
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier: 2tKp/0VczGFihU9oLkZAeLkgmos6luGU+6OABtU74A4=
Subject key identifier: 08:48:94:81:35:0A:7B:E2:F3:45:FF:9C:10:14:D8:10:2B:97:C9:7F
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 0F0A6B41D82E061F732C89D61A86727F0209399B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number: 09BE
Signing time: Tue 28 Jul 2026 09:21:56 +0000
Manifest this update: Tue 28 Jul 2026 09:16:56 +0000
Manifest next update: Wed 29 Jul 2026 11:52:56 +0000
Files and hashes: 1: AS10206.roa (hash: JrSzkLWEov6OGP9IjCE/ZCUlDSdfbsp28TJeE5P112I=)
2: AS140726.roa (hash: sduvi5H/w3JTDxxgFugQCgDVHT4rmmt2mCzvQjJson4=)
3: AS4837.roa (hash: Gp88bvhFrEMwNqxMhgUSGzdUpS7jIuVrqO0Xv/V4QyU=)
4: AS134543.roa (hash: T38AQTA2JBsg/OjfMx0h+jt/C1YhSxNMf9/aTrMqrIc=)
5: AS140979.roa (hash: mgWen9u5xr5vgwQUtT9yhur6d5s8RLRyDezfDQAOhnA=)
6: AS140886.roa (hash: tIGhfy98u9aOuXMKeDjEM5Fc1ERJ4zFfjcQrRPXJkxA=)
7: AS17623.roa (hash: H96k/JbDO6XBtabNXE4RWg7CTdt4FyTzlwNaSJxWS40=)
8: AS17622.roa (hash: NYovyR3b3U1ScI4bJPMBwEGJNUB6WxfAb0/0Qo16Fro=)
9: AS136958.roa (hash: yrahyZw0YVYFKiyugmEX6LLIvM3m+7n3PO1SgiRepwY=)
10: AS152120.roa (hash: 0dSRUlDpwxecW0a1HoIjiXpEd+7xWZ34DIHGYILYUlo=)
11: AS133119.roa (hash: Roun36f4d33qwfjgVrr2P9lFTockr6MsTl7heCiFx9s=)
12: AS140716.roa (hash: bSgr1JGgO5sUOmzokul9nLh2gAYKr+/KoYFDQRHHfWg=)
13: AS139007.roa (hash: siZFthfhQQNSf0w/iJIsyxzZBUhMrFuOLVUnlkM/Nqw=)
14: AS17621.roa (hash: HIED5sDCeZSsEPUfZqFM2Xy5g60N7tMhj6LJZsNT74U=)
15: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: plCdkjthnlGXdTRQSCAputYMpNo1tuDvbgkJc7Yvvg0=)
16: AS136959.roa (hash: HiwqnJKlER565h6gYqciA3q0kOYFRzZrKkYI2BIHtoU=)
17: AS9929.roa (hash: hD/yNAUu8tVS1iXd4nCY6PciYbDNFJZDfoNTvZNOyMQ=)
18: AS138421.roa (hash: Se4QZj2/NWj99HUCHHCaMRJdzoKaGE9rkO4n0naMvsg=)
19: AS140707.roa (hash: dhCaFshRZ7M09xzhUAyNw9T/7RVZBAzAYQhNY5c85IU=)
20: AS4808.roa (hash: LQTIed2Vi77SscwTysIAjFvdRDIANMfw8BubZXMk5zk=)
21: AS137539.roa (hash: otBv9CgpIdH1jkS+1OeIvuZsRmj9gXrSLLCFCXZdKXY=)
22: AS17816.roa (hash: Ffb4//kDka0Xnr57M5Ft4SuxSnj7EaFdHyljtyXZoX8=)
23: AS134542.roa (hash: ADVR8ueWWmnL/BnAMH2xwlbpXlPH+uvuUrFjG926ChY=)
24: AS133118.roa (hash: 9Q1m+tLuY5yrS3UpJLfS/GxGrPkJBaC+3IB9Xe3ZMCA=)
25: AS135061.roa (hash: ujw/DYzhYPqiUDINcmKmeU2w0tHcrib6Fcbj4MDbCOw=)
26: AS140717.roa (hash: Z4j/PKl5JdzPb2DCk9dQFBgRN8BBEFROC3WyFUMMj1Q=)
27: AS4611.roa (hash: qJS0LHsX/Rjgxzndnpqgzbt0LDdhflTZ1OdWh0MeQXM=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 11:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0a:6b:41:d8:2e:06:1f:73:2c:89:d6:1a:86:72:7f:02:09:39:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: Jul 28 09:16:56 2026 GMT
Not After : Jul 29 11:52:56 2026 GMT
Subject: CN=08489481350A7BE2F345FF9C1014D8102B97C97F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:a1:f3:a0:75:52:f8:7a:a3:8d:64:d7:08:
84:37:c9:9c:b0:41:d1:d8:37:69:f5:4b:48:f7:44:
73:df:15:89:04:cc:ba:8f:e9:e9:2e:fa:c0:c6:ec:
93:f8:e6:63:f0:83:36:8b:a9:d9:da:f9:71:eb:8a:
b9:e5:0c:dd:8a:c2:eb:e7:dc:be:51:c3:c3:6b:9d:
ef:0d:22:91:f7:ca:01:8d:72:39:e2:64:1e:fc:ac:
1b:63:aa:84:9f:03:f2:3a:aa:b8:b0:4b:e7:ba:7f:
58:a6:10:d4:3a:a3:0f:ca:73:ea:ce:18:e8:69:f0:
c5:ed:92:de:32:ca:56:89:e0:f1:20:ba:d1:fe:21:
15:c8:4e:6e:76:28:80:84:c7:06:c1:27:11:1f:d7:
59:23:25:60:ca:f3:6d:36:6e:96:a7:3c:44:cc:a8:
17:57:b8:d3:95:b2:a7:08:39:58:f8:a5:0b:88:fe:
2f:4d:72:99:d2:eb:36:62:e6:64:76:f9:86:9a:01:
e9:43:19:8e:e2:c7:b9:a1:ff:b7:f5:d3:49:94:78:
92:cd:90:40:46:1f:50:c8:2a:d9:89:df:5c:06:76:
c9:ad:0d:b2:93:24:16:6e:f3:ff:1c:5c:a2:c8:68:
07:f2:6a:5b:e7:5f:d8:1b:ab:cf:74:c6:3a:03:26:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:48:94:81:35:0A:7B:E2:F3:45:FF:9C:10:14:D8:10:2B:97:C9:7F
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1f:91:20:8c:39:22:12:8e:36:b4:ab:10:40:e6:92:22:9c:
b5:15:d1:2d:68:fe:6e:ec:15:f7:8b:d9:d3:17:75:a0:dc:e7:
93:51:3f:46:fe:75:13:e1:9c:31:eb:e1:69:ec:f0:17:75:11:
2f:72:68:d6:20:7f:d6:90:80:c2:0d:ea:70:dd:21:af:66:5b:
b3:31:1e:77:6e:bb:fd:d9:3f:2c:54:1a:c1:0f:68:3d:e6:5d:
fb:fc:21:29:40:b5:00:b2:67:0d:15:b1:f2:27:01:55:36:1c:
7b:31:64:90:15:a7:dc:a4:ad:3e:d0:58:45:d7:aa:16:44:07:
42:b3:a4:63:c6:d7:cc:c2:36:22:1a:c2:0e:0c:fc:08:83:1d:
f7:94:07:bd:9f:c0:07:a2:7f:94:14:67:d5:2e:0f:a5:71:7f:
2b:ff:cf:10:3f:c1:44:50:08:5e:1e:7a:10:95:b8:d9:e0:9e:
b5:8a:54:00:9a:db:6e:20:02:9a:8e:40:a9:aa:3a:11:ba:53:
c6:54:fd:1e:78:71:49:56:d6:28:cd:ec:c6:3f:e8:84:ea:ee:
b9:16:ff:80:6c:f5:2f:eb:0d:17:24:f1:a3:5d:09:a4:d7:ec:
c0:21:04:70:a2:eb:fa:d2:ce:ac:4c:e9:11:18:56:c5:c9:4c:
3e:09:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:22:51 2026 by rpki-client