Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
File:                     AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft (raw, json)
Hash identifier:          eC/TJpJ2Ka6W+aERlAnRj7pf+ushmGYjS7O7oVPqOpM=
Subject key identifier:   7B:55:F9:4E:19:10:1D:FE:D8:87:C3:1C:E0:19:0E:A9:3C:33:5A:38
Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3
Certificate issuer:       /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
Certificate serial:       1A8062024BDD6EB4446970335135B5E59A03DDF7
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
Manifest number:          A0
Signing time:             Mon 12 Oct 2026 12:01:55 +0000
Manifest this update:     Mon 12 Oct 2026 11:56:55 +0000
Manifest next update:     Thu 15 Oct 2026 18:11:55 +0000
Files and hashes:         1: AS0.roa (hash: Tnh8WMSLJSGCaAxb/VZeyXb0gUX1GKQVaIvE4qh0adg=)
                          2: AS4808.roa (hash: TPs4K1IwuFBCZlPJPwsrxBKlLQX+ki67IEXGfZAOXrc=)
                          3: AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl (hash: 7L4ThGvA25/YcmqVuhr0ak14OaoqBzNeq6xYDy4JGyo=)
                          4: AS4847.roa (hash: 43JbO/RY/CXlAZ6gtxSZl4suSooMAGX4ZhYCBk21is8=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 01:08:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:80:62:02:4b:dd:6e:b4:44:69:70:33:51:35:b5:e5:9a:03:dd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3
        Validity
            Not Before: Oct 12 11:56:55 2026 GMT
            Not After : Oct 15 18:11:55 2026 GMT
        Subject: CN=7B55F94E19101DFED887C31CE0190EA93C335A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:1f:1e:ae:29:95:0d:9b:51:fe:d8:61:e2:
                    96:52:af:8d:7d:58:74:59:62:93:47:af:84:ba:1d:
                    89:7f:b4:f9:94:ab:e0:84:1f:e4:b0:b0:b9:cd:9b:
                    b0:b8:a8:b7:09:9f:c9:c1:7f:46:9e:20:1f:53:65:
                    e9:5c:a8:20:e4:f5:34:6f:11:36:30:b6:06:fb:5b:
                    ee:07:8a:26:ee:08:ea:10:9d:d6:f8:17:48:82:87:
                    89:5e:39:f4:4a:4b:45:42:47:da:b3:66:d4:ee:4e:
                    4b:57:10:44:5c:bd:ae:35:3c:06:08:77:32:f5:bd:
                    ad:c0:d6:25:56:d3:cf:b8:80:1a:78:84:b6:e7:16:
                    51:cc:d5:dc:b3:82:55:53:da:6d:0d:d8:c4:3a:48:
                    aa:cf:15:99:cb:e7:bf:82:3b:da:da:ce:ec:0c:4f:
                    01:60:42:33:3c:12:3d:d8:3b:8e:37:1a:2d:58:0a:
                    4f:0b:e3:95:66:77:38:72:bb:e8:e4:b2:f7:0b:41:
                    08:11:df:b5:98:e7:8a:4e:1e:a4:09:ee:2b:2b:87:
                    6c:56:49:eb:cd:a9:2a:78:32:d5:5a:7d:e3:5f:30:
                    19:ff:1f:11:72:bb:a2:0e:7f:20:57:62:73:1b:47:
                    1f:16:cc:d0:34:ae:75:17:2a:3d:02:91:f7:32:82:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:55:F9:4E:19:10:1D:FE:D8:87:C3:1C:E0:19:0E:A9:3C:33:5A:38
            X509v3 Authority Key Identifier:
                keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1a:1e:3d:93:e0:5e:74:cf:e7:91:c4:68:08:57:6b:14:db:
         be:87:65:00:0b:7f:11:14:fc:84:af:b5:ab:ca:6d:64:68:cf:
         1e:ce:8b:e2:8a:06:d1:ff:f3:40:0b:bf:8e:b5:2d:67:02:62:
         d8:d4:d4:c1:50:bc:d0:6c:1f:8b:e7:26:63:8f:ed:d4:90:60:
         1d:29:62:06:70:3b:0a:7b:fb:73:d4:bd:70:e1:58:71:42:77:
         d9:48:ea:40:6e:a7:a7:a9:67:60:01:21:97:06:e7:b0:a4:e4:
         01:68:e4:98:86:42:b8:85:d4:82:42:8c:b4:22:ef:85:00:54:
         3c:ba:76:93:62:5f:9e:f4:74:b8:70:24:70:cb:f2:44:6e:66:
         8c:52:2f:35:fc:1d:29:77:a9:86:3c:3f:1b:46:f7:04:84:78:
         4e:22:39:69:10:d1:8a:04:30:26:14:8d:ed:76:fd:a0:fa:41:
         4d:1c:99:9b:87:7a:4e:9a:94:4a:d9:f8:0d:7d:5a:29:be:1f:
         33:ef:a1:55:d1:61:35:b1:fa:ff:a6:78:f9:c8:f2:55:bb:88:
         24:c2:6a:f6:f0:00:8a:64:05:8c:ad:1e:c4:70:53:de:d1:69:
         97:bf:4f:19:af:b7:bb:97:b3:a5:9d:bb:bd:81:9e:70:2c:ce:
         08:90:ca:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:37:48 2026 by rpki-client