
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
File: AEB6C1171350C22B2084932E16868862A537F167.mft (raw, json)
Hash identifier: sWlIfUX2MKy5AjHwR324JwOz6sjqRt8LFHwT2VmaZmw=
Subject key identifier: 84:65:92:C4:DE:23:89:9E:E2:16:8E:61:CA:D5:4E:A5:F8:25:FA:03
Authority key identifier: AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67
Certificate issuer: /CN=AEB6C1171350C22B2084932E16868862A537F167
Certificate serial: 64D276DCACF4B640B062C81328824BD092D1AC4C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
Manifest number: 8A
Signing time: Tue 21 Jul 2026 11:33:41 +0000
Manifest this update: Tue 21 Jul 2026 11:28:41 +0000
Manifest next update: Wed 22 Jul 2026 14:48:41 +0000
Files and hashes: 1: AEB6C1171350C22B2084932E16868862A537F167.crl (hash: a6141g+LdfSUtEn6vefKnJOPDVL3Q2pLOP0Q4Mljbic=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl
rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 14:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:d2:76:dc:ac:f4:b6:40:b0:62:c8:13:28:82:4b:d0:92:d1:ac:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB6C1171350C22B2084932E16868862A537F167
Validity
Not Before: Jul 21 11:28:41 2026 GMT
Not After : Jul 22 14:48:41 2026 GMT
Subject: CN=846592C4DE23899EE2168E61CAD54EA5F825FA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:82:91:65:7c:05:fc:17:4f:ae:09:0b:cf:
a4:29:5e:56:54:1c:f3:f9:9a:fc:10:66:cc:45:8d:
a8:49:f1:77:89:ee:29:2e:b9:d8:60:6f:8e:b1:a9:
63:36:1b:7b:9c:9b:0f:b0:49:fb:1d:9f:b8:2f:ee:
ea:fe:79:0c:3b:d3:c4:9c:b3:a6:9b:60:dd:ea:cc:
24:2f:5f:2d:94:70:6b:2e:83:86:33:71:73:a0:5c:
0e:61:4e:c6:49:ea:54:16:fd:65:ae:9d:b4:60:34:
e5:0f:16:96:09:fa:a8:00:24:05:79:6f:f4:7d:25:
62:9e:b9:07:1f:2e:31:e1:38:64:b3:77:fa:00:5c:
af:42:49:60:9d:34:ff:70:5a:3a:fd:3b:8c:41:57:
42:b7:38:ab:56:2b:94:b8:6f:8e:6a:50:63:0a:17:
ea:74:00:aa:b3:c1:38:6a:d6:12:c5:dd:95:f5:53:
80:52:26:6e:8e:17:10:84:ac:4f:1c:43:0a:3b:a6:
20:12:5d:bf:0a:aa:b9:c5:96:eb:3f:bd:32:7e:39:
a4:9e:11:24:50:65:e6:34:68:4a:d8:50:c7:76:0b:
2e:11:1c:7a:4e:3e:06:61:6e:d0:ae:67:9d:e0:53:
2d:0b:d6:66:f9:2c:cd:84:19:8f:72:30:6d:bc:43:
04:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:65:92:C4:DE:23:89:9E:E2:16:8E:61:CA:D5:4E:A5:F8:25:FA:03
X509v3 Authority Key Identifier:
keyid:AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:af:c0:e4:b3:1d:dc:28:ed:c8:b4:48:be:c0:55:5f:a2:
63:63:96:8e:f0:4f:20:a1:86:46:4d:fd:9d:74:f4:c1:c4:c4:
af:b2:49:c3:49:79:db:82:1b:56:3b:96:33:0b:6e:d7:31:09:
4a:b2:8e:6f:ac:2b:26:de:f5:fc:c5:97:9e:88:67:c5:4c:6b:
2a:cd:c0:74:a8:7a:cf:be:98:00:3e:7e:d9:9d:44:27:6c:7f:
77:99:45:8c:cc:6e:cc:5b:b0:53:3c:a9:e9:31:79:a4:b0:42:
37:7e:5d:b2:86:d9:b1:cb:dd:44:17:42:a8:4b:a8:e9:1c:56:
94:4f:c7:b3:78:a8:c7:7e:4f:55:f1:4d:40:72:43:82:9e:99:
89:8f:a1:76:a4:55:09:a4:ce:bd:7e:70:63:26:ea:f3:e5:03:
1f:2e:e5:ae:79:31:0b:e3:2c:d2:32:69:c8:5a:33:ed:5d:0d:
57:dc:5f:f2:0d:ec:aa:e1:96:c7:46:4a:0d:2e:93:8f:6a:ed:
e7:71:37:eb:ce:a9:6d:c9:46:6e:77:8a:f6:5c:85:6b:70:9d:
8d:d3:e6:cf:89:e4:b9:6f:9c:38:6d:00:92:fe:30:d4:e1:e8:
d2:2a:85:6f:21:28:b6:64:b6:d5:8f:91:a7:0a:f0:6c:06:39:
01:4a:a9:88
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUZNJ23Kz0tkCwYsgTKIJL0JLRrEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVCNkMxMTcxMzUwQzIyQjIwODQ5MzJFMTY4Njg4NjJB
NTM3RjE2NzAeFw0yNjA3MjExMTI4NDFaFw0yNjA3MjIxNDQ4NDFaMDMxMTAvBgNV
BAMTKDg0NjU5MkM0REUyMzg5OUVFMjE2OEU2MUNBRDU0RUE1RjgyNUZBMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xYKRZXwF/BdPrgkLz6QpXlZU
HPP5mvwQZsxFjahJ8XeJ7ikuudhgb46xqWM2G3ucmw+wSfsdn7gv7ur+eQw708Sc
s6abYN3qzCQvXy2UcGsug4YzcXOgXA5hTsZJ6lQW/WWunbRgNOUPFpYJ+qgAJAV5
b/R9JWKeuQcfLjHhOGSzd/oAXK9CSWCdNP9wWjr9O4xBV0K3OKtWK5S4b45qUGMK
F+p0AKqzwThq1hLF3ZX1U4BSJm6OFxCErE8cQwo7piASXb8KqrnFlus/vTJ+OaSe
ESRQZeY0aErYUMd2Cy4RHHpOPgZhbtCuZ53gUy0L1mb5LM2EGY9yMG28QwT3AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUhGWSxN4jiZ7iFo5hytVOpfgl+gMwHwYDVR0j
BBgwFoAUrrbBFxNQwisghJMuFoaIYqU38WcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDQ2ODMxMDY5NjcyMjQzNS8wL0FFQjZDMTE3MTM1MEMyMkIyMDg0OTMyRTE2ODY4
ODYyQTUzN0YxNjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUVCNkMxMTcxMzUwQzIyQjIwODQ5MzJFMTY4Njg4NjJBNTM3RjE2Ny5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTQ0NjgzMTA2OTY3MjI0MzUvMC9BRUI2QzExNzEzNTBD
MjJCMjA4NDkzMkUxNjg2ODg2MkE1MzdGMTY3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0ivwOSzHdwo
7ci0SL7AVV+iY2OWjvBPIKGGRk39nXT0wcTEr7JJw0l524IbVjuWMwtu1zEJSrKO
b6wrJt71/MWXnohnxUxrKs3AdKh6z76YAD5+2Z1EJ2x/d5lFjMxuzFuwUzyp6TF5
pLBCN35dsobZscvdRBdCqEuo6RxWlE/Hs3iox35PVfFNQHJDgp6ZiY+hdqRVCaTO
vX5wYybq8+UDHy7lrnkxC+Ms0jJpyFoz7V0NV9xf8g3squGWx0ZKDS6Tj2rt53E3
686pbclGbneK9lyFa3CdjdPmz4nkuW+cOG0Akv4w1OHo0iqFbyEotmS21Y+Rpwrw
bAY5AUqpiA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:48 2026 by rpki-client