
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier: fkXIDRzeJ30R6su/1Sz/bbo5/VK6vMehRR+IeXTzGQ0=
Subject key identifier: CE:B1:F7:52:16:CB:BA:EE:06:3F:BD:DF:30:0C:84:B4:A0:32:D8:4C
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 298D45EA78BD7B7A5A0777930322EC6F8EEDCD2B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number: 0B3A
Signing time: Sun 04 Oct 2026 20:17:47 +0000
Manifest this update: Sun 04 Oct 2026 20:12:47 +0000
Manifest next update: Wed 07 Oct 2026 22:35:47 +0000
Files and hashes: 1: AS4808.roa (hash: yVGL/DKCr5VBnCkZtmALFD9XrNLMx4X5SMHmOem+DbA=)
2: AS140726.roa (hash: +bdS9sJegN7zc1vs8RMUuVZZfN3NCfHVtRI4eOc69Dk=)
3: AS17621.roa (hash: uv2aZcu8nw/qCHu+80/NRUpxNiLYS4LjJ3UxzLvNKRU=)
4: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
5: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
6: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
7: AS138421.roa (hash: 1o10Fd1A6Kmt2g1S18ZrzKVCdNBBE7G8kAbzUNhR3T4=)
8: AS134543.roa (hash: 3NpqoKe8IviELOM8AehbhoPZluIAD9LYLF3L19gbF48=)
9: AS17622.roa (hash: T9BnRXrCDuYemnVHgr49l93L5p+mIaaL5O/jdXJ+eos=)
10: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
11: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
12: AS4837.roa (hash: AYmSh/I4Iv8CUl2Pd+TgBL0cd3se+lmTjbBZ9MUk2v8=)
13: AS140886.roa (hash: 0bKmBMqY4GT9DntdzvxqqH9jrqXsD05dAbbNpon/ua4=)
14: AS9929.roa (hash: +9ahaqfFwAN7IwLtfOWgNicPPLMmgfgMhRd/nvbQxAI=)
15: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
16: AS17816.roa (hash: L8arvCil9tLAsnWzWlrkBgWuk1Fk0mPt+mTI9IM/FPQ=)
17: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
18: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
19: AS136959.roa (hash: 8u0yw08Ck93HB1x+p/mWts8L/XlnUT3qQumFeLt8MOw=)
20: AS9811.roa (hash: iYZ5GcgY6k3QKJIThMRgNbaCPaW5ynhbDcXLMlvYgWU=)
21: AS136958.roa (hash: kS/s7Y496VNHQnyWC9aD55bwP8tWdtgJu1H+Z1jtygc=)
22: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
23: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: psdBQL1tUJsLiViO6ChDsOMN4QoEM0G3Yr95dxdetf8=)
24: AS140979.roa (hash: isfIR3s4vIU5gx8nouRGVuuHOdanQ6uXZpeYAJruGMs=)
25: AS135061.roa (hash: SCcHTHQ8Z/By1Ep4nZD/KzzUFMwn+pI4C7vzhSbOAao=)
26: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
27: AS17623.roa (hash: GS3hmeZMDHxdlCSu1K43/f7tuUUxgUZ3Y5Um01rNH0g=)
28: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 22:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8d:45:ea:78:bd:7b:7a:5a:07:77:93:03:22:ec:6f:8e:ed:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Oct 4 20:12:47 2026 GMT
Not After : Oct 7 22:35:47 2026 GMT
Subject: CN=CEB1F75216CBBAEE063FBDDF300C84B4A032D84C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:82:a6:e7:1a:71:d6:18:53:ba:b5:c8:68:16:
90:3a:5a:67:7e:66:f4:8c:10:a9:6c:cb:37:6e:57:
69:8b:19:67:70:87:4c:1b:bf:95:98:d7:43:51:44:
2a:e6:3c:46:76:30:36:52:b1:e0:29:61:7a:40:6e:
bb:03:64:2e:a4:c1:27:45:06:07:a5:e4:74:f7:6b:
76:65:ed:50:69:48:2d:73:3b:6e:e6:5c:f8:38:6c:
10:38:5a:03:0e:9b:d9:21:0a:03:33:fb:40:7d:fe:
34:9c:e5:cc:a7:1d:1b:f6:89:48:13:97:62:d2:9e:
c0:2f:77:03:8c:f6:fe:ac:18:54:38:d1:6c:62:aa:
c5:ab:9c:be:46:ae:8b:c3:de:ed:9c:67:80:a7:9d:
f8:97:d4:41:4c:89:f7:89:8c:d3:f8:e0:48:6d:79:
b6:d0:df:bf:d3:03:48:82:57:dc:f9:73:f5:1c:e4:
91:9f:7e:f8:49:ea:b9:fa:72:4e:be:e2:59:88:51:
b1:ec:75:f5:61:2a:7b:e5:59:91:77:d7:45:5c:3b:
e0:0a:06:65:b7:fc:73:6e:bb:cb:88:3d:3a:ad:5a:
26:84:9c:9b:40:97:07:bd:9e:9f:0b:d1:a4:25:ff:
59:57:34:5c:48:9d:21:55:db:c7:f1:81:b0:40:b9:
10:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B1:F7:52:16:CB:BA:EE:06:3F:BD:DF:30:0C:84:B4:A0:32:D8:4C
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c3:34:b9:5f:d5:ad:6b:e3:64:31:2f:b5:d1:bc:82:3a:4a:
c8:9d:2e:cc:0d:f4:ea:ea:9c:84:3a:62:5f:b8:5f:05:65:65:
c4:70:00:38:67:49:d9:9c:c3:9d:e1:99:88:4c:45:f0:c1:88:
44:f3:84:ab:a6:7d:3f:37:65:b6:b1:e4:b1:f5:97:cc:6a:a2:
17:e4:5c:d9:9b:ee:f5:3f:b7:ff:f0:d2:62:ee:24:01:fa:77:
71:6a:b8:f0:d1:c0:e6:14:54:0e:8a:93:67:0f:25:38:49:5e:
cf:43:70:16:63:2d:0a:2d:4f:77:c1:37:a4:4f:5a:9f:fe:1e:
d0:ed:7d:81:54:88:31:94:c1:7b:59:17:3e:6b:15:56:47:16:
6a:76:f4:3d:ac:e9:5d:b6:6b:e6:87:6a:e1:ec:28:62:f1:7d:
3d:aa:c9:a0:83:fd:40:de:fb:35:40:98:cb:83:67:a0:72:8d:
6a:e0:c8:e9:60:53:c6:b8:aa:1e:82:2a:04:47:50:7d:51:d8:
e2:c7:68:5e:4b:7d:4e:6d:26:b2:e6:ad:7e:89:13:76:44:16:
09:09:78:82:ce:62:86:d7:c6:83:52:46:f2:25:04:01:8e:c4:
84:91:ee:6c:43:d2:85:58:aa:91:86:15:cf:e0:c5:9c:4e:e7:
f4:c5:d1:b3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKY1F6ni9e3paB3eTAyLsb47tzSswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz
Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MTAwNDIwMTI0N1oX
DTI2MTAwNzIyMzU0N1owMzExMC8GA1UEAxMoQ0VCMUY3NTIxNkNCQkFFRTA2M0ZC
RERGMzAwQzg0QjRBMDMyRDg0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPCCpucacdYYU7q1yGgWkDpaZ35m9IwQqWzLN25XaYsZZ3CHTBu/lZjXQ1FE
KuY8RnYwNlKx4ClhekBuuwNkLqTBJ0UGB6XkdPdrdmXtUGlILXM7buZc+DhsEDha
Aw6b2SEKAzP7QH3+NJzlzKcdG/aJSBOXYtKewC93A4z2/qwYVDjRbGKqxaucvkau
i8Pe7ZxngKed+JfUQUyJ94mM0/jgSG15ttDfv9MDSIJX3Plz9RzkkZ9++Enqufpy
Tr7iWYhRsex19WEqe+VZkXfXRVw74AoGZbf8c267y4g9Oq1aJoScm0CXB72enwvR
pCX/WVc0XEidIVXbx/GBsEC5EM8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBTOsfdS
Fsu67gY/vd8wDIS0oDLYTDAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z
JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF
NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY
eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5NjcwNDU5MzY5
NTM0MjU5My8xLzhBMUI0RTRBNjMyOTVGMThCNEYwNkZGRjZBRDAyQzMxNjVCRjk5
MjUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAFwzS5X9Wta+NkMS+10byCOkrInS7MDfTq6pyEOmJfuF8F
ZWXEcAA4Z0nZnMOd4ZmITEXwwYhE84Srpn0/N2W2seSx9ZfMaqIX5FzZm+71P7f/
8NJi7iQB+ndxarjw0cDmFFQOipNnDyU4SV7PQ3AWYy0KLU93wTekT1qf/h7Q7X2B
VIgxlMF7WRc+axVWRxZqdvQ9rOldtmvmh2rh7Chi8X09qsmgg/1A3vs1QJjLg2eg
co1q4MjpYFPGuKoegioER1B9Udjix2heS31ObSay5q1+iRN2RBYJCXiCzmKG18aD
UkbyJQQBjsSEke5sQ9KFWKqRhhXP4MWcTuf0xdGz
-----END CERTIFICATE-----
Generated at Mon Oct 5 07:30:56 2026 by rpki-client