
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
File: 78A515C1A913D89B4134674C867CEE6B49AE149E.mft (raw, json)
Hash identifier: Kk1kiFxCmvhgqOcQZjLq6K94R6dA3o7biZYOqwvshs8=
Subject key identifier: 4E:7F:62:0C:86:1D:A9:88:73:40:B8:4A:71:E3:D4:2B:02:C2:68:52
Authority key identifier: 78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E
Certificate issuer: /CN=A918C4250000/serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
Certificate serial: 302E3079279B73D9EFAEDC92F1240814186FDF89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
Manifest number: 2F
Signing time: Fri 17 Apr 2026 16:53:56 +0000
Manifest this update: Fri 17 Apr 2026 16:48:56 +0000
Manifest next update: Sat 18 Apr 2026 19:19:56 +0000
Files and hashes: 1: 78A515C1A913D89B4134674C867CEE6B49AE149E.crl (hash: ZYtibVYJR08ahOci/KZGHQahDtOOAlccQKt4CWFh69k=)
2: 3130332e3234352e32332e302f32342d3234203d3e2034383132.roa (hash: dXrhnb27qG4k8MBvWI1Yo0GAVS5BxdWPFYcv+YuYno8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl
rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 19:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2e:30:79:27:9b:73:d9:ef:ae:dc:92:f1:24:08:14:18:6f:df:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918C4250000, serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
Validity
Not Before: Apr 17 16:48:56 2026 GMT
Not After : Apr 18 19:19:56 2026 GMT
Subject: CN=4E7F620C861DA9887340B84A71E3D42B02C26852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f3:f4:d9:89:6c:95:bb:fc:94:ac:89:e9:18:
69:28:c7:c6:fa:07:3d:bd:ad:eb:e4:a4:6e:95:38:
78:c9:18:d4:18:25:6f:bb:3d:21:e3:bb:a7:67:b6:
a8:d7:45:f8:80:2e:38:7d:f6:13:d6:6d:84:d2:4b:
47:ed:a0:15:d2:cc:ea:b6:80:d5:eb:b5:ce:09:eb:
00:cb:55:88:b2:e6:66:a0:24:89:58:fd:8f:06:73:
85:2d:c8:f1:79:71:52:d9:01:c6:0d:22:94:25:44:
79:1c:41:ec:07:98:21:ec:c2:29:cb:97:62:46:a5:
57:1f:6f:0c:04:92:93:e9:d5:3d:5a:3b:76:ee:ef:
d7:ef:c1:df:a8:68:d0:2a:b7:e0:eb:dc:a5:fc:6e:
8c:2e:38:ca:f1:32:a8:12:f7:c0:fd:8d:45:a1:5c:
75:ff:35:b5:98:da:ac:f8:eb:fa:4e:1c:95:3c:f1:
47:bb:93:b8:92:52:a6:7d:9c:a4:8d:7c:e6:2b:a0:
7f:17:7c:1a:98:a2:7e:6f:16:0f:59:95:db:4b:44:
4e:a9:31:d8:f5:cd:f7:28:7e:0f:2d:44:86:df:fe:
c1:85:89:a3:d9:ae:53:d4:58:11:c2:0e:d1:77:7a:
3b:ce:71:3e:ac:33:fa:13:d6:ff:58:3b:91:a1:a7:
39:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:7F:62:0C:86:1D:A9:88:73:40:B8:4A:71:E3:D4:2B:02:C2:68:52
X509v3 Authority Key Identifier:
keyid:78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:d4:d8:cf:b3:ca:a0:4f:c6:c6:27:7c:12:b2:8f:05:6c:64:
ed:97:f4:54:41:c5:aa:c0:5b:12:00:e4:82:68:88:a9:77:8b:
1f:fb:a9:8f:77:75:33:d3:62:ae:9a:9b:ef:06:bb:05:6e:6d:
21:e1:ba:93:e5:76:4c:04:52:30:eb:cf:65:9c:4e:f5:a7:32:
9a:db:c4:bf:35:38:4b:19:40:5e:08:98:31:a5:6e:f2:da:88:
59:be:ad:3e:ba:c9:a8:60:84:72:6e:65:84:e1:cd:47:f0:13:
b7:f4:c5:6c:1b:f0:e7:ad:75:f9:3c:eb:ff:99:43:39:47:43:
0c:3e:13:e9:02:9e:4d:43:90:ab:a7:df:b8:c0:5f:c8:6a:bf:
34:f5:37:6f:ca:d7:2d:51:ac:08:a8:b6:5e:95:e6:5c:d2:32:
25:ad:e7:9d:d8:0f:31:be:e5:92:0b:29:0c:ed:23:82:ac:9c:
e0:2b:07:57:02:e0:02:43:86:70:00:f7:32:55:4a:1e:0d:e5:
58:31:48:14:f0:41:98:9b:fa:da:b4:dc:b3:65:4b:fa:54:4b:
a8:cb:4f:19:e1:e6:7c:ec:2c:74:7c:ca:46:65:6e:d3:bf:73:
16:ad:ff:bc:74:77:db:44:0e:68:99:90:c8:89:91:a3:f9:a2:
8c:6c:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:08 2026 by rpki-client