Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File:                     8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier:          R+dHBfkiiY76AgTxbgwz7v4LcKwTZMv/DiJU5RgatLM=
Subject key identifier:   81:A2:31:8A:36:95:1E:C4:38:58:86:AB:32:AC:CB:77:6E:F4:7D:97
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       6AEA0E927A81162B144713E9E4E2059DBFAC2953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number:          0B3B
Signing time:             Tue 06 Oct 2026 22:37:47 +0000
Manifest this update:     Tue 06 Oct 2026 22:32:47 +0000
Manifest next update:     Sat 10 Oct 2026 02:48:47 +0000
Files and hashes:         1: AS136959.roa (hash: 8u0yw08Ck93HB1x+p/mWts8L/XlnUT3qQumFeLt8MOw=)
                          2: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
                          3: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
                          4: AS4808.roa (hash: yVGL/DKCr5VBnCkZtmALFD9XrNLMx4X5SMHmOem+DbA=)
                          5: AS4837.roa (hash: AYmSh/I4Iv8CUl2Pd+TgBL0cd3se+lmTjbBZ9MUk2v8=)
                          6: AS9811.roa (hash: iYZ5GcgY6k3QKJIThMRgNbaCPaW5ynhbDcXLMlvYgWU=)
                          7: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
                          8: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
                          9: AS17623.roa (hash: GS3hmeZMDHxdlCSu1K43/f7tuUUxgUZ3Y5Um01rNH0g=)
                          10: AS140886.roa (hash: 0bKmBMqY4GT9DntdzvxqqH9jrqXsD05dAbbNpon/ua4=)
                          11: AS136958.roa (hash: kS/s7Y496VNHQnyWC9aD55bwP8tWdtgJu1H+Z1jtygc=)
                          12: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
                          13: AS138421.roa (hash: 1o10Fd1A6Kmt2g1S18ZrzKVCdNBBE7G8kAbzUNhR3T4=)
                          14: AS17622.roa (hash: T9BnRXrCDuYemnVHgr49l93L5p+mIaaL5O/jdXJ+eos=)
                          15: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: JjpKiPUCacc8NXIGxdbuhlVF0m7U+RebIWp47gM09sk=)
                          16: AS9929.roa (hash: +9ahaqfFwAN7IwLtfOWgNicPPLMmgfgMhRd/nvbQxAI=)
                          17: AS134543.roa (hash: 3NpqoKe8IviELOM8AehbhoPZluIAD9LYLF3L19gbF48=)
                          18: AS17621.roa (hash: uv2aZcu8nw/qCHu+80/NRUpxNiLYS4LjJ3UxzLvNKRU=)
                          19: AS17816.roa (hash: L8arvCil9tLAsnWzWlrkBgWuk1Fk0mPt+mTI9IM/FPQ=)
                          20: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
                          21: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
                          22: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
                          23: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
                          24: AS140979.roa (hash: isfIR3s4vIU5gx8nouRGVuuHOdanQ6uXZpeYAJruGMs=)
                          25: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
                          26: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
                          27: AS140726.roa (hash: +bdS9sJegN7zc1vs8RMUuVZZfN3NCfHVtRI4eOc69Dk=)
                          28: AS135061.roa (hash: SCcHTHQ8Z/By1Ep4nZD/KzzUFMwn+pI4C7vzhSbOAao=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 02:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ea:0e:92:7a:81:16:2b:14:47:13:e9:e4:e2:05:9d:bf:ac:29:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: Oct  6 22:32:47 2026 GMT
            Not After : Oct 10 02:48:47 2026 GMT
        Subject: CN=81A2318A36951EC4385886AB32ACCB776EF47D97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:90:b0:a5:d8:ab:d3:0e:e9:05:9a:e3:e9:
                    08:b1:e4:91:59:0f:53:9e:bd:02:39:62:8f:5a:b4:
                    06:2a:2f:ab:0d:8e:7e:7c:3e:bc:55:d4:73:89:50:
                    3d:d0:1d:dc:18:75:9c:24:48:da:d0:c8:a3:b2:bc:
                    18:da:37:74:77:22:35:6d:2e:2c:76:4a:eb:58:8e:
                    9a:0c:d4:d3:42:a2:6e:31:8f:39:ee:f4:8c:28:7c:
                    89:7a:b2:24:58:af:24:80:2f:0e:e4:5d:b9:bc:42:
                    26:59:55:cb:1c:af:fc:fe:ff:1e:47:6f:75:9d:6a:
                    6c:f8:15:e0:f0:51:11:a3:d3:8d:97:80:e1:f4:a5:
                    43:d1:63:37:eb:be:42:c5:a7:37:23:3b:26:38:45:
                    4e:b9:85:73:6d:17:da:fd:39:98:66:9e:aa:a4:6b:
                    44:44:d8:d7:23:18:8f:55:1f:91:ad:cf:ab:bc:00:
                    da:25:e2:bd:8c:71:d9:bb:12:22:32:fb:5b:89:04:
                    e6:da:76:54:50:bf:91:20:c6:54:c2:e8:41:42:5a:
                    1e:b6:f7:be:3a:2d:88:46:66:17:cc:b4:78:5d:e0:
                    cf:4b:0f:e8:24:bc:30:bc:60:a9:20:7c:ca:41:e9:
                    79:7f:96:38:9f:16:6a:f5:6c:a7:f4:bc:db:ab:2f:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:31:8A:36:95:1E:C4:38:58:86:AB:32:AC:CB:77:6E:F4:7D:97
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:49:44:1a:2d:97:00:c2:67:00:45:97:f4:72:11:fd:98:b2:
         a6:f0:c8:eb:b2:56:59:1c:96:5e:a5:8e:91:00:db:78:82:fd:
         37:19:56:1d:50:69:24:32:37:a3:26:fe:8a:4d:f8:98:8b:2f:
         44:d9:3c:4e:f1:c9:9d:db:09:28:66:58:e4:3d:6b:d6:0e:7a:
         e3:67:09:00:db:9e:c8:e3:fc:f7:30:8a:73:2c:aa:bc:2a:20:
         7e:93:17:9a:ea:3d:d9:7d:c9:43:1d:3c:6e:d0:ee:bd:d4:3e:
         19:6e:c5:35:e3:21:49:ac:50:72:bc:bf:9e:d3:6d:bf:52:11:
         39:43:e5:85:61:82:75:e2:aa:8f:1d:f8:f0:cd:c3:80:06:74:
         8d:e7:d6:a5:45:df:fe:ce:e6:00:1d:67:47:2b:d3:25:16:38:
         99:0d:fa:11:36:56:99:ee:54:e8:06:67:65:16:c2:05:6d:f7:
         e0:37:35:05:00:f9:7b:bd:25:28:7a:b9:d9:f1:d8:76:e4:49:
         e7:19:8e:e4:aa:6d:db:c8:ef:97:1e:a6:c9:fa:59:93:f3:be:
         5f:3b:ef:e1:06:82:f1:3b:65:13:91:0d:17:d9:fc:9c:a3:74:
         73:ea:40:3b:15:74:8e:17:a2:c2:24:33:8b:e1:10:ad:38:f6:
         6e:4a:d6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:30:07 2026 by rpki-client