Manifest
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
File: _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json)
Hash identifier: zdrssXL/5f5UXCNCCOfJ13yw4R032Ign/931EIIxx8A=
Subject key identifier: 6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
Certificate issuer: /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Certificate serial: 250F
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
Manifest number: 2508
Signing time: Sun 01 Mar 2026 21:30:52 +0000
Manifest this update: Sun 01 Mar 2026 21:30:52 +0000
Manifest next update: Mon 02 Mar 2026 03:30:52 +0000
Files and hashes: 1: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: iYHTAwy7IBgKinNqRKF/QYNFLrYeMF1Fns6wWsLBCp0=)
2: qdfiI2Y17pKUSM8_poz1SVLUglM.roa (hash: Qt1HJ94TCNTNrlkYIPGsR9ES/pRyt3LS1fuaFkyaClY=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9487 (0x250f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Validity
Not Before: Mar 1 21:30:52 2026 GMT
Not After : Oct 23 03:01:03 2026 GMT
Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00:
93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5:
e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e:
c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af:
e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca:
65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb:
77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38:
b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11:
6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63:
a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37:
c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba:
3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf:
60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7:
f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e:
99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5:
ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1:
37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a:
30:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
X509v3 Authority Key Identifier:
keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c3:95:56:2d:dc:09:bb:da:9b:a4:aa:3d:85:2e:66:8c:e7:
b0:a4:c6:c0:91:7e:7b:d7:eb:fd:c5:98:ad:44:91:8b:f1:b1:
10:e4:7e:72:99:67:62:a4:2c:57:8b:b4:45:79:a0:fe:cf:d5:
e2:7f:99:0b:63:95:68:5a:a7:3f:48:90:4d:b8:e1:fd:06:35:
82:f9:d7:8a:bb:43:d6:80:23:e2:06:f3:4f:c9:75:0a:0a:3f:
f2:d3:1e:fe:72:f3:5e:e6:92:9a:4c:eb:5d:ce:5a:a6:88:a0:
b4:9b:5a:75:82:30:f7:df:0a:b9:af:ff:d1:ce:88:e1:5b:f6:
cc:3f:6f:89:1f:56:d0:65:ec:0f:b3:59:94:5d:fd:b9:2c:a4:
d0:a1:7d:24:59:94:11:1c:3b:0e:30:54:af:eb:47:05:3d:58:
b7:46:27:dd:71:98:9c:f9:1e:3c:b2:c0:47:8c:2a:b0:e4:2f:
3b:63:ac:c4:b7:63:6c:c8:2f:10:2d:a8:62:0d:ce:98:2b:47:
60:ec:34:ce:2e:33:12:8e:29:c2:51:51:8f:12:99:45:72:25:
06:b2:6b:27:60:04:70:f0:0f:b1:1d:26:dc:20:a7:b8:6c:60:
d6:6e:37:97:43:d9:f7:cd:6e:1b:9d:ce:4f:a8:96:38:fa:7a:
06:1f:0b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:48:56 2026 by rpki-client