhkzqWS1RsSY3cfX4OLUuVikQQR86GnylG+cus6pqXA2d
9LvyJf83cD6HnDb9T6DOXyR3y6rviBBu/xiXrh9Tdz2msgNEmvrEA7Zek+sghvhq
kRapo00F83KdtFK4WCmO9GKzqfqyimbsz0kXsBn/
-----END CERTIFICATE-----
Generated at Tue Jul 7 18:50:57 2026 by rpki-client