This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File:                     87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier:          oJQXDl/M6HmIq8hLdKkIVUU5sPilF7yCDEMrf607lPg=
Subject key identifier:   3E:AC:BF:D8:53:9A:71:52:03:C0:05:33:38:27:6B:AF:C8:DE:44:6F
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer:       /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial:       6F06606B528A9EA848791668DBCDEA01B51F1FAF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number:          09
Signing time:             Wed 31 Dec 2025 02:29:06 +0000
Manifest this update:     Wed 31 Dec 2025 02:24:06 +0000
Manifest next update:     Thu 01 Jan 2026 02:39:06 +0000
Files and hashes:         1: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: HR9tVt+kku7xfGmErde2S/8jGgaiSkDpefsY1c1YpOE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Jan 2026 02:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:06:60:6b:52:8a:9e:a8:48:79:16:68:db:cd:ea:01:b5:1f:1f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
        Validity
            Not Before: Dec 31 02:24:06 2025 GMT
            Not After : Jan  1 02:39:06 2026 GMT
        Subject: CN=3EACBFD8539A715203C0053338276BAFC8DE446F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:40:cb:d2:23:d9:f6:42:f6:66:8e:72:19:
                    b7:97:f4:03:a0:b0:95:17:ef:a5:49:3d:b5:b6:78:
                    33:db:82:bd:7a:d2:a5:87:33:a1:3c:0f:6c:54:bc:
                    34:e9:29:ff:f0:6f:62:a0:c3:0d:df:81:6d:64:e9:
                    48:dd:0d:78:78:22:8a:fb:5e:35:a8:92:18:74:95:
                    e0:62:c8:65:03:99:3b:26:38:78:63:ca:29:e4:53:
                    fe:4f:a4:88:d9:59:62:29:98:43:48:2b:45:7d:35:
                    8e:f2:ee:d2:89:02:b1:6e:5e:0f:91:fb:80:6f:88:
                    e5:ae:26:71:2c:9e:ea:b0:ee:f3:a6:0f:d2:7e:bc:
                    be:fa:bd:44:c5:0f:73:39:27:88:cf:2e:20:dd:22:
                    b6:aa:3b:7a:aa:99:3e:8e:d2:26:f3:15:f7:d7:2a:
                    fa:1f:e4:8d:64:85:ff:04:96:21:3f:c9:1d:6f:03:
                    e0:1e:18:eb:5a:5e:ad:2c:ab:9e:d8:a3:b9:31:34:
                    cb:30:3c:e4:ff:5a:3d:a9:f5:5d:57:aa:ae:1e:ef:
                    79:68:8c:7c:fb:46:54:9a:51:25:28:1e:c0:5d:d9:
                    3d:31:51:dd:f6:96:76:9c:4e:b0:ef:9a:c2:bc:5f:
                    e3:0b:17:4f:a9:c9:25:ce:28:68:24:e1:c9:55:00:
                    a1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AC:BF:D8:53:9A:71:52:03:C0:05:33:38:27:6B:AF:C8:DE:44:6F
            X509v3 Authority Key Identifier:
                keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:20:63:c4:3e:90:cf:22:4d:34:d3:51:39:e8:28:62:2a:
         a3:a7:e8:8a:2b:d3:15:cd:2c:6c:2a:26:ad:ed:a2:62:d3:50:
         28:80:6f:92:68:85:56:d5:84:23:e5:05:f1:23:0a:2c:e5:4b:
         86:fc:c2:fc:4d:1b:9d:a7:93:71:88:84:db:98:1b:56:3b:8b:
         2e:49:e4:e4:cc:a3:32:6f:31:53:0d:f4:67:42:17:7d:34:36:
         75:0d:17:d7:5d:2d:e8:ae:03:25:44:70:71:c3:3d:79:f7:71:
         e6:58:41:36:ee:ba:c1:fb:22:f8:aa:11:53:c9:03:b6:0a:5b:
         14:3a:bb:8e:61:20:98:71:60:87:59:ce:40:74:55:27:e5:1d:
         e3:90:33:2c:54:c2:1c:5a:48:15:0d:0a:e0:4a:a3:65:ed:67:
         8a:0f:76:a7:ec:07:25:92:f8:e6:75:3b:07:90:91:49:b8:64:
         d2:db:c0:30:4c:d8:5e:a9:29:aa:27:5b:56:c7:59:43:7f:97:
         cd:52:63:fe:5d:d4:1c:dd:b2:59:97:f4:5e:84:eb:9b:7c:85:
         0a:12:28:8e:4f:42:32:03:75:83:3e:aa:a1:8d:78:01:ea:5a:
         8c:da:7d:fb:2f:b5:19:d3:26:d1:50:a5:cf:ef:b8:b9:02:b1:
         0a:7e:de:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 05:15:44 2025 by rpki-client