Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
File:                     78A515C1A913D89B4134674C867CEE6B49AE149E.mft (raw, json)
Hash identifier:          IJC1vtUl0ZSaMqw+UHThQeORJZAJuunrt/4qGDfPrvc=
Subject key identifier:   BF:65:E5:35:40:18:05:2C:9E:B0:2D:4C:C8:F9:F5:A0:ED:D5:67:4F
Authority key identifier: 78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E
Certificate issuer:       /CN=A918C4250000/serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
Certificate serial:       10EFBC5D198A267F119A0106524A86692F62732D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
Manifest number:          1F
Signing time:             Sun 05 Apr 2026 12:23:56 +0000
Manifest this update:     Sun 05 Apr 2026 12:18:56 +0000
Manifest next update:     Mon 06 Apr 2026 16:09:56 +0000
Files and hashes:         1: 3130332e3234352e32332e302f32342d3234203d3e2034383132.roa (hash: dXrhnb27qG4k8MBvWI1Yo0GAVS5BxdWPFYcv+YuYno8=)
                          2: 78A515C1A913D89B4134674C867CEE6B49AE149E.crl (hash: LRiJHj3A97bAdOcFlPrHB9dcaH7qQAAnbPmpwBoO3qc=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Apr 2026 16:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ef:bc:5d:19:8a:26:7f:11:9a:01:06:52:4a:86:69:2f:62:73:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C4250000, serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
        Validity
            Not Before: Apr  5 12:18:56 2026 GMT
            Not After : Apr  6 16:09:56 2026 GMT
        Subject: CN=BF65E5354018052C9EB02D4CC8F9F5A0EDD5674F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b0:a1:42:b1:f2:dd:83:86:73:63:1c:f4:c7:
                    a7:64:15:cc:40:20:48:2d:f3:6d:3f:c3:c7:93:2e:
                    b4:da:1a:5c:e5:9a:d1:f9:b4:c6:3b:38:1a:a8:2f:
                    83:75:23:f5:66:fc:bc:d4:08:8e:13:d2:f6:fa:2c:
                    d9:43:94:0f:d3:29:31:e3:b9:07:e5:b3:da:f1:c1:
                    7a:b6:16:8e:86:df:f0:c9:fc:27:63:34:80:00:bd:
                    c9:f0:60:cf:39:06:cc:c6:e7:d6:e5:3a:f4:c4:e2:
                    c3:a2:8a:a7:bd:2e:7d:a0:92:1c:6f:16:6b:f3:cc:
                    1d:d1:f4:f5:a8:4e:d4:12:e1:1b:3b:7c:40:1f:ae:
                    e0:a9:99:76:b2:31:7c:8a:99:56:9c:a7:5e:91:a5:
                    90:d3:b4:86:90:da:d2:7e:63:10:7d:3f:a0:ac:75:
                    9b:32:ad:81:30:c0:6b:1e:82:6e:f1:46:c8:b1:a9:
                    86:bd:01:64:cd:da:b7:d5:b2:76:57:ae:88:00:62:
                    f9:c7:d4:85:e4:6c:2b:2a:4a:1a:97:1d:0e:0b:8e:
                    bd:a7:b7:48:f9:26:b7:e4:96:01:02:ef:3f:11:70:
                    0f:92:31:dc:d4:1c:5a:11:1d:1b:ef:2b:21:27:0e:
                    c2:b0:27:81:4d:53:f2:ab:78:d3:e6:a9:a1:57:b8:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:65:E5:35:40:18:05:2C:9E:B0:2D:4C:C8:F9:F5:A0:ED:D5:67:4F
            X509v3 Authority Key Identifier:
                keyid:78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5e:8e:23:f4:de:6b:ea:e1:29:78:6d:06:8c:86:ed:3d:a8:
         f2:02:09:82:56:30:d6:d4:c3:d1:fd:c5:2b:c6:5f:bf:a7:09:
         86:d7:dd:c3:86:c4:e6:63:f8:ab:c3:04:68:07:28:4b:73:34:
         74:e1:fe:fd:7d:d0:70:a6:5c:d8:1d:49:25:95:b8:7a:88:20:
         0a:a9:f7:07:12:42:43:4e:f1:20:84:18:c9:4e:fc:67:a8:39:
         8c:38:4f:87:a3:95:96:53:80:7e:56:74:bd:d9:62:55:b1:ba:
         e6:14:20:fa:a4:1b:4d:00:54:d6:b7:16:45:d0:3e:5c:18:b7:
         1a:e8:1b:e9:f4:c5:09:a1:5e:4e:ab:53:ec:01:77:d3:8a:fb:
         5b:a6:06:e0:22:5a:21:78:39:40:24:bb:9a:27:3d:c9:e4:45:
         50:22:0b:c6:14:0c:07:c4:ec:ed:94:cf:95:af:9d:cd:bb:82:
         a2:05:3e:d0:0b:bb:17:b3:2d:62:41:a0:73:ed:c8:fe:be:57:
         af:5d:82:cc:dd:b5:90:34:65:9e:01:b9:1f:c2:d1:9d:60:ca:
         c4:c0:77:3b:1b:0f:3e:d4:03:6e:2c:89:d0:fe:c3:c0:a3:86:
         50:79:55:b1:59:c7:d5:16:ce:61:29:5b:36:a3:f8:94:42:86:
         57:2f:79:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEO+8XRmKJn8RmgEGUkqGaS9icy0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOEM0MjUwMDAwMTEwLwYDVQQFEyg3OEE1MTVDMUE5
MTNEODlCNDEzNDY3NEM4NjdDRUU2QjQ5QUUxNDlFMB4XDTI2MDQwNTEyMTg1NloX
DTI2MDQwNjE2MDk1NlowMzExMC8GA1UEAxMoQkY2NUU1MzU0MDE4MDUyQzlFQjAy
RDRDQzhGOUY1QTBFREQ1Njc0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOywoUKx8t2DhnNjHPTHp2QVzEAgSC3zbT/Dx5MutNoaXOWa0fm0xjs4Gqgv
g3Uj9Wb8vNQIjhPS9vos2UOUD9MpMeO5B+Wz2vHBerYWjobf8Mn8J2M0gAC9yfBg
zzkGzMbn1uU69MTiw6KKp70ufaCSHG8Wa/PMHdH09ahO1BLhGzt8QB+u4KmZdrIx
fIqZVpynXpGlkNO0hpDa0n5jEH0/oKx1mzKtgTDAax6CbvFGyLGphr0BZM3at9Wy
dleuiABi+cfUheRsKypKGpcdDguOvae3SPkmt+SWAQLvPxFwD5Ix3NQcWhEdG+8r
IScOwrAngU1T8qt40+apoVe4QCcCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBS/ZeU1
QBgFLJ6wLUzI+fWg7dVnTzAfBgNVHSMEGDAWgBR4pRXBqRPYm0E0Z0yGfO5rSa4U
njAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1Mzg1NzE4NzY0OTI5MDI1LzAvNzhBNTE1
QzFBOTEzRDg5QjQxMzQ2NzRDODY3Q0VFNkI0OUFFMTQ5RS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvZUtVVndha1Qy
SnRCTkdkTWhuenVhMG11Rko0LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM4NTcxODc2
NDkyOTAyNS8wLzc4QTUxNUMxQTkxM0Q4OUI0MTM0Njc0Qzg2N0NFRTZCNDlBRTE0
OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQApXo4j9N5r6uEpeG0GjIbtPajyAgmCVjDW1MPR/cUrxl+/
pwmG193DhsTmY/irwwRoByhLczR04f79fdBwplzYHUkllbh6iCAKqfcHEkJDTvEg
hBjJTvxnqDmMOE+Ho5WWU4B+VnS92WJVsbrmFCD6pBtNAFTWtxZF0D5cGLca6Bvp
9MUJoV5Oq1PsAXfTivtbpgbgIloheDlAJLuaJz3J5EVQIgvGFAwHxOztlM+Vr53N
u4KiBT7QC7sXsy1iQaBz7cj+vlevXYLM3bWQNGWeAbkfwtGdYMrEwHc7Gw8+1ANu
LInQ/sPAo4ZQeVWxWcfVFs5hKVs2o/iUQoZXL3lU
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:09 2026 by rpki-client