Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
File:                     _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json)
Hash identifier:          /r9l+4KCJw7hmfRdVT5caggyhcn2w9d6F/D2YPDW0gw=
Subject key identifier:   6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
Certificate issuer:       /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Certificate serial:       2133
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
Manifest number:          212D
Signing time:             Wed 13 Aug 2025 06:02:35 +0000
Manifest this update:     Wed 13 Aug 2025 06:02:35 +0000
Manifest next update:     Wed 13 Aug 2025 12:02:35 +0000
Files and hashes:         1: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: vHlEOohP53w2Q6MTLS/ydO5PZPP5cDqS3qdr2kXIXC8=)
                          2: uKdWCaEnVONu4fZr7N9srVNLqMU.roa (hash: bLAMgiyp/+z7wYa7NqzIhJJBnnzmKA4F9e4V4dRy4g4=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 12:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8499 (0x2133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
        Validity
            Not Before: Aug 13 06:02:35 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00:
                    93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5:
                    e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e:
                    c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af:
                    e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca:
                    65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb:
                    77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38:
                    b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11:
                    6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63:
                    a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37:
                    c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba:
                    3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf:
                    60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7:
                    f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e:
                    99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5:
                    ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1:
                    37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
            X509v3 Authority Key Identifier:
                keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:dd:9c:ff:6d:a2:d8:62:1c:81:5e:67:a6:83:a3:bc:9b:
         fb:f8:72:ec:31:e7:32:ba:2b:1b:ae:21:48:d7:fd:fa:d9:21:
         cc:a1:14:81:27:94:2f:b5:1a:af:08:c5:ed:49:81:83:76:77:
         84:ae:4b:ff:77:22:34:e4:e2:d8:b2:b0:de:90:55:97:c6:21:
         4c:12:50:6f:6c:db:5f:c2:79:c2:d7:2f:ab:9d:e9:3c:83:0f:
         31:61:36:15:2c:ac:5c:23:43:5c:dc:fb:2f:de:e5:d5:35:d9:
         ed:d1:1e:7c:ea:78:5d:1d:a0:d4:8e:04:3d:a2:7f:84:94:7e:
         35:66:ab:11:ee:86:bc:95:e2:c3:a0:e5:e2:94:9f:02:cd:bb:
         f7:1f:43:0c:d4:05:22:4b:b7:a6:09:9f:50:36:26:71:2a:79:
         f1:c0:43:28:3d:67:c4:13:93:16:4d:b9:d6:f5:57:ea:87:f8:
         a3:c5:94:9b:76:be:e2:61:0e:e3:7a:77:1e:ed:87:fb:e7:71:
         bc:1f:b3:e6:a1:51:d7:f8:4a:32:dc:8a:4a:f5:a2:cd:c6:1b:
         41:3b:e5:ea:09:97:b1:64:ca:30:13:3c:2c:f0:1d:07:47:ca:
         86:4e:f8:c3:ef:3d:9f:de:a3:fb:67:b9:3e:b9:cb:6e:8a:f3:
         bd:cc:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:58:33 2025 by rpki-client