Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File:                     87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier:          AmmkiFf8OdYMDmJoa4N0i4BngBNd+NWYpDiZvWgv4ug=
Subject key identifier:   77:D2:6C:07:08:39:FE:4C:43:8F:5E:86:8D:6E:8A:70:D4:FA:79:89
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer:       /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial:       2C183001904EBA2BF08CEFB8BFBF969E075DA647
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number:          029F
Signing time:             Fri 17 Apr 2026 08:25:05 +0000
Manifest this update:     Fri 17 Apr 2026 08:20:05 +0000
Manifest next update:     Sat 18 Apr 2026 10:14:05 +0000
Files and hashes:         1: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: aiXDyGkFd9n2FKcCa/yIG38HMnC6o7xZVuwg3VaVFpU=)
                          2: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 10:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:18:30:01:90:4e:ba:2b:f0:8c:ef:b8:bf:bf:96:9e:07:5d:a6:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
        Validity
            Not Before: Apr 17 08:20:05 2026 GMT
            Not After : Apr 18 10:14:05 2026 GMT
        Subject: CN=77D26C070839FE4C438F5E868D6E8A70D4FA7989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:7f:93:a8:0d:44:d9:39:21:10:8c:08:66:
                    39:f2:9a:bf:d0:f8:7f:82:a8:f8:48:62:6a:75:c0:
                    0c:03:a7:f3:7c:ce:88:35:51:d5:4a:cb:7c:10:60:
                    9e:ad:18:48:35:25:aa:d3:79:c8:66:44:af:52:b3:
                    53:a6:f3:19:e7:22:be:df:ec:36:0b:bc:a0:9e:99:
                    7a:60:5d:07:87:2e:a3:0c:11:df:28:49:12:b5:b4:
                    bc:90:eb:1d:84:e6:11:ea:3a:e8:8f:6a:f2:1b:04:
                    6a:7c:93:89:5b:e4:8e:24:05:b6:ba:f0:3a:36:79:
                    86:e7:23:fb:17:2d:24:e6:35:ac:da:9b:7d:2e:5f:
                    01:e1:6d:3b:28:2f:d4:14:4e:fd:3f:1c:b5:44:42:
                    6d:ff:16:16:99:2a:92:60:b3:bc:e4:dd:22:72:80:
                    1f:0f:92:47:8c:59:16:3b:1c:3f:01:c7:43:97:24:
                    45:bc:f9:81:bf:9b:74:94:b9:b9:a4:f6:18:c8:44:
                    ef:aa:da:61:35:38:fd:90:17:ff:61:1d:33:89:5a:
                    01:c5:96:f6:2f:60:b3:5a:68:c2:23:d4:56:a2:54:
                    a4:08:63:90:d4:a2:a5:85:f3:7f:0d:b5:cb:e2:29:
                    5f:f4:7d:00:fc:96:6a:10:6a:4c:54:c3:5e:1b:d0:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D2:6C:07:08:39:FE:4C:43:8F:5E:86:8D:6E:8A:70:D4:FA:79:89
            X509v3 Authority Key Identifier:
                keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:d8:ef:22:ec:6a:ed:6e:4c:0a:5f:e6:ba:6e:3e:a2:fd:
         d8:c1:b2:53:83:6b:38:3b:31:1c:a4:04:ca:b0:2b:2b:d1:31:
         45:64:3c:9b:16:ca:e6:b1:94:c5:20:0c:fc:96:a1:d9:c7:99:
         ad:6c:11:77:2e:36:bf:7c:51:97:29:a5:30:ed:d9:e6:5f:1c:
         bf:ab:e6:b4:18:29:45:7a:6b:ec:f5:03:f3:b0:b4:ec:37:87:
         9d:78:62:1b:f2:44:6f:5b:8e:c4:39:01:db:91:95:0a:3a:ed:
         21:01:a3:3e:8d:d6:d9:65:79:59:ec:5a:af:54:de:bf:da:36:
         f6:17:6c:98:5d:b7:b9:b2:84:f9:b9:56:1b:18:ae:30:20:e1:
         3f:c0:61:68:86:cd:d1:75:fb:fa:29:df:eb:9d:0e:08:19:95:
         6c:35:4d:6f:fb:7c:61:bb:9f:97:39:6c:3b:ae:f2:b8:76:54:
         f9:97:61:35:0b:59:22:28:9a:86:c8:3c:ea:aa:d7:59:33:6e:
         a2:7d:9b:67:55:ba:96:0a:ed:81:6f:37:f9:3f:0a:fd:a3:50:
         10:82:55:ac:f1:ce:35:48:00:2c:80:17:58:cd:28:b7:5f:37:
         59:02:73:50:f9:70:83:d8:68:ed:81:f7:55:b6:d2:8c:57:96:
         99:f9:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:37 2026 by rpki-client