Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
File:                     196F2188A356D1C42D39F6D165719B596B4CD91E.mft (raw, json)
Hash identifier:          IorrZ2CwEGdnloKj6adWIs0hJaNhu21lBQ1Aw/+TMJY=
Subject key identifier:   28:36:3F:93:2C:89:B0:52:3C:64:01:09:78:C8:CE:20:71:F3:A9:88
Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E
Certificate issuer:       /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
Certificate serial:       64FEA5F4960DE2206C5F15EE6C709FA32E721977
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
Manifest number:          3E
Signing time:             Sat 23 May 2026 04:09:32 +0000
Manifest this update:     Sat 23 May 2026 04:04:32 +0000
Manifest next update:     Sun 24 May 2026 06:28:32 +0000
Files and hashes:         1: AS135089.roa (hash: cKKdM3xi67SHlnySyWw/vmXk0YYWlsztydo6AXzCqZY=)
                          2: AS140332.roa (hash: nZTxLWKRnE8gSAElrjAZZQG3HmmH9XrcoDC2eR0LncM=)
                          3: AS140352.roa (hash: jRTbq8NTkeZBjE64BtLVWJSTWerQ/q42x7wI3AlA7UU=)
                          4: AS63838.roa (hash: NZeLcs1jZ28Lc2ff+QvRbU5TQdg2x97X1gvHxgny4bg=)
                          5: AS141025.roa (hash: LHAqQm52MaqVhhxFjktYUPS6fHfSjNBht88OOuRgq9M=)
                          6: AS58466.roa (hash: qeQ2MPSNFA0ts+KbC9+H4K3OJyBI9REybfV17P8d72I=)
                          7: AS63835.roa (hash: We1Yi4gGj0m9fGazuJD/4ln6hd54/RLMLiLdCRV22WA=)
                          8: AS140328.roa (hash: Ou86lzek9haC5zfs2BB5Xn33RxYs5bvHFD7y/BpM14Y=)
                          9: AS139587.roa (hash: prrQ+OtKE4s7QLbBgFBCysz928NLuorYK29ikjwJW7Q=)
                          10: AS151823.roa (hash: kvG3DrVAhalacaEHIMUHDPU07nvbED0yPJQLYyhzOn0=)
                          11: AS58772.roa (hash: kx4RhmGrzOOUr45ZoeJPu9aGpIC95W+WFN754d5kW+s=)
                          12: AS134765.roa (hash: PI3XJZV9Gvqg7s853dmhiLV3A1G2HYh3JP/LMpmGFGE=)
                          13: AS140336.roa (hash: Qq697X/0B2nM0qnnmn2N2IEYCIO1RVqJv6XuLtDhohs=)
                          14: AS149979.roa (hash: SC/pqKQelXNWlJcq2KfQpJ7QXf2/XfDGkpaGBBR8eMQ=)
                          15: AS134419.roa (hash: 6kjK7wvQRtepgx4++wpt14d5gfvkC68BWnT11fye1fE=)
                          16: AS134762.roa (hash: fJEoHZQ7eF80YODvDYeFB4CkeeBCT2EZk5ttrDyOqos=)
                          17: AS137687.roa (hash: k4BGFgkaRDoilUAPvTNU3ruCguYZ6DRDvttND+TlxyI=)
                          18: AS17799.roa (hash: g2Djm8WXZwoSTECHukd/9kOsslaL7weICZ2V4E4Q7UQ=)
                          19: AS139721.roa (hash: drIwOEG+sr7m1/uWxpU5rVn7GNz8D+YQmtGfybayoHA=)
                          20: AS138570.roa (hash: nrdkVOwSyeGAK0nJjdCDQvXzQwknew2qpaCfdt3Z8ds=)
                          21: AS4812.roa (hash: he0g35yOzeW3YHyPY6RIZwjtLacndzGqf+Fo674CEBA=)
                          22: AS134766.roa (hash: pNzDKGxemP1Xvdb3fHOs1/tP7/HoxVoMG4hrfVx8L/I=)
                          23: AS140333.roa (hash: uQ5NZ7rXw3lJGt0Qb+/0vw8AOdrHd08iVwTU3/U9i6M=)
                          24: AS140356.roa (hash: bKVD/v9nXkSNeZC4Qz9KyyUcVD/nkoRKaZgDWuNIhjQ=)
                          25: AS140337.roa (hash: vioUo18XCoKuaqdX7UXr3tYY2pJHwIjjPDTzya3HtzM=)
                          26: AS134767.roa (hash: /eutHKTXsG2gEjcQMICv4ZFPWxB1UaI/dA5QBet7QYk=)
                          27: AS133774.roa (hash: 3NM7s3Cja1Xll/QQjc5SiyiDzFwWMiTOUSVBbUJ8bso=)
                          28: AS140334.roa (hash: tGAZhEiW3AYg99a5hyCb0T5nayNtSS7U6MNljVSAoXA=)
                          29: AS139019.roa (hash: etkICKBpW//5a5PWUpM7YPP3md1jCAOYWUmmt1Oh0uw=)
                          30: AS58543.roa (hash: P33z0s0VRR8UX2+hHP4ZwvuoZ31VWO0z8HG/MVPYsHw=)
                          31: AS134763.roa (hash: Ww9NSXIL0OzaX/BayBMfy+uLKJCPHhl2dyeamaU/Czc=)
                          32: AS140345.roa (hash: aTNeIFbxDYgcV+qt3ZF9kKyddI8IIvLtXeLjDlooUiw=)
                          33: AS140335.roa (hash: kOF7Hn/3KHiFh8JogxTKiuyoqfYY+6tqHztZ3gDXcTg=)
                          34: 196F2188A356D1C42D39F6D165719B596B4CD91E.crl (hash: GITuVwUKaxoTiBlEXWBFmJqGjU4vEQNoh5t/XMQqG4g=)
                          35: AS139018.roa (hash: qHdj4YkhIDS8+vUqPfmXBXYSQD82J9eAAFgGiRFcKMM=)
                          36: AS4811.roa (hash: OLQn0pH4A1jjSXlAS7OUehLf7vfTpXTl31VWqofbKXU=)
                          37: AS23724.roa (hash: 5IOYLL3UAoyiRrSc1Skq811ooo0XrYVbdXquwGKCFFQ=)
                          38: AS140355.roa (hash: wujpWd+tv7kJvRuWWccQM8OYwUVSBUkBAdFoCYJTh9o=)
                          39: AS140331.roa (hash: TszLUCsEUIAdUDxmbNtiMS0c/rbh9RvLRMgkccMkM2U=)
                          40: AS140330.roa (hash: n627QHhoCxhotTZ+cVAy3tv03QXo9Ot5pyO4JrsiPlw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 May 2026 06:28:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:fe:a5:f4:96:0d:e2:20:6c:5f:15:ee:6c:70:9f:a3:2e:72:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E
        Validity
            Not Before: May 23 04:04:32 2026 GMT
            Not After : May 24 06:28:32 2026 GMT
        Subject: CN=28363F932C89B0523C64010978C8CE2071F3A988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4b:21:d7:f3:c2:e4:4f:b7:fe:91:b0:9e:ab:
                    a3:b6:ed:d1:e5:bf:af:73:cb:83:09:eb:ef:0c:b1:
                    ea:bf:98:8f:14:1b:f4:68:d4:7a:9b:16:97:94:1a:
                    52:1c:91:73:2a:38:8f:21:d9:63:0c:8d:20:bb:ac:
                    db:5a:5d:6d:27:90:b9:55:f1:f4:78:e9:b2:ba:e1:
                    43:77:e2:80:34:c4:79:ee:5b:99:d6:b0:06:bc:04:
                    f6:58:15:e9:cb:9f:13:eb:25:c5:0c:42:1f:c1:81:
                    e2:56:99:27:01:53:20:72:fe:5c:4d:59:4d:56:6c:
                    8e:d2:dd:78:e6:49:1e:de:01:38:1a:79:90:26:dd:
                    42:bc:44:57:8e:1e:22:28:9d:df:b2:ce:a5:43:d5:
                    a9:c3:a3:8b:59:c2:b1:f1:e4:c3:09:a2:8f:55:26:
                    b6:54:75:65:fb:27:85:62:e4:b4:69:ce:89:a6:95:
                    8b:d3:d4:81:c0:2e:6e:e6:aa:5e:f2:ad:79:7d:e0:
                    ce:1b:8e:7c:84:21:b1:be:06:c1:12:58:c9:c9:5d:
                    76:2e:b5:55:8c:75:95:3e:7b:92:85:fd:1d:08:f0:
                    63:b3:f8:a1:9f:6c:a3:32:eb:1b:c6:7b:5d:8d:60:
                    e6:24:db:12:57:2c:91:de:df:c7:e0:0f:a1:7d:b9:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:36:3F:93:2C:89:B0:52:3C:64:01:09:78:C8:CE:20:71:F3:A9:88
            X509v3 Authority Key Identifier:
                keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e8:14:e0:7c:c5:d1:d9:20:e4:eb:67:d0:36:8d:7b:2f:f5:
         11:f9:bb:56:6f:fd:3e:bc:98:b9:c4:5f:d3:d6:f8:e6:a8:06:
         49:22:92:62:ef:72:fc:48:10:23:da:72:ea:42:84:67:ee:2a:
         f9:70:56:7b:6b:3b:2e:97:61:f8:73:74:b0:1a:64:18:45:5e:
         2d:9b:bc:f8:78:78:93:3d:e3:0d:2f:87:5c:d6:d3:b6:1c:8b:
         e1:a4:1c:57:aa:fb:db:cd:3e:60:05:f7:ff:80:08:ae:a2:6c:
         da:ca:6e:9c:2f:c0:0e:45:87:3a:31:16:31:ef:70:be:b7:19:
         cb:83:da:12:a7:67:7e:9b:50:4c:ec:c3:8c:be:78:93:43:4a:
         54:ef:f6:81:f3:37:10:76:dd:19:70:8f:85:d1:b8:af:ee:4b:
         33:ce:83:cb:08:9c:7f:d3:b9:bf:f3:68:f9:44:9d:ca:d7:2b:
         25:e7:c2:87:f0:16:8a:b4:54:50:34:3d:27:c3:81:83:77:64:
         dc:30:6f:b3:bc:54:e4:58:bf:c3:38:e9:e1:0b:65:32:8a:e7:
         3a:40:df:0d:b9:0d:96:68:1c:ac:5c:ca:d4:54:25:ce:24:9f:
         d9:65:bd:a6:8b:52:96:29:9d:55:cb:bc:1d:fb:24:a3:25:0d:
         cb:9e:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 06:24:25 2026 by rpki-client