
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier: Dz02LCGN/9GaxIyuOfcfBalUkS5uEHhm3CBAGOrL+Hw=
Subject key identifier: 92:C5:2C:A8:6B:C1:26:4E:D3:C0:E6:05:E1:96:D3:F5:23:1B:5F:D8
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 3E9515C4C411913AE7A5FDA7E027BFD12E813EB0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number: 0AEA
Signing time: Sat 22 Aug 2026 03:24:06 +0000
Manifest this update: Sat 22 Aug 2026 03:19:06 +0000
Manifest next update: Sun 23 Aug 2026 03:27:06 +0000
Files and hashes: 1: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
2: AS9811.roa (hash: iYZ5GcgY6k3QKJIThMRgNbaCPaW5ynhbDcXLMlvYgWU=)
3: AS17622.roa (hash: TZATGDoVQzSKm0EWz3JeV/9svypfb7DNKkzFhOR1iMU=)
4: AS134543.roa (hash: T38AQTA2JBsg/OjfMx0h+jt/C1YhSxNMf9/aTrMqrIc=)
5: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
6: AS4808.roa (hash: yVGL/DKCr5VBnCkZtmALFD9XrNLMx4X5SMHmOem+DbA=)
7: AS140979.roa (hash: isfIR3s4vIU5gx8nouRGVuuHOdanQ6uXZpeYAJruGMs=)
8: AS140726.roa (hash: A9X/C8q/L0w1M+9h8EhPlNJU4SOo3ekU6l5+XVHb7V0=)
9: AS135061.roa (hash: RVCWQar9ZNXMhd/LFTRjeuJSkmDkP6lJM6PX2DA9U2g=)
10: AS9929.roa (hash: 65iX6TquYCIznx+XdjmqEFJwAhYR005Y0kQN6MOQL2M=)
11: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
12: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
13: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
14: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: wKlQ5nddn1KoAyVsZpvAlbHoFA2Pl6N6660D1vSB2L4=)
15: AS136958.roa (hash: lobqNvrNLNNRSplCQnRCBR89Qbzqv2qtl6tLZxM4cgM=)
16: AS138421.roa (hash: 1o10Fd1A6Kmt2g1S18ZrzKVCdNBBE7G8kAbzUNhR3T4=)
17: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
18: AS17623.roa (hash: NVg1rKyCW33pQNtqus2BKVGxb30ZpFerSpdClmsK3Tk=)
19: AS136959.roa (hash: SJgfrPn8jksFP1I51Y5d0hMPvlu/fL+n21kkpFVF4fI=)
20: AS4837.roa (hash: xsFKDj4U1ay5qOJdpCNQ3XY6Qe0hZzYDFoHTX+FtWdU=)
21: AS17816.roa (hash: b8DqW2lRnlvNZRHsZcAe9txNInxbfWdRaGS0g0bJHkc=)
22: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
23: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
24: AS140886.roa (hash: tIGhfy98u9aOuXMKeDjEM5Fc1ERJ4zFfjcQrRPXJkxA=)
25: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
26: AS17621.roa (hash: tc7s8hW/nckjMnnPu+Jf1k0w0JGLCW38Lmaczjx2+0k=)
27: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
28: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 23 Aug 2026 03:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:95:15:c4:c4:11:91:3a:e7:a5:fd:a7:e0:27:bf:d1:2e:81:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Aug 22 03:19:06 2026 GMT
Not After : Aug 23 03:27:06 2026 GMT
Subject: CN=92C52CA86BC1264ED3C0E605E196D3F5231B5FD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:12:2f:a8:a3:df:0c:93:c5:e9:33:6f:39:75:
ac:e1:42:5a:a6:c9:7d:e6:8e:52:62:cc:84:fe:b2:
4e:84:89:be:6a:10:9b:95:c5:d8:2e:ba:ad:f7:bb:
4c:a7:d5:14:e5:0e:0d:99:61:bc:4f:16:81:94:dd:
03:2c:71:6f:30:8e:68:30:ee:f3:b8:9f:30:3b:25:
3d:ad:d4:14:34:25:76:f5:8a:1a:d4:61:24:1e:fb:
0e:ac:9f:89:9e:f4:b3:fa:ca:1e:85:21:3e:9b:60:
c9:f6:95:d6:c7:e7:b7:3d:c5:e4:92:61:cf:08:c7:
e5:cd:dc:a0:bc:2c:24:fc:32:ad:3b:f4:34:45:a8:
cc:48:11:c4:35:25:e0:2b:a8:16:ae:5b:e8:7a:35:
30:66:02:88:2c:aa:b0:b2:dd:25:34:9d:59:f4:aa:
a9:b2:bf:0c:70:f1:e6:c2:e8:3a:0c:c4:a5:76:15:
be:d6:0e:9f:fa:68:65:a4:59:f7:dd:77:6e:5c:ce:
b5:a0:91:02:6b:ae:37:29:c9:24:c4:66:4a:5d:0a:
40:a7:83:e8:57:8a:88:99:d9:67:10:55:c5:02:30:
90:be:9c:b7:2c:3c:e8:8b:97:97:ab:69:9d:5e:4a:
c3:31:27:94:b6:19:49:f3:8b:a9:60:9e:ad:db:97:
b2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C5:2C:A8:6B:C1:26:4E:D3:C0:E6:05:E1:96:D3:F5:23:1B:5F:D8
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5c:47:0b:a1:5a:a0:db:ab:db:a1:bd:7f:2f:7a:31:27:37:
2c:e9:f6:25:53:7f:06:fc:60:ea:0c:02:9f:9a:ea:b2:2e:18:
d4:61:30:bc:d9:f6:ca:c6:a7:a4:d2:63:b0:1c:9c:06:6a:71:
cf:a3:78:19:4c:b0:b3:78:7a:3d:4e:97:64:41:49:d1:76:77:
c8:a5:d7:dd:b1:02:c2:6b:bd:c4:a1:88:5b:26:07:36:85:3f:
1a:a3:ec:fb:31:68:f4:a0:9d:98:1a:df:97:ba:88:02:78:96:
d5:ed:f7:a6:c5:4a:ba:8f:26:e5:ed:ef:49:af:18:46:58:1b:
a3:67:28:8e:24:ae:66:d5:f5:0e:bf:bc:d7:73:f3:cc:74:6b:
f8:61:1d:8b:06:61:b2:77:60:84:c8:76:5c:26:cd:06:a1:14:
f6:db:0d:3c:7c:aa:4c:59:bb:46:a9:10:f4:ef:5a:b5:f1:c1:
8b:c5:04:09:a9:04:32:29:aa:c3:f9:28:cc:15:60:7e:0c:f8:
48:c8:aa:62:c1:3d:1e:96:3a:19:20:4f:e5:19:07:b9:93:af:
dd:42:80:7c:2d:03:a8:d1:4b:6d:45:cb:60:9e:26:c1:1d:c7:
bf:27:a7:63:74:ca:7d:b6:4c:c7:15:7b:9f:64:24:2c:1a:fe:
43:81:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:55:18 2026 by rpki-client