Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File:                     8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier:          VNKvPIJMKW53BwBOujmFmr7wYot+WDIAfFMib/+/BJQ=
Subject key identifier:   92:91:D2:91:09:7C:95:D5:BF:85:35:8E:BA:E0:0F:CA:9E:DA:14:D3
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       546C54B2CFD6A0DEA0559E6AD40B4F0B228BB7B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number:          091B
Signing time:             Sat 13 Jun 2026 00:08:59 +0000
Manifest this update:     Sat 13 Jun 2026 00:03:59 +0000
Manifest next update:     Sun 14 Jun 2026 00:24:59 +0000
Files and hashes:         1: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: YR529yqCSaPpVIDVVPcONkGdE2mm+ctLyaTG05BJ6/w=)
                          2: AS140979.roa (hash: mgWen9u5xr5vgwQUtT9yhur6d5s8RLRyDezfDQAOhnA=)
                          3: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
                          4: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
                          5: AS136959.roa (hash: lAFFdAP8NSHUkSJL6fUdH6xBrCM1Jd4YjBS0ZuEFEjU=)
                          6: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
                          7: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
                          8: AS140726.roa (hash: hhZE6RH2qQC2HiPHNGnofZz6Toe/e4UCAhA27ajMGb8=)
                          9: AS134543.roa (hash: PHCJSDze8hPI9fcYeK8WHdvGUINXVE5wmO0phFQGAnE=)
                          10: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
                          11: AS4808.roa (hash: PrDxYVrCUkt6mVWujFeZI9E7xKyQfcRywyZA9RbTStI=)
                          12: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
                          13: AS140886.roa (hash: tIGhfy98u9aOuXMKeDjEM5Fc1ERJ4zFfjcQrRPXJkxA=)
                          14: AS17816.roa (hash: tN3zd8fp1oUerrwzNp3Y5o1t6y/22a39ctPNqAVSk+g=)
                          15: AS138421.roa (hash: Se4QZj2/NWj99HUCHHCaMRJdzoKaGE9rkO4n0naMvsg=)
                          16: AS135061.roa (hash: /GNLaUJYaUKyTIg31mlsQnjOIvhC0G5pzisJ88nFTbM=)
                          17: AS17622.roa (hash: 6EXyHk55w9i66XJfKroerhkttM8qiCptfsMt9YJe420=)
                          18: AS17623.roa (hash: XacViyjUqVRZ83mpbQgkZE5+ZaucWcVrORhAPOAfE5E=)
                          19: AS9929.roa (hash: B6/aQzBfMSoU/izDjSu7mO9y7iie2GEmhZXwP00C8jE=)
                          20: AS136958.roa (hash: raXbY747KNrs+iyJEwpNRik6wECy3D2980ehTz65OCs=)
                          21: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
                          22: AS17621.roa (hash: HIED5sDCeZSsEPUfZqFM2Xy5g60N7tMhj6LJZsNT74U=)
                          23: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
                          24: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
                          25: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
                          26: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
                          27: AS4837.roa (hash: F7OUOZEqSKr13xSGc0mxgn4KW9pcaU29X+OStwKpvq8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 00:24:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6c:54:b2:cf:d6:a0:de:a0:55:9e:6a:d4:0b:4f:0b:22:8b:b7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: Jun 13 00:03:59 2026 GMT
            Not After : Jun 14 00:24:59 2026 GMT
        Subject: CN=9291D291097C95D5BF85358EBAE00FCA9EDA14D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:22:38:ad:a5:b3:ff:2c:3b:26:ee:95:d8:c7:
                    9c:21:a7:b6:bf:04:ae:a0:ac:49:09:52:47:ae:98:
                    4b:07:df:1f:72:aa:61:25:a4:fb:35:1b:cb:ea:7b:
                    30:45:32:64:5c:60:8d:b5:4c:8a:32:1e:f9:b8:55:
                    07:d3:e7:8d:f8:af:3a:81:83:5b:1f:94:10:e9:11:
                    04:4a:e9:ea:24:dc:83:0a:43:af:44:55:8f:cf:6e:
                    28:cd:79:33:23:bc:9b:01:dc:7b:d8:d2:24:6a:2c:
                    c4:db:d4:e5:b7:bc:f0:ef:6e:fe:c1:c9:ee:ea:01:
                    67:47:c4:38:fc:5c:6f:ef:b0:b1:4d:b9:f6:96:a5:
                    db:3f:66:4a:7a:b5:1c:cf:d9:fd:9f:08:af:51:81:
                    59:33:77:54:8a:5e:68:5c:4c:eb:2b:13:58:be:86:
                    a7:b4:e8:3b:7b:bd:ec:de:87:b8:d9:b0:ca:5a:18:
                    67:cc:b1:87:ab:d1:d8:9f:e2:0d:2e:35:27:6d:c3:
                    6f:43:38:ed:96:7b:74:8b:47:99:e6:ee:fd:fc:fd:
                    41:e6:84:c7:ce:8c:66:47:38:7c:5c:86:25:3c:52:
                    d2:23:44:4c:1b:c2:d5:53:ff:76:b6:74:84:07:dd:
                    f2:d7:c7:f9:f6:73:d8:74:be:6c:ef:53:da:65:65:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:91:D2:91:09:7C:95:D5:BF:85:35:8E:BA:E0:0F:CA:9E:DA:14:D3
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:7c:63:5c:4f:01:5e:ca:19:bc:a5:65:cf:46:02:0c:6d:b5:
         5a:3d:46:fd:cc:59:1f:c5:a0:fa:80:e0:ad:1d:d5:5c:41:0e:
         49:39:59:52:af:ef:11:28:c2:f6:ae:3c:b4:0b:84:c3:6f:a6:
         cb:a0:a0:1d:53:b1:4b:13:b5:d5:b7:b4:75:85:e6:9d:3e:0a:
         b9:ba:3a:78:c7:e7:ba:40:94:a3:3c:09:8d:4d:b3:7a:fe:be:
         a5:06:82:1b:a2:d7:12:d1:cb:39:32:e8:5c:44:31:f8:67:ac:
         a7:d9:b3:29:29:e4:8e:2f:53:2c:de:23:ad:7a:ce:55:ac:88:
         55:f2:6f:a6:6b:97:85:b9:1e:ca:98:37:21:33:fb:8e:74:e0:
         7f:9a:2c:8a:d1:d0:2a:c4:96:b8:df:68:c4:fa:63:69:f9:d0:
         4d:75:ca:b2:4f:54:a9:e1:81:09:ea:0a:d3:b8:78:a3:78:6f:
         bd:14:06:ea:eb:28:cf:77:f0:8b:7c:41:97:af:73:3c:0f:83:
         ef:40:3b:49:36:77:fe:f5:9c:32:b3:89:b0:31:13:f0:74:ee:
         5a:f6:29:aa:4c:77:97:9f:38:92:44:f5:b3:b5:3a:db:b0:b5:
         da:c5:06:7a:35:d3:6e:81:34:e6:2c:f7:cb:ce:6a:90:a1:0b:
         29:ef:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:02:56 2026 by rpki-client