Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File:                     87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier:          ocCKTKCAXaUd5f/D3YhA6A6faNgDQC44uocvhU/pSX4=
Subject key identifier:   51:B2:B2:DA:AC:C3:D5:24:98:66:53:8B:9D:67:4A:CE:F0:83:37:9B
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer:       /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial:       53F82B374B16FF064FDC011EE8A3D568EE239354
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number:          05BB
Signing time:             Fri 12 Jun 2026 19:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 18:55:35 +0000
Manifest next update:     Sat 13 Jun 2026 22:32:35 +0000
Files and hashes:         1: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: z4D5aosnzDICD0dGW7lyUDAImEEr7fYSB9sVUoQz0bM=)
                          2: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer (hash: G6gmGz0JGvm3XGbG9KIc4KxqDJjHz9X9sG7X4BSDSVE=)
                          3: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 22:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f8:2b:37:4b:16:ff:06:4f:dc:01:1e:e8:a3:d5:68:ee:23:93:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
        Validity
            Not Before: Jun 12 18:55:35 2026 GMT
            Not After : Jun 13 22:32:35 2026 GMT
        Subject: CN=51B2B2DAACC3D5249866538B9D674ACEF083379B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:e2:2e:d0:75:47:2b:9a:ec:ce:35:54:fd:
                    90:a2:44:0b:b7:28:11:c1:2a:a0:eb:18:31:27:b8:
                    2b:ec:3e:5a:8c:eb:88:75:5b:bb:e0:7b:dd:f3:ab:
                    fd:c3:cd:81:6d:97:15:82:b5:91:2b:4c:cd:7d:18:
                    92:7a:ca:a5:de:25:e9:14:cf:58:27:1e:4a:88:d6:
                    e6:fc:52:f9:bc:e2:cf:b6:39:25:eb:95:56:78:cc:
                    25:ee:7e:49:68:38:a5:bd:13:75:27:34:e0:96:20:
                    e2:eb:31:3f:8d:d7:91:9d:1c:b8:ff:e0:35:98:43:
                    5c:0e:e9:5e:a4:6a:e1:c2:db:9f:09:d0:2c:28:a2:
                    9d:f7:de:aa:3a:a9:9a:34:37:40:c5:e0:a6:b8:91:
                    d9:54:81:76:a0:fe:50:05:b1:3b:c3:a6:73:74:d8:
                    b6:11:7c:c9:58:7f:c9:b4:27:dc:c8:57:20:ec:e5:
                    27:8a:bd:07:4e:b3:85:c0:04:16:9d:4a:d5:4f:5c:
                    a6:54:ed:a4:ad:23:85:d3:e9:22:4a:5d:ba:12:8e:
                    21:3c:1d:3f:ad:b0:67:38:bc:b1:be:06:d7:25:2a:
                    fc:81:26:1b:44:cf:4a:dc:d8:e7:a4:18:7f:0f:1f:
                    9a:8c:a7:60:20:65:50:13:2c:fc:c1:74:3a:51:20:
                    7c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B2:B2:DA:AC:C3:D5:24:98:66:53:8B:9D:67:4A:CE:F0:83:37:9B
            X509v3 Authority Key Identifier:
                keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bf:1f:3d:19:e0:5c:0a:f5:0d:4f:46:94:a2:66:52:4e:02:
         2e:35:82:e0:7d:0a:77:e8:d8:e9:b0:5e:4a:ff:d4:ac:29:06:
         a8:4f:89:ce:d5:7a:ad:12:9f:ae:12:f0:73:6d:ca:63:60:3d:
         41:32:e8:c1:91:5a:bd:16:f0:b9:3c:dd:c7:72:0d:99:2a:f8:
         ce:76:5f:d2:86:df:c3:78:cf:5d:04:17:e7:82:b3:df:ce:df:
         80:19:38:12:3f:9e:83:04:20:ca:9f:f0:9c:23:ff:65:5f:d9:
         ff:a3:4f:65:83:73:f2:3e:12:95:1c:10:38:60:54:83:43:4f:
         15:5b:30:51:de:a1:e7:f4:62:4b:ec:89:71:54:71:90:08:b0:
         02:7f:93:4f:8d:e3:c1:a2:86:0c:32:f1:e3:e4:01:7c:de:ad:
         a4:e9:ef:2a:d9:7f:aa:5d:ff:95:1a:7b:12:91:58:74:1e:06:
         f6:f1:c6:c1:62:aa:cd:71:73:d3:61:23:7a:dd:75:db:21:bb:
         6d:8b:bf:33:29:47:1a:df:7f:2a:e9:cc:5c:8e:75:e1:83:23:
         48:6c:c8:03:d5:1b:86:9e:4e:4b:3c:8b:57:b5:d6:b4:97:02:
         a5:e2:af:44:5f:58:1f:40:44:89:93:34:e5:2b:b5:d7:3f:d4:
         8c:2e:f8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:37:38 2026 by rpki-client