Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
File:                     8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft (raw, json)
Hash identifier:          HTcCx3XfNCK32KCTRS2gByYuqkWUXu0620oJWpF3T5o=
Subject key identifier:   46:B3:2C:DE:47:5B:B1:FC:18:4C:3A:73:33:9E:76:C2:C0:9C:F8:0B
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Certificate issuer:       /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial:       43F7AB867630884806E69DD014295DB717A0CD64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
Manifest number:          1C
Signing time:             Wed 13 May 2026 02:50:08 +0000
Manifest this update:     Wed 13 May 2026 02:45:08 +0000
Manifest next update:     Thu 14 May 2026 06:32:08 +0000
Files and hashes:         1: 323430383a383636633a666630303a3a2f34382d3438203d3e2039393239.roa (hash: v43e2JlOQC8deUmQZH7ieMHLzxBEVPeJlrmg+uF/6Co=)
                          2: 31342e3230342e32302e302f32322d3232203d3e2034383337.roa (hash: cS84L3kpY6d51GH4oBbeVLHgzf4uzePH06qCeqVpz1s=)
                          3: 31342e3230342e382e302f32322d3232203d3e2034383337.roa (hash: Wsu5XMNs74EY7OYoF+oKMJNW4hsft4jUck8YegIpPso=)
                          4: 31342e3230352e34302e302f32312d3231203d3e2034383337.roa (hash: MHAIpRaH+GObCNLCEEsYrFQpZGqjp61Un+HGBU+4xj8=)
                          5: 8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl (hash: Wtem1jd2eg/xFYIXNunl2zo3ViREprUFVsaRQYvSN+w=)
                          6: 323430383a383736633a313763303a3a2f34342d3434203d3e2034383337.roa (hash: PpnxDLQSDIrOKz091YwUrEOGO7s8eE4uzBinMWD3fEU=)
                          7: 31342e3230342e36302e302f32322d3232203d3e2034383337.roa (hash: 3T/BTG1bFAX91P3Dsqu7hf0JKTi7AO/X45BaJH1oplw=)
                          8: 323430383a383736633a313734303a3a2f34342d3434203d3e2034383337.roa (hash: ii4LWjMQi3QTxIdjybV79mVgrfX5Yqb6ECMTsRzBUaw=)
                          9: 31342e3230342e34302e302f32322d3232203d3e2034383337.roa (hash: th9V0fquP9LJBswwQ1/iWHBMAtG7X+3ckDztpErzsGU=)
                          10: 323430383a383736633a313730303a3a2f34342d3434203d3e2034383337.roa (hash: 7wvLVXvIKE8cQ8zVM3n5P7h6OFOD61A5PKddO+erzZM=)
                          11: 31342e3230342e3230382e302f32322d3232203d3e2034383337.roa (hash: yqY7OrLd0I0kLY3qlLvjFuULdPwOWgZkrrFS9cIJLZg=)
                          12: 323430383a383636633a3230303a3a2f34322d3432203d3e2034383337.roa (hash: XuzK6nn7Gii4blHLN+9v2KONmujUfW0Srji7iLJdSKw=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 06:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f7:ab:86:76:30:88:48:06:e6:9d:d0:14:29:5d:b7:17:a0:cd:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
        Validity
            Not Before: May 13 02:45:08 2026 GMT
            Not After : May 14 06:32:08 2026 GMT
        Subject: CN=46B32CDE475BB1FC184C3A73339E76C2C09CF80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:22:7c:b3:99:45:e3:94:29:fb:84:74:26:ad:
                    87:82:77:92:27:7d:6e:64:03:ac:1a:f3:34:a1:3c:
                    45:18:36:c1:f4:ea:f9:e2:dc:a4:37:85:a0:dc:4a:
                    d2:85:18:59:44:cc:9b:3a:52:1b:59:b1:2d:b2:95:
                    36:44:5a:cb:e9:14:07:7d:82:34:ea:23:0c:f0:f7:
                    3d:bd:50:0d:94:fe:fc:68:c7:77:b3:4c:96:79:58:
                    f1:08:b8:d5:8e:0d:9d:66:07:c6:1e:74:0c:13:0c:
                    84:81:5c:8e:f9:89:7a:c5:c1:c4:dd:7e:08:54:cb:
                    bb:6e:b1:43:69:8c:55:0f:58:3b:b4:f7:ab:e3:ba:
                    bb:2c:0a:73:1e:21:25:59:72:ce:23:db:f2:27:dc:
                    49:f6:72:f7:c4:b1:b4:05:f8:7c:1b:f3:67:98:9b:
                    0b:1d:69:fb:79:1d:39:1d:46:ab:70:49:95:05:6e:
                    7b:b6:6e:6a:b7:b0:e7:56:b2:61:05:09:34:2e:13:
                    fe:54:2c:40:a5:08:d8:7b:3d:5d:20:6a:00:1d:54:
                    a9:d3:80:bf:c2:45:f5:3c:02:d9:09:9d:4e:3f:4d:
                    ae:9e:4b:22:35:ae:c9:b7:39:a5:0f:d9:f9:82:fe:
                    4f:19:d6:45:4c:0f:28:fa:ef:4d:2e:5f:05:02:46:
                    3d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B3:2C:DE:47:5B:B1:FC:18:4C:3A:73:33:9E:76:C2:C0:9C:F8:0B
            X509v3 Authority Key Identifier:
                keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:dc:e3:c7:c7:d5:c8:d0:87:06:de:36:c1:98:17:4f:6f:
         fe:40:43:db:bc:9b:3c:60:5b:04:20:26:c5:31:eb:12:ec:da:
         4a:41:a1:ab:7d:16:67:cc:63:12:5f:e3:ac:d5:79:2c:c2:f8:
         42:78:13:29:75:75:48:2b:56:d7:30:26:9a:41:d5:c1:e9:9b:
         70:a6:5b:97:a4:74:4a:4e:2a:55:6e:34:08:7c:61:9d:da:36:
         e6:93:97:9e:0e:87:10:b8:b9:2b:80:d3:fc:01:c3:e1:36:21:
         27:67:a4:2c:88:2f:7f:00:aa:8c:e3:3e:e8:3f:b1:ab:41:6c:
         74:73:55:cd:e0:e5:d6:8a:32:33:30:07:1e:9a:b2:63:e3:14:
         3b:9d:3d:2a:bf:0c:17:0c:57:54:fe:78:b4:70:66:57:f1:bf:
         25:51:42:9d:43:6d:98:28:73:39:46:94:22:f3:48:af:d3:25:
         6e:bd:92:44:06:53:f5:f8:d8:e7:b9:81:27:c1:e1:c2:df:e1:
         e6:15:4d:28:53:ab:fb:ab:fd:fa:55:b8:4e:d2:da:1d:d0:af:
         cc:f8:01:01:7c:03:42:8d:30:39:12:d3:7e:cb:c5:d5:f4:7b:
         b0:eb:c1:ea:42:51:b8:2c:bc:69:d0:3c:ac:16:6e:b8:4c:78:
         24:29:3c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:11 2026 by rpki-client