Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
File:                     8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft (raw, json)
Hash identifier:          0hgoo8gWVU0MP1PdjCzXzDPLPkQ/nR8EMtKaRYO9MGk=
Subject key identifier:   03:5F:CA:F7:B8:60:74:10:E4:3F:BA:E0:15:A4:44:C2:B1:60:B8:C6
Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
Certificate issuer:       /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Certificate serial:       37BE208AFE06C64B24A48D9C30B4B81928A0A54D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
Manifest number:          8F
Signing time:             Thu 30 Jul 2026 00:51:29 +0000
Manifest this update:     Thu 30 Jul 2026 00:46:29 +0000
Manifest next update:     Fri 31 Jul 2026 03:59:29 +0000
Files and hashes:         1: AS7497.roa (hash: vOBS46eub2Wwxjkc5QwJDf8XxXzhnPUVc0ZDG33mQ4s=)
                          2: AS3460.roa (hash: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ=)
                          3: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl (hash: dxNnJjDXWjZF31c49q7LKdN8zhZ++C2P2+wl8pNJVdY=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 03:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:be:20:8a:fe:06:c6:4b:24:a4:8d:9c:30:b4:b8:19:28:a0:a5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
        Validity
            Not Before: Jul 30 00:46:29 2026 GMT
            Not After : Jul 31 03:59:29 2026 GMT
        Subject: CN=035FCAF7B8607410E43FBAE015A444C2B160B8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fb:86:cd:47:50:97:2d:b4:1d:9a:ed:bd:93:
                    c6:57:60:6f:08:f2:99:48:4f:f4:87:98:ff:d4:10:
                    13:eb:52:18:3a:b5:2a:53:12:d4:90:f3:82:96:e1:
                    2c:92:1d:0a:82:2e:4d:24:da:79:9a:1b:24:84:bf:
                    a0:05:13:34:ef:18:9c:19:89:34:d3:f9:20:df:d6:
                    f7:b5:89:a5:19:7f:48:5f:cd:df:4c:7c:60:99:a0:
                    42:50:6b:19:c0:9b:32:0b:56:75:8b:18:59:bb:34:
                    ca:aa:0e:28:aa:1e:ca:67:16:40:c9:a2:aa:dc:16:
                    4b:b7:f7:e0:1a:9f:6a:0d:3d:d7:93:be:44:83:9c:
                    ca:38:83:cf:69:e5:f2:21:7c:3a:55:ee:f0:7d:0c:
                    c7:cd:e1:78:24:2d:b6:51:d0:fd:b9:ce:af:55:f8:
                    8b:90:bc:d3:2c:36:e2:25:1b:39:e7:14:1b:9b:dc:
                    79:1b:da:c1:7d:76:9b:97:92:68:1b:88:08:c4:ff:
                    a5:15:8a:8c:83:f0:0c:99:1b:d3:36:59:30:4c:54:
                    b1:a6:59:bf:31:7c:2b:2c:0b:cb:60:0a:8e:2f:65:
                    40:1c:d8:97:d8:52:c4:28:e4:aa:c4:1e:4c:8c:f0:
                    a3:85:a9:ce:9e:f7:18:15:ce:7e:53:9a:30:33:47:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5F:CA:F7:B8:60:74:10:E4:3F:BA:E0:15:A4:44:C2:B1:60:B8:C6
            X509v3 Authority Key Identifier:
                keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a5:40:f3:ff:bc:c8:41:bf:50:12:50:0b:18:ab:87:4f:0e:
         75:fb:97:e9:a8:96:d1:e9:ee:2e:83:ce:d6:43:61:7f:af:b1:
         ea:ea:83:be:b2:9f:fe:b9:1b:54:25:30:5d:82:0f:3a:dd:2b:
         0f:c5:7d:42:9e:88:d2:46:76:a4:ee:d8:6b:26:7d:06:ec:7c:
         ef:61:5d:92:e1:51:68:76:99:b4:b1:e9:2d:46:40:31:e3:aa:
         d1:fc:9b:fd:15:e5:cc:c3:72:e2:fb:19:4b:52:72:40:73:38:
         cd:61:c2:e5:63:21:9c:cb:84:70:fc:a5:5a:ed:0d:09:8b:39:
         69:4b:4d:76:42:38:5a:cf:31:3c:35:54:38:19:5c:b6:c9:f1:
         4c:75:a4:9a:13:c9:e2:ba:e2:dd:39:42:c8:f2:62:7c:06:58:
         ab:78:f2:c5:75:fd:cc:df:d0:4c:05:5a:f4:d1:b3:f6:df:b4:
         a3:a5:05:c2:03:69:75:f3:29:fc:fa:3e:a6:d7:01:b2:99:cb:
         14:43:78:29:6a:8d:38:1a:45:eb:15:a7:ad:36:b9:b7:f1:9e:
         58:e6:10:1e:fb:08:d6:99:35:3d:91:9d:85:0d:b7:93:32:89:
         50:ed:e4:18:bd:0d:40:c3:fa:84:cc:21:a9:1f:de:cd:5c:62:
         e5:33:b1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:53:13 2026 by rpki-client