Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft
File:                     BD1D41B9032FF59C45556448C8E4EC91E591F459.mft (raw, json)
Hash identifier:          bowoX0Vq8s5b0LFznl+QJL5SlE3+1Vc4fBjqbXjsQGw=
Subject key identifier:   BA:A6:FB:E5:F0:BE:40:05:FD:8C:32:EC:88:A6:DE:94:82:C3:4E:19
Authority key identifier: BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59
Certificate issuer:       /CN=A91A58AA0001/serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459
Certificate serial:       60EB3F6626A12D4DE0AD5812B54AEF48C6E77F70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft
Manifest number:          4A
Signing time:             Sat 13 Jun 2026 05:14:34 +0000
Manifest this update:     Sat 13 Jun 2026 05:09:34 +0000
Manifest next update:     Sun 14 Jun 2026 06:22:34 +0000
Files and hashes:         1: BD1D41B9032FF59C45556448C8E4EC91E591F459.crl (hash: F5pgPkhK9G33tIHUyhF1b+sJULXe6uY3TyZjIivtVpw=)
                          2: AS7497.roa (hash: j57rZSZiJ0J8Rj4UciwSQrvA4GxhmFZ+b+nBd2VG6aA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 06:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:eb:3f:66:26:a1:2d:4d:e0:ad:58:12:b5:4a:ef:48:c6:e7:7f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA0001, serialNumber=BD1D41B9032FF59C45556448C8E4EC91E591F459
        Validity
            Not Before: Jun 13 05:09:34 2026 GMT
            Not After : Jun 14 06:22:34 2026 GMT
        Subject: CN=BAA6FBE5F0BE4005FD8C32EC88A6DE9482C34E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:74:0a:78:7e:24:56:7c:06:d0:70:0d:a1:
                    54:b3:b2:86:81:7a:36:8b:14:04:34:4b:8e:1f:65:
                    ea:5a:01:fd:d3:ac:ea:54:c3:09:be:ff:24:e2:fe:
                    36:a9:c8:16:77:f0:ff:bc:16:f6:e7:99:a4:ab:00:
                    03:e1:0b:00:df:0b:a3:11:24:be:72:da:54:b2:09:
                    b8:a8:45:8e:4e:98:e3:05:04:57:5e:6b:03:3b:15:
                    bb:53:df:5b:30:14:ae:79:b9:95:e1:4b:73:ed:04:
                    52:3a:f2:d4:26:6a:7e:9a:ab:e4:cf:17:27:70:4e:
                    99:8d:95:1a:9d:9e:ce:3c:d6:b9:5a:ff:fd:24:84:
                    3d:15:ae:ce:8b:9e:da:b4:0a:f8:77:25:dc:94:ce:
                    e9:cc:9d:16:fa:43:9b:4f:3a:41:91:92:d3:ac:fe:
                    83:f2:6b:4e:15:16:b3:44:fa:87:60:89:e4:5c:83:
                    00:9a:72:29:bc:09:80:a7:a8:08:7a:05:e2:5d:76:
                    61:32:94:09:e7:10:ce:f8:1e:c1:74:34:e3:46:b6:
                    e5:15:4c:95:49:4b:7d:3e:bb:75:cd:c4:a8:eb:4f:
                    19:ca:03:c3:0b:8f:20:20:bc:cc:9b:c9:cd:18:66:
                    3c:2c:fc:7b:91:3f:cf:fc:f5:7c:24:17:38:ca:11:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A6:FB:E5:F0:BE:40:05:FD:8C:32:EC:88:A6:DE:94:82:C3:4E:19
            X509v3 Authority Key Identifier:
                keyid:BD:1D:41:B9:03:2F:F5:9C:45:55:64:48:C8:E4:EC:91:E5:91:F4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vR1BuQMv9ZxFVWRIyOTskeWR9Fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/0/BD1D41B9032FF59C45556448C8E4EC91E591F459.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:bb:56:c2:32:22:09:05:aa:dc:2d:f7:c2:23:37:9d:e8:e4:
         d2:25:81:ac:20:ed:3c:4c:8f:78:8c:bb:75:35:73:05:a5:ba:
         7e:86:6f:c0:1e:d9:eb:a4:34:4a:c5:a6:cc:cb:b4:c2:1f:d3:
         4a:e1:32:f3:c0:a5:e5:5c:63:29:23:aa:18:91:b2:bc:ab:9a:
         7b:12:f6:98:99:b0:28:31:58:d2:6f:22:f7:a8:3e:e3:78:fb:
         9e:63:b3:ad:0e:43:a0:33:74:60:dd:cc:65:f9:a2:84:ac:dd:
         5b:3b:6a:a4:c4:0f:ac:f2:ab:d2:ba:56:f0:f8:37:27:ff:8e:
         f7:20:2a:f2:24:d0:f6:cf:f6:3a:2e:96:28:1a:f3:93:04:5f:
         56:4d:fd:36:56:79:28:f1:b7:13:96:65:ea:fb:0f:68:e7:46:
         bb:d0:c4:6e:5c:58:7b:61:67:3e:ed:3d:22:df:35:f9:a3:de:
         cc:8a:62:1e:75:89:a9:3c:0b:e1:ee:49:7b:c7:e3:d8:44:09:
         f8:8b:df:f3:41:cc:3d:49:7e:62:5a:78:02:da:91:a9:fe:36:
         ee:3c:44:21:bf:ff:7b:0f:e0:ea:4b:5d:14:10:a0:a8:ab:8a:
         4a:bb:35:f3:5a:f2:86:53:56:4a:b4:86:51:f9:2a:c4:d4:d4:
         34:29:71:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:37 2026 by rpki-client