Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
File:                     75788E15351A624A2A528D3D451C027A72F6A7A6.mft (raw, json)
Hash identifier:          xeEB2VE1vMPC+BxXPpMpujVqQwZ2JWYcC4IGHtAMMDk=
Subject key identifier:   AF:0E:83:B5:CF:E4:6B:15:3C:50:CE:13:5E:82:AF:3E:E4:92:5D:0F
Authority key identifier: 75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6
Certificate issuer:       /CN=A911DD4C0000/serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
Certificate serial:       09840618D3EA33B04896E1B9F5D5949619D3FD6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
Manifest number:          28
Signing time:             Tue 28 Jul 2026 17:06:29 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 17:26:29 +0000
Files and hashes:         1: 75788E15351A624A2A528D3D451C027A72F6A7A6.crl (hash: 5x3ZKWd/PsV0kcWdQYOYgnhkv9QnQmvlECJA6adurY4=)
                          2: 3230332e3139312e3134342e302f32312d3231203d3e2034313334.roa (hash: tGiD6c4OZZSCvdQK4ZpRZIKEL8iXBWQA8ghL+vZtpB4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:84:06:18:d3:ea:33:b0:48:96:e1:b9:f5:d5:94:96:19:d3:fd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD4C0000, serialNumber=75788E15351A624A2A528D3D451C027A72F6A7A6
        Validity
            Not Before: Jul 28 17:01:29 2026 GMT
            Not After : Jul 29 17:26:29 2026 GMT
        Subject: CN=AF0E83B5CFE46B153C50CE135E82AF3EE4925D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:89:78:80:7b:b9:ce:5c:8e:17:3e:57:50:85:
                    03:25:20:72:64:f6:a2:6e:72:69:44:8b:9d:ff:5f:
                    e3:1e:70:90:35:fb:68:76:33:1d:cf:e7:56:d9:83:
                    2c:90:d3:40:4f:86:a7:cc:0f:be:2c:8d:e3:75:66:
                    18:50:a0:d5:0c:0c:dd:cb:98:ec:a9:df:fa:16:cc:
                    7d:88:e0:b4:78:47:b3:c8:77:09:ec:ca:ef:9e:c7:
                    81:50:37:1c:81:4b:e6:1b:75:44:a2:34:3e:45:31:
                    04:b4:38:f3:25:2d:6a:2f:a5:4d:fa:9d:03:c9:52:
                    3d:de:f5:dd:1a:17:81:35:a1:05:2d:27:a0:58:02:
                    65:3f:a1:2f:84:d9:e6:a8:02:f9:83:59:73:c8:ca:
                    1f:64:c8:fa:a7:f5:aa:c4:56:93:db:5d:a8:53:eb:
                    5a:c9:71:17:f8:2e:82:b3:b8:c6:29:ad:33:11:10:
                    dd:c2:06:49:e2:43:18:ed:a7:d3:87:e6:f9:16:03:
                    46:08:1c:ea:42:65:01:d3:b5:f7:91:32:3e:21:fe:
                    85:73:87:c3:47:94:95:bf:e7:a6:52:35:9e:47:1f:
                    f2:d7:23:29:e1:9f:bf:cb:ff:b8:d7:05:6a:f8:83:
                    00:cc:e3:ad:6f:04:1b:76:48:f6:1a:e6:10:48:91:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0E:83:B5:CF:E4:6B:15:3C:50:CE:13:5E:82:AF:3E:E4:92:5D:0F
            X509v3 Authority Key Identifier:
                keyid:75:78:8E:15:35:1A:62:4A:2A:52:8D:3D:45:1C:02:7A:72:F6:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dXiOFTUaYkoqUo09RRwCenL2p6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119132680957460509/0/75788E15351A624A2A528D3D451C027A72F6A7A6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:ae:2d:50:ed:78:a3:2d:60:4d:69:ae:8a:bc:04:eb:06:
         fd:d5:f4:8b:94:5e:e4:e5:cd:ab:4e:77:19:5f:d7:5a:f7:87:
         5d:74:0f:84:cd:0a:29:b0:6d:2c:d9:16:11:d3:f7:32:85:3c:
         e9:44:ee:a9:a9:49:59:65:14:5c:f0:c4:b8:e2:43:de:6a:fd:
         b6:76:5d:be:fc:16:8d:e3:70:9c:e4:e2:53:cb:70:29:2a:70:
         2e:0b:0b:c9:4f:51:b3:e6:07:f3:d4:e7:66:12:f1:cf:3a:9d:
         38:9e:b8:36:5f:c4:21:0b:36:3b:0e:7c:d7:c1:0c:6d:a5:09:
         61:df:b6:ed:e9:43:bc:92:47:36:5e:31:e5:5c:49:0c:64:95:
         ad:ba:67:66:47:32:e0:ec:1a:5f:9d:7a:ac:40:fe:47:cc:57:
         8b:e9:ba:7f:30:e6:e5:ae:1a:b1:bb:cd:cd:ac:59:70:8a:64:
         3a:54:81:f9:bd:28:9f:07:87:31:fc:38:d8:74:43:54:4f:38:
         9f:4a:c3:3b:39:f0:1d:40:a3:37:80:09:7a:34:7f:ca:b8:55:
         0a:94:7d:8d:3e:e6:80:db:44:1d:0f:24:ab:bf:c6:61:92:1d:
         f8:42:93:0d:ab:33:5a:06:10:7a:ab:fe:2b:da:d9:61:0e:10:
         16:ad:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:25:55 2026 by rpki-client