
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
File: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft (raw, json)
Hash identifier: fHtxbAnR1edshv1PrW0EsFVXfWPceYqSZwjKKvumr74=
Subject key identifier: 95:EB:35:51:D3:E3:5D:3C:DB:18:3B:55:5B:CC:15:85:AC:F9:51:BE
Authority key identifier: 6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
Certificate issuer: /CN=A91EFAA20000/serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Certificate serial: 2D256ACB0ABBC5A789D00AC61126D45E91C947ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
Manifest number: A5
Signing time: Fri 21 Aug 2026 08:11:39 +0000
Manifest this update: Fri 21 Aug 2026 08:06:39 +0000
Manifest next update: Sat 22 Aug 2026 09:33:39 +0000
Files and hashes: 1: 3230332e39342e302e302f31392d3139203d3e203137373339.roa (hash: +m3tQEFjHE7EvQqZt5ZFMX5uxgUV2P9Xu/hnIBd3mN4=)
2: 323430373a343838303a3a2f33322d3332203d3e2030.roa (hash: ijCaVomoD4Gp49iRFc8q+IjUsH7ACZllQmvyC2Sz9cQ=)
3: 6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl (hash: ywd0lGIflgoFNbsGg6HxUZLy4fmK3QQomuJTuJeXvd8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 22 Aug 2026 09:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:25:6a:cb:0a:bb:c5:a7:89:d0:0a:c6:11:26:d4:5e:91:c9:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAA20000, serialNumber=6A38799E7FD21985ED882E88FFC0DAFEFF87F54C
Validity
Not Before: Aug 21 08:06:39 2026 GMT
Not After : Aug 22 09:33:39 2026 GMT
Subject: CN=95EB3551D3E35D3CDB183B555BCC1585ACF951BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:e5:a2:ee:05:57:89:78:86:48:52:59:fd:
88:5e:f6:7e:6a:76:d5:e9:a2:cf:39:2f:da:5e:9a:
56:d5:f7:ae:02:27:89:f9:ef:23:20:26:cb:d5:9a:
b1:24:f3:b5:40:f3:48:ec:f4:9d:6d:f6:a6:9a:c9:
cb:5c:df:c0:a1:13:3f:d2:0c:f3:f2:7b:09:31:1a:
20:73:a0:15:fe:94:0b:ae:29:82:fe:73:aa:ea:78:
9f:5c:2e:a9:89:9a:35:26:d9:61:32:fa:99:b1:1b:
cd:7d:0a:74:4f:52:82:79:04:72:5f:d7:b5:45:22:
54:77:f1:10:93:8a:ba:57:d7:1f:4a:ac:20:32:11:
2d:19:ad:7a:3f:26:5a:4c:42:1f:a4:6d:e2:3e:10:
74:a5:ed:17:dd:d1:cd:0d:50:1f:f1:3d:15:4d:3a:
d2:d9:e4:64:56:3d:17:17:57:10:f3:19:b1:e1:a9:
3a:cc:af:6b:a5:83:8d:43:c5:42:c1:a4:5b:24:05:
cc:c9:d6:54:82:65:36:d3:63:bc:48:4d:57:de:6d:
b8:68:be:92:34:5f:42:ff:8b:8d:fd:fc:f2:4c:95:
59:bf:73:04:48:40:6f:6a:60:c3:eb:54:c3:9c:80:
b8:9d:ab:b8:3b:ac:31:4f:63:46:e7:55:56:a8:0d:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EB:35:51:D3:E3:5D:3C:DB:18:3B:55:5B:CC:15:85:AC:F9:51:BE
X509v3 Authority Key Identifier:
keyid:6A:38:79:9E:7F:D2:19:85:ED:88:2E:88:FF:C0:DA:FE:FF:87:F5:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajh5nn_SGYXtiC6I_8Da_v-H9Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099963811500130307/0/6A38799E7FD21985ED882E88FFC0DAFEFF87F54C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:13:bc:9d:26:ef:3c:86:d0:46:93:f9:c4:2b:70:71:e5:3e:
29:9f:1e:cc:57:74:f9:37:c7:bd:e4:4a:d6:2b:6e:1e:cc:71:
be:be:01:f8:78:8e:84:41:72:92:cb:1e:a2:d6:54:f7:1b:76:
fa:14:8d:77:6a:f7:f6:76:d6:f8:a7:de:8b:a1:e0:1f:d7:7f:
b1:e1:be:b2:86:ac:bf:d6:5d:8f:67:e5:0f:c4:95:f5:98:e9:
77:c8:5a:e0:ec:00:bf:bb:30:47:72:1b:86:90:cd:4e:2e:4d:
a8:98:b8:06:0c:d3:01:09:bc:15:71:cc:be:72:e6:f9:c1:b9:
b6:a8:76:c3:dd:ff:6a:5c:b2:d7:1e:d3:bb:55:18:6e:dc:0e:
40:95:a7:5c:cb:be:1d:38:35:70:e5:b9:5f:7a:f9:d8:2d:d5:
11:30:42:45:1d:34:07:da:1f:5b:29:27:df:6e:f4:b4:24:27:
80:6f:c8:b0:d4:16:17:3e:c6:51:25:c2:55:35:2f:42:3a:17:
fe:44:16:c4:fd:c7:17:db:69:68:77:49:f9:dd:84:8c:8b:28:
ae:3c:1d:e2:66:dd:13:eb:ee:53:30:74:24:80:14:86:1e:1e:
b7:fb:54:6a:b8:9b:c8:ef:67:75:28:d8:b5:cf:91:fd:14:b2:
b5:a9:07:3c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULSVqywq7xaeJ0ArGESbUXpHJR+0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRUZBQTIwMDAwMTEwLwYDVQQFEyg2QTM4Nzk5RTdG
RDIxOTg1RUQ4ODJFODhGRkMwREFGRUZGODdGNTRDMB4XDTI2MDgyMTA4MDYzOVoX
DTI2MDgyMjA5MzMzOVowMzExMC8GA1UEAxMoOTVFQjM1NTFEM0UzNUQzQ0RCMTgz
QjU1NUJDQzE1ODVBQ0Y5NTFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCB5aLuBVeJeIZIUln9iF72fmp21emizzkv2l6aVtX3rgInifnvIyAmy9Wa
sSTztUDzSOz0nW32pprJy1zfwKETP9IM8/J7CTEaIHOgFf6UC64pgv5zqup4n1wu
qYmaNSbZYTL6mbEbzX0KdE9SgnkEcl/XtUUiVHfxEJOKulfXH0qsIDIRLRmtej8m
WkxCH6Rt4j4QdKXtF93RzQ1QH/E9FU060tnkZFY9FxdXEPMZseGpOsyva6WDjUPF
QsGkWyQFzMnWVIJlNtNjvEhNV95tuGi+kjRfQv+Ljf388kyVWb9zBEhAb2pgw+tU
w5yAuJ2ruDusMU9jRudVVqgNy3UCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSV6zVR
0+NdPNsYO1VbzBWFrPlRvjAfBgNVHSMEGDAWgBRqOHmef9IZhe2ILoj/wNr+/4f1
TDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk5OTYzODExNTAwMTMwMzA3LzAvNkEzODc5
OUU3RkQyMTk4NUVEODgyRTg4RkZDMERBRkVGRjg3RjU0Qy5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvYWpoNW5uX1NH
WVh0aUM2SV84RGFfdi1IOVV3LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5OTk2MzgxMTUw
MDEzMDMwNy8wLzZBMzg3OTlFN0ZEMjE5ODVFRDg4MkU4OEZGQzBEQUZFRkY4N0Y1
NEMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQBxE7ydJu88htBGk/nEK3Bx5T4pnx7MV3T5N8e95ErWK24e
zHG+vgH4eI6EQXKSyx6i1lT3G3b6FI13avf2dtb4p96LoeAf13+x4b6yhqy/1l2P
Z+UPxJX1mOl3yFrg7AC/uzBHchuGkM1OLk2omLgGDNMBCbwVccy+cub5wbm2qHbD
3f9qXLLXHtO7VRhu3A5Aladcy74dODVw5blfevnYLdURMEJFHTQH2h9bKSffbvS0
JCeAb8iw1BYXPsZRJcJVNS9COhf+RBbE/ccX22lod0n53YSMiyiuPB3iZt0T6+5T
MHQkgBSGHh63+1RquJvI72d1KNi1z5H9FLK1qQc8
-----END CERTIFICATE-----
Generated at Fri Aug 21 23:09:35 2026 by rpki-client