Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
File:                     B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft (raw, json)
Hash identifier:          GApnYBtfzW4q4Rk9PdozxF3J73wRlCo0ChTdCiMAiQg=
Subject key identifier:   91:36:9A:A2:FD:C1:E8:D3:AB:AA:7C:C7:96:DA:BE:D5:0E:A5:50:F3
Authority key identifier: B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1
Certificate issuer:       /CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1
Certificate serial:       3EB7E973D0E8AD99EB34CC4C46851176688F342F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
Manifest number:          8A
Signing time:             Sun 11 Oct 2026 23:51:13 +0000
Manifest this update:     Sun 11 Oct 2026 23:46:13 +0000
Manifest next update:     Thu 15 Oct 2026 00:39:13 +0000
Files and hashes:         1: B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl (hash: Ko9HugjXQBEwnerwyHlBxq4oN+EOZn0bzjKcmlyTUVU=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 00:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b7:e9:73:d0:e8:ad:99:eb:34:cc:4c:46:85:11:76:68:8f:34:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1
        Validity
            Not Before: Oct 11 23:46:13 2026 GMT
            Not After : Oct 15 00:39:13 2026 GMT
        Subject: CN=91369AA2FDC1E8D3ABAA7CC796DABED50EA550F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:2c:f2:90:84:3b:c7:47:d3:af:00:b4:ac:
                    b4:72:b4:32:a4:a6:9b:11:ac:86:41:28:3d:bf:ec:
                    1b:f2:fa:74:14:ae:e7:77:32:be:b8:fa:cf:94:f2:
                    a2:8d:6a:fa:dc:c1:8d:a5:41:4c:5f:b8:b7:88:09:
                    f2:42:4c:e6:86:70:38:ea:51:78:0b:42:9a:28:83:
                    6b:14:08:bf:a0:2d:89:22:9c:6d:50:7b:b8:c3:2a:
                    28:0a:15:5d:c6:ac:15:e4:ca:04:83:2b:8a:f4:1a:
                    d0:f3:8d:33:db:fd:3b:b0:e2:15:1a:cd:22:c6:fd:
                    63:ff:88:c9:11:61:ac:04:98:d3:fe:d3:bf:16:e1:
                    00:35:5b:03:ad:d2:f3:9a:94:30:6a:f8:ed:4d:c6:
                    e2:55:bf:53:13:0d:14:bc:0e:a0:9c:a2:47:eb:c3:
                    c2:60:d2:ac:f2:f6:f0:43:20:49:04:cf:7d:e3:ff:
                    2c:08:d8:50:e0:12:1f:e0:ad:94:d6:75:4d:25:12:
                    ea:af:b0:c7:08:d7:70:6a:a4:d9:66:17:86:3a:50:
                    fa:60:50:6e:d0:56:0a:19:e4:01:0d:00:73:61:3e:
                    7a:ba:47:e6:cb:81:ae:fe:e3:7f:b8:02:74:61:63:
                    b3:ae:14:b9:01:f8:6a:13:06:d0:85:68:e5:09:1f:
                    52:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:36:9A:A2:FD:C1:E8:D3:AB:AA:7C:C7:96:DA:BE:D5:0E:A5:50:F3
            X509v3 Authority Key Identifier:
                keyid:B1:AF:69:97:E9:C4:2E:A0:86:D8:EA:A6:B7:1F:F5:67:AF:25:B0:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113660812506955797/0/B1AF6997E9C42EA086D8EAA6B71FF567AF25B0E1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:93:8b:fa:cf:f0:c8:fc:6d:a6:ae:3d:f1:ae:33:37:50:55:
         da:97:44:13:24:c1:f0:97:b2:a0:9a:da:cb:4f:00:b3:81:d3:
         b9:c1:0a:72:16:26:09:a7:0e:31:97:ce:14:be:9c:86:18:60:
         6b:d9:b7:0e:ed:64:76:3d:a3:a4:63:ef:36:18:bd:9a:b3:88:
         04:59:e2:2d:69:2b:81:08:6c:66:e2:44:40:e2:70:86:43:fb:
         d5:41:1e:f4:97:32:61:d4:ed:ff:24:f0:95:d2:bb:91:0c:4f:
         a6:57:7d:17:56:59:9e:33:fd:55:33:b3:e5:16:c5:1c:7d:d4:
         5e:4a:c3:5f:dc:21:d6:f1:8c:d8:dc:20:80:73:3d:30:11:79:
         fe:b8:8e:2f:38:51:d0:09:c6:4c:5e:d1:34:7d:33:66:80:d0:
         ac:4c:53:08:ef:2a:28:12:8d:db:b6:40:27:c8:fc:d8:56:9d:
         ab:d9:73:50:65:60:3f:68:b9:cc:e1:81:c1:e2:5d:55:01:68:
         1d:62:29:a1:83:b4:db:d5:22:d8:25:b5:b1:95:33:e9:d5:09:
         ba:42:23:6c:2b:53:5d:b8:5a:67:be:60:df:91:00:ea:c7:0e:
         22:df:eb:ea:12:7c:a4:4d:15:86:db:80:67:32:65:02:88:30:
         9e:21:03:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:20:52 2026 by rpki-client