Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File:                     87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier:          zsXQvWL+Ae9Utn4gTCpNgwFQ/lszHt8KvO1ndMagypY=
Subject key identifier:   6C:A8:F2:85:76:F7:2C:5C:A5:8F:DB:01:55:17:D1:B7:D2:6E:96:A0
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer:       /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial:       36CECB21DD5BC8DA5D1335799F31028DD2DA6A31
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number:          01A7
Signing time:             Wed 25 Mar 2026 05:59:29 +0000
Manifest this update:     Wed 25 Mar 2026 05:54:29 +0000
Manifest next update:     Thu 26 Mar 2026 09:35:29 +0000
Files and hashes:         1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=)
                          2: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: w6ZV68BRTcV25yrmLRKwfnz2BVv0XjxquHYb1Aan82c=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 09:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ce:cb:21:dd:5b:c8:da:5d:13:35:79:9f:31:02:8d:d2:da:6a:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
        Validity
            Not Before: Mar 25 05:54:29 2026 GMT
            Not After : Mar 26 09:35:29 2026 GMT
        Subject: CN=6CA8F28576F72C5CA58FDB015517D1B7D26E96A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:84:26:98:b0:e8:0f:78:de:47:54:d3:ed:
                    9a:64:89:98:4a:e8:8e:bc:62:be:3c:e2:db:ee:c5:
                    9d:91:af:66:23:ab:8f:0c:00:11:1b:3a:55:12:22:
                    b6:8d:e5:ce:ca:6f:f5:ae:9c:c2:4c:bf:2f:00:06:
                    45:aa:84:55:26:a2:7f:9a:e3:53:6d:d3:d4:e3:ba:
                    fb:0a:bb:05:76:c4:6e:30:6d:e6:e9:92:7a:36:56:
                    07:66:4d:d6:64:49:01:43:0e:ec:25:64:e3:94:e8:
                    81:03:36:3c:36:f5:e2:62:7c:8d:3b:18:8c:9e:00:
                    42:24:36:27:d5:62:be:83:d6:0a:22:e8:93:74:c5:
                    19:05:1a:b9:6b:b0:f2:0a:15:90:e3:86:2a:7c:f2:
                    94:d4:e1:9b:ca:08:e2:6a:5e:6f:ce:7d:9d:4a:4f:
                    2f:4f:61:b1:1a:57:54:88:0f:00:44:7c:be:27:ca:
                    c6:6d:e6:1a:25:3a:41:49:27:fc:bf:58:c9:4e:11:
                    0a:96:0a:98:2b:28:1b:b6:cc:98:21:8d:c2:26:41:
                    b3:b1:d2:73:fe:b1:e4:5c:23:97:05:94:ea:a6:03:
                    73:40:b8:e3:19:8c:65:20:b4:b6:ff:23:d8:4d:8e:
                    67:30:e3:91:9c:b7:db:4b:9a:07:90:52:0e:49:cf:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A8:F2:85:76:F7:2C:5C:A5:8F:DB:01:55:17:D1:B7:D2:6E:96:A0
            X509v3 Authority Key Identifier:
                keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a7:8f:1f:09:b3:fe:51:f7:1d:4e:31:d1:b7:07:7e:78:99:
         ed:21:2d:d5:e2:23:93:51:32:50:ee:09:4c:48:79:78:d1:ca:
         3c:58:22:93:96:ac:3c:bb:e7:ef:83:8b:98:07:1f:ea:50:09:
         0d:66:d5:aa:74:93:07:a6:77:2e:ff:c7:cc:b7:4f:1c:d9:1b:
         b6:4a:f4:95:9c:ad:9e:12:85:84:e1:72:8f:ca:eb:71:9b:bf:
         10:2f:85:ec:09:61:c7:f0:e9:87:ec:64:4e:c1:c1:65:9d:27:
         39:e3:e0:bb:28:ca:08:95:9e:fe:65:53:91:1c:59:87:24:f9:
         83:37:75:f5:5f:c8:58:38:b9:f6:50:91:d5:e7:07:e5:2e:42:
         2f:79:21:d3:4d:df:fb:3f:04:a9:52:02:7d:bb:13:02:b9:2e:
         01:29:33:7d:7e:a7:1b:91:d9:a1:6b:ae:cf:30:b2:07:40:07:
         c5:01:08:18:05:80:d7:04:9b:42:87:56:e5:ff:40:65:fb:6d:
         35:3b:65:2c:35:15:8f:fc:6d:ec:92:4e:fd:a8:a3:49:92:5b:
         cb:9b:9b:f1:70:03:bb:da:91:54:f9:85:96:73:9b:d2:24:cc:
         17:e6:a3:a6:bb:f0:6c:f8:50:54:b5:b5:50:20:52:0b:74:55:
         6b:d4:ea:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:48 2026 by rpki-client