Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File:                     8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier:          Dz02LCGN/9GaxIyuOfcfBalUkS5uEHhm3CBAGOrL+Hw=
Subject key identifier:   92:C5:2C:A8:6B:C1:26:4E:D3:C0:E6:05:E1:96:D3:F5:23:1B:5F:D8
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       3E9515C4C411913AE7A5FDA7E027BFD12E813EB0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number:          0AEA
Signing time:             Sat 22 Aug 2026 03:24:06 +0000
Manifest this update:     Sat 22 Aug 2026 03:19:06 +0000
Manifest next update:     Sun 23 Aug 2026 03:27:06 +0000
Files and hashes:         1: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
                          2: AS9811.roa (hash: iYZ5GcgY6k3QKJIThMRgNbaCPaW5ynhbDcXLMlvYgWU=)
                          3: AS17622.roa (hash: TZATGDoVQzSKm0EWz3JeV/9svypfb7DNKkzFhOR1iMU=)
                          4: AS134543.roa (hash: T38AQTA2JBsg/OjfMx0h+jt/C1YhSxNMf9/aTrMqrIc=)
                          5: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
                          6: AS4808.roa (hash: yVGL/DKCr5VBnCkZtmALFD9XrNLMx4X5SMHmOem+DbA=)
                          7: AS140979.roa (hash: isfIR3s4vIU5gx8nouRGVuuHOdanQ6uXZpeYAJruGMs=)
                          8: AS140726.roa (hash: A9X/C8q/L0w1M+9h8EhPlNJU4SOo3ekU6l5+XVHb7V0=)
                          9: AS135061.roa (hash: RVCWQar9ZNXMhd/LFTRjeuJSkmDkP6lJM6PX2DA9U2g=)
                          10: AS9929.roa (hash: 65iX6TquYCIznx+XdjmqEFJwAhYR005Y0kQN6MOQL2M=)
                          11: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
                          12: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
                          13: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
                          14: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: wKlQ5nddn1KoAyVsZpvAlbHoFA2Pl6N6660D1vSB2L4=)
                          15: AS136958.roa (hash: lobqNvrNLNNRSplCQnRCBR89Qbzqv2qtl6tLZxM4cgM=)
                          16: AS138421.roa (hash: 1o10Fd1A6Kmt2g1S18ZrzKVCdNBBE7G8kAbzUNhR3T4=)
                          17: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
                          18: AS17623.roa (hash: NVg1rKyCW33pQNtqus2BKVGxb30ZpFerSpdClmsK3Tk=)
                          19: AS136959.roa (hash: SJgfrPn8jksFP1I51Y5d0hMPvlu/fL+n21kkpFVF4fI=)
                          20: AS4837.roa (hash: xsFKDj4U1ay5qOJdpCNQ3XY6Qe0hZzYDFoHTX+FtWdU=)
                          21: AS17816.roa (hash: b8DqW2lRnlvNZRHsZcAe9txNInxbfWdRaGS0g0bJHkc=)
                          22: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
                          23: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
                          24: AS140886.roa (hash: tIGhfy98u9aOuXMKeDjEM5Fc1ERJ4zFfjcQrRPXJkxA=)
                          25: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
                          26: AS17621.roa (hash: tc7s8hW/nckjMnnPu+Jf1k0w0JGLCW38Lmaczjx2+0k=)
                          27: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
                          28: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 03:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:95:15:c4:c4:11:91:3a:e7:a5:fd:a7:e0:27:bf:d1:2e:81:3e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: Aug 22 03:19:06 2026 GMT
            Not After : Aug 23 03:27:06 2026 GMT
        Subject: CN=92C52CA86BC1264ED3C0E605E196D3F5231B5FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:2f:a8:a3:df:0c:93:c5:e9:33:6f:39:75:
                    ac:e1:42:5a:a6:c9:7d:e6:8e:52:62:cc:84:fe:b2:
                    4e:84:89:be:6a:10:9b:95:c5:d8:2e:ba:ad:f7:bb:
                    4c:a7:d5:14:e5:0e:0d:99:61:bc:4f:16:81:94:dd:
                    03:2c:71:6f:30:8e:68:30:ee:f3:b8:9f:30:3b:25:
                    3d:ad:d4:14:34:25:76:f5:8a:1a:d4:61:24:1e:fb:
                    0e:ac:9f:89:9e:f4:b3:fa:ca:1e:85:21:3e:9b:60:
                    c9:f6:95:d6:c7:e7:b7:3d:c5:e4:92:61:cf:08:c7:
                    e5:cd:dc:a0:bc:2c:24:fc:32:ad:3b:f4:34:45:a8:
                    cc:48:11:c4:35:25:e0:2b:a8:16:ae:5b:e8:7a:35:
                    30:66:02:88:2c:aa:b0:b2:dd:25:34:9d:59:f4:aa:
                    a9:b2:bf:0c:70:f1:e6:c2:e8:3a:0c:c4:a5:76:15:
                    be:d6:0e:9f:fa:68:65:a4:59:f7:dd:77:6e:5c:ce:
                    b5:a0:91:02:6b:ae:37:29:c9:24:c4:66:4a:5d:0a:
                    40:a7:83:e8:57:8a:88:99:d9:67:10:55:c5:02:30:
                    90:be:9c:b7:2c:3c:e8:8b:97:97:ab:69:9d:5e:4a:
                    c3:31:27:94:b6:19:49:f3:8b:a9:60:9e:ad:db:97:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C5:2C:A8:6B:C1:26:4E:D3:C0:E6:05:E1:96:D3:F5:23:1B:5F:D8
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5c:47:0b:a1:5a:a0:db:ab:db:a1:bd:7f:2f:7a:31:27:37:
         2c:e9:f6:25:53:7f:06:fc:60:ea:0c:02:9f:9a:ea:b2:2e:18:
         d4:61:30:bc:d9:f6:ca:c6:a7:a4:d2:63:b0:1c:9c:06:6a:71:
         cf:a3:78:19:4c:b0:b3:78:7a:3d:4e:97:64:41:49:d1:76:77:
         c8:a5:d7:dd:b1:02:c2:6b:bd:c4:a1:88:5b:26:07:36:85:3f:
         1a:a3:ec:fb:31:68:f4:a0:9d:98:1a:df:97:ba:88:02:78:96:
         d5:ed:f7:a6:c5:4a:ba:8f:26:e5:ed:ef:49:af:18:46:58:1b:
         a3:67:28:8e:24:ae:66:d5:f5:0e:bf:bc:d7:73:f3:cc:74:6b:
         f8:61:1d:8b:06:61:b2:77:60:84:c8:76:5c:26:cd:06:a1:14:
         f6:db:0d:3c:7c:aa:4c:59:bb:46:a9:10:f4:ef:5a:b5:f1:c1:
         8b:c5:04:09:a9:04:32:29:aa:c3:f9:28:cc:15:60:7e:0c:f8:
         48:c8:aa:62:c1:3d:1e:96:3a:19:20:4f:e5:19:07:b9:93:af:
         dd:42:80:7c:2d:03:a8:d1:4b:6d:45:cb:60:9e:26:c1:1d:c7:
         bf:27:a7:63:74:ca:7d:b6:4c:c7:15:7b:9f:64:24:2c:1a:fe:
         43:81:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:55:18 2026 by rpki-client