This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File:                     87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier:          t3CDmuPN35NaRpcN1sukxHC6F37k0OGw5SpxspaUlxs=
Subject key identifier:   F2:12:39:E3:46:45:6B:3E:D4:DA:0B:1A:03:29:63:D8:0B:A3:0B:BE
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer:       /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial:       75904CE7E94540E69371F980C3F4CD8FF2EF278E
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number:          F4
Signing time:             Sat 24 Jan 2026 17:40:57 +0000
Manifest this update:     Sat 24 Jan 2026 17:35:57 +0000
Manifest next update:     Sun 25 Jan 2026 20:08:57 +0000
Files and hashes:         1: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: eCKEDFnBO8f3Zr9gW0JYdiL8Z0R2+1KF+LRsoNZSgGM=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Jan 2026 20:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:90:4c:e7:e9:45:40:e6:93:71:f9:80:c3:f4:cd:8f:f2:ef:27:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
        Validity
            Not Before: Jan 24 17:35:57 2026 GMT
            Not After : Jan 25 20:08:57 2026 GMT
        Subject: CN=F21239E346456B3ED4DA0B1A032963D80BA30BBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:a5:55:71:13:1e:d0:30:98:6a:96:f8:36:
                    e7:ad:ad:c5:67:e3:98:d3:5d:1d:ec:62:c2:96:7b:
                    61:74:cc:ea:ed:52:b4:f2:39:2e:52:3c:96:2e:8f:
                    b0:71:fe:86:27:c4:1c:d0:8e:d9:cf:89:f6:1a:9f:
                    f5:73:96:6f:65:2d:28:62:e2:6d:df:21:e2:97:7f:
                    94:1b:ba:61:ce:07:2c:23:46:dc:da:1e:f9:d0:8d:
                    dc:2a:59:b1:68:33:c2:2a:ab:a4:6a:30:94:54:5d:
                    24:0e:ad:39:bf:e9:22:19:e0:46:11:10:37:1a:7a:
                    25:e7:f3:c5:d0:52:98:83:9c:d7:76:92:74:df:15:
                    0f:1a:57:36:36:4e:b5:f7:da:ab:1a:0d:fe:43:74:
                    fd:ca:12:52:4f:f4:6d:b5:84:98:d7:da:69:6c:1e:
                    38:cc:f8:2e:50:1c:b4:f4:e9:f1:a7:81:f4:cf:14:
                    1b:ba:ad:10:a6:f0:23:5f:12:1b:23:50:9c:a7:5c:
                    bb:46:5c:e5:9a:10:91:4d:b8:4b:4c:ac:9c:6e:49:
                    07:5e:5b:d4:c0:40:78:bd:65:36:0d:58:b9:8a:38:
                    8a:6e:90:20:97:35:82:fd:01:c9:94:4a:26:5c:79:
                    7c:d5:08:d8:ac:f1:2a:e0:ed:76:1f:6d:17:34:0d:
                    73:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:12:39:E3:46:45:6B:3E:D4:DA:0B:1A:03:29:63:D8:0B:A3:0B:BE
            X509v3 Authority Key Identifier:
                keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:33:53:67:66:d3:9e:d5:c4:5b:d0:cc:c0:96:00:8c:94:e8:
         9a:73:50:fd:27:de:fc:74:70:f7:0b:f4:a9:ba:5d:a9:01:25:
         a6:5f:4e:cc:d5:62:d2:8a:01:be:5e:69:6e:78:7a:8b:a9:9d:
         aa:ae:07:28:fb:21:32:5f:8a:d3:1e:7f:39:3d:d5:65:01:6b:
         ca:e5:87:ea:50:90:97:be:40:80:db:61:e5:05:d7:cd:98:47:
         2a:13:68:50:e0:a9:56:97:9b:25:21:37:ce:4b:4c:f5:76:e1:
         62:71:0c:c8:80:97:d1:8c:42:1c:30:ad:0a:81:b3:2e:ce:09:
         a1:dc:eb:0a:ce:01:23:41:10:09:ee:72:89:f0:19:1f:12:4e:
         05:21:85:8d:0b:0b:5d:42:a6:9a:fa:94:ea:4e:bf:dc:04:95:
         78:1f:39:0b:1d:7c:4f:40:75:f5:97:c2:d6:4e:1f:fa:b0:a0:
         76:62:9b:81:98:d2:27:76:a6:14:6b:6e:97:24:4c:12:9c:d2:
         fc:5b:89:38:a9:89:fe:d5:c8:c1:35:27:ef:98:9e:52:00:1a:
         8e:a8:35:f4:8e:28:64:f0:dd:52:b2:e7:83:d4:81:af:f6:9e:
         84:f1:f6:60:2e:b7:63:ae:63:73:65:f7:0c:e1:45:da:4c:42:
         81:f2:c2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:33:14 2026 by rpki-client