Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
File:                     5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft (raw, json)
Hash identifier:          r5/gaA8brpGPqR/Qo4m7q5SvAJlsF7gxZgysjLbfQck=
Subject key identifier:   42:2D:37:E2:82:CA:2F:BA:39:F9:22:81:D8:BE:3E:45:9D:FC:83:62
Authority key identifier: 5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20
Certificate issuer:       /CN=A9185BF00000/serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
Certificate serial:       71BEADCB00FE652C6B42DB48CAAC810E7F0E1239
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
Manifest number:          A0
Signing time:             Sat 26 Sep 2026 15:53:07 +0000
Manifest this update:     Sat 26 Sep 2026 15:48:07 +0000
Manifest next update:     Tue 29 Sep 2026 18:00:07 +0000
Files and hashes:         1: 3131312e3134382e372e302f32342d3234203d3e2039333934.roa (hash: w2uww8qPFWUazWwuGCK8/yWvvowTyGEwvF8hvt38JPM=)
                          2: 3131302e35362e36342e302f31392d3139203d3e203234313338.roa (hash: 59oGr0ky+O3j98rwX6JHVD/hqkOvCvGLeUztt39BOOs=)
                          3: 5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl (hash: KvuqHjczPDE4TKbLKnVeqYhm5BnyX19/alq/GOVQI74=)
                          4: 3131312e3134382e392e302f32342d3234203d3e2039333934.roa (hash: XzBv9SOl5ModQ33WEL0N7mYjl2MbzPwjp71wzuUQx8Y=)
                          5: 3131312e3133322e36342e302f31382d3138203d3e203234313338.roa (hash: 3ifqY8VGSDNBQyoXmFWRM07xJTLoyE7NO7Ingo5og14=)
                          6: 3131312e3133322e302e302f32312d3231203d3e203234313338.roa (hash: L/cbX48r0n0urdDsGV7xJD+dqhOiJ41neGwiM8FDvaM=)
                          7: 3131312e3133322e382e302f32312d3231203d3e203234313338.roa (hash: UbT5lQ6JG7pq4fufnpju9r+uIfHb4FrbT8lPuXUigVU=)
                          8: 3131302e35362e33322e302f31392d3139203d3e203234313338.roa (hash: OtKBLmWzQT/Q3kP+HjfCQ+IG4XUQTXZHnnBdiENY2Wk=)
                          9: 3131302e35362e302e302f31382d3138203d3e203234313338.roa (hash: WE9B2aHiTSE7Yk0NSvU9PxHAN7OqC16HNbK5B+wBK7k=)
                          10: 3131302e35362e302e302f31392d3139203d3e203234313338.roa (hash: udW9MAIHziTj099yqQePLFa9hY2NHc3O4/scyBUm7A0=)
                          11: 3131312e3133322e302e302f31362d3136203d3e203234313338.roa (hash: HCIylBNYa9Vf8y+PgUja2hYsUk8ccmeWXOEyzNnbd88=)
                          12: 3131312e3133322e33392e302f32342d3234203d3e203234313338.roa (hash: J+bF7uUjwLN2+FjsdBLE1bNnbGUH1chDqKHH/7I0as0=)
                          13: 3131312e3133322e302e302f31372d3137203d3e203234313338.roa (hash: q4w9LGSvj+OQHZYh4Gp4vAFQ/e9rJ0z4FUrYdaVIFzY=)
                          14: 3131312e3134382e302e302f31362d3136203d3e2039333934.roa (hash: 1xQvQ9HVfLtxGqMntxYvC6XTa0OHesLm3rkB/26MD+8=)
                          15: 3131312e3134382e342e302f32342d3234203d3e2039333934.roa (hash: t+OPiobZgQ42TShAV/kLlhHrj9LU2TUCnV3Mj/d8UpA=)
                          16: 3131312e3133322e382e302f32332d3233203d3e203234313338.roa (hash: CHEd2lUX/4+6hvlqkkh8ve2fsAxCjKjpVR8WuO/ZrBM=)
                          17: 3131312e3134382e302e302f32342d3234203d3e2039333934.roa (hash: sfzOj2+p8vJitdF6cwXm6LGCcfkt8QUX31pTIJb3Qsw=)
                          18: 3131302e35362e302e302f31332d3133203d3e2039333934.roa (hash: zt6lA7ke3sMs3o2KYbOX2OFxJ2Jr63dB7Io5i58+OuQ=)
                          19: 3131302e35362e302e302f31362d3136203d3e2039333934.roa (hash: g1QciWGAV5eLL1QeM/rMO4jhCeVky3NAU5tuRBmgjOE=)
                          20: 3131312e3134392e302e302f32342d3234203d3e2039333934.roa (hash: 03vGDWQVIW9JyCDE28uuXlzYH7T8yfTtPUiTGwaujkk=)
                          21: 3131312e3133322e33322e302f31392d3139203d3e203234313338.roa (hash: 0oUXz3uIv4RTGEray6s5AUgqsmbmGyIbb/bJoyadljI=)
                          22: 3131312e3133322e36342e302f32312d3231203d3e203234313338.roa (hash: yvsNs6M2PbLDtQnRGIl5H9JFFbOuozfowHPwnitlfe8=)
                          23: 3131312e3134382e382e302f32342d3234203d3e2039333934.roa (hash: LWnHAbLGtlkK5nTvz+5CMwvgK9TT0DJa9/aYAytvj6Y=)
                          24: 3131302e35362e39362e302f31392d3139203d3e203234313338.roa (hash: k2kr72sSsRVdt9jE1vD8JqUZCFV7C/P3yK2t8NtFNB0=)
                          25: 3131312e3133322e302e302f31382d3138203d3e203234313338.roa (hash: r3kYchxGuS/xYzRuWg2V9pjsng7BcvFj8KQNm8oB9NA=)
                          26: 3131312e3133322e34312e302f32342d3234203d3e203234313338.roa (hash: c4ezn/euLSs2KDpc7ullF4xR0zBgsQ3liRWjXrIIJd8=)
                          27: 3131302e35362e36342e302f31382d3138203d3e203234313338.roa (hash: G9C7+mv7eBQEyaqiRH3EyQVNGhmTyzd6h3CWb2+sxs4=)
                          28: 3131312e3133322e382e302f32342d3234203d3e203234313338.roa (hash: c2yiAIdDX/1t39H4iWYH8hBDzb1Y7FjZdILBKLlK9zk=)
                          29: 3131312e3133322e31362e302f32312d3231203d3e203234313338.roa (hash: lcJVlqoEz+cTizzH7WJL3wDHDAIZw0lPgL3X49BQL/E=)
                          30: 3131312e3134382e362e302f32342d3234203d3e2039333934.roa (hash: 2imTiovr8ky/La51iqbr/AtX9bUZkXzVRNbzMfcYkJw=)
                          31: 3131312e3134382e312e302f32342d3234203d3e2039333934.roa (hash: a8Gk/4AhEqcjfkAV0xcTUSI8h7MJ6Sw0lqih8UmkJvU=)
                          32: 3131312e3133322e3139322e302f31382d3138203d3e203234313338.roa (hash: tUSzsIcvUTFmQRnY+gkGd+xKAaGfBZelCtAN8lVrWtQ=)
                          33: 3131312e3133322e33322e302f32302d3230203d3e203234313338.roa (hash: YrHluRGo0PeiVa377rFkkGA1E6ezETTVzyIGugXv2ek=)
                          34: 3131312e3133322e39362e302f31392d3139203d3e203234313338.roa (hash: nynsp4c2L7TuIkZLYyXvrwT/e+CJRV+6XGskGDAbUGE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 18:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:be:ad:cb:00:fe:65:2c:6b:42:db:48:ca:ac:81:0e:7f:0e:12:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185BF00000, serialNumber=5F3D64DCF13194FB0D71F29FB37C2D93F8D48720
        Validity
            Not Before: Sep 26 15:48:07 2026 GMT
            Not After : Sep 29 18:00:07 2026 GMT
        Subject: CN=422D37E282CA2FBA39F92281D8BE3E459DFC8362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f5:99:cd:72:12:b7:ec:76:6a:ac:84:4d:91:
                    c7:52:d8:ea:d1:2e:4f:c2:cd:35:58:b0:30:89:d5:
                    3b:f7:f8:93:c3:ad:1c:71:d1:08:bf:c8:c5:1e:e2:
                    ea:3c:a7:3b:e1:8d:6b:ab:f0:29:19:37:e3:a6:af:
                    3c:c3:78:15:2c:f8:27:ae:db:75:b3:ec:06:d4:56:
                    7f:83:89:2b:96:81:7d:61:8d:e1:9f:84:9b:f8:ca:
                    51:c6:08:09:23:87:05:73:3b:83:a4:74:e1:52:28:
                    aa:cc:bc:4e:2a:89:e5:d8:61:da:c9:be:e2:21:99:
                    f7:1b:50:2b:c7:c5:94:c8:2e:f6:ff:44:68:ca:27:
                    69:d9:e3:48:ab:e2:72:73:0d:db:04:8e:d5:88:e1:
                    0a:e2:91:f4:0e:53:e7:54:5c:30:05:26:78:ec:94:
                    4c:ec:a4:9e:ce:83:d0:d3:42:a2:bd:9a:73:98:34:
                    94:d2:2a:fe:7c:c6:22:a6:6f:67:80:f3:2e:5e:41:
                    ca:b9:6f:11:95:02:7e:37:9c:02:c1:d9:a4:83:31:
                    f7:d8:5b:a1:23:f9:d3:6f:4a:ca:7f:a7:47:d7:5b:
                    a5:da:f4:a1:d2:29:03:7e:2e:76:00:38:22:66:74:
                    a3:11:77:6e:79:1d:c5:11:77:7b:c8:2f:b7:fc:d5:
                    f1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:2D:37:E2:82:CA:2F:BA:39:F9:22:81:D8:BE:3E:45:9D:FC:83:62
            X509v3 Authority Key Identifier:
                keyid:5F:3D:64:DC:F1:31:94:FB:0D:71:F2:9F:B3:7C:2D:93:F8:D4:87:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xz1k3PExlPsNcfKfs3wtk_jUhyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109746307418816533/0/5F3D64DCF13194FB0D71F29FB37C2D93F8D48720.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:47:b0:8b:d1:d1:93:be:8a:ac:fa:b6:bb:b0:7a:90:67:2a:
         95:45:5a:82:05:c9:b1:6a:d0:ca:8c:e7:8d:0c:fb:3f:40:61:
         0d:78:90:6e:0f:5c:23:d4:11:f9:9b:3e:37:71:df:1c:84:45:
         37:ec:0d:7b:66:20:3e:6b:5c:96:bd:d2:27:77:c3:fe:6c:12:
         20:9b:4b:f0:29:a8:83:b5:78:5e:43:7c:fa:f3:fb:56:42:94:
         d1:da:0e:fe:f8:75:b7:04:48:8f:8e:fd:6a:d5:13:31:a7:61:
         e8:aa:76:d9:a6:d8:a8:17:03:f2:37:4d:17:69:d8:8f:4c:f6:
         5c:0b:9e:fa:bf:31:6f:23:f8:e5:cf:15:03:20:d1:8b:4b:d8:
         43:4d:ae:c8:80:01:c6:d7:df:ce:10:4f:fd:79:ff:53:4a:f1:
         b6:4f:90:a5:fc:db:66:40:39:59:12:12:5f:ef:fd:11:a3:f6:
         e9:84:1a:fe:0a:ec:0a:5c:05:1c:a5:27:16:c4:2e:dd:32:dd:
         7a:7b:34:bf:47:ff:24:18:43:91:29:f5:fa:45:d8:0c:cf:19:
         06:7f:80:f7:26:70:81:1c:64:41:92:ed:56:cb:a5:7c:97:45:
         d0:96:d7:1b:e4:d5:5d:cb:7d:8c:85:f0:08:6e:46:44:1e:71:
         75:46:a8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:27:09 2026 by rpki-client