Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
File:                     A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft (raw, json)
Hash identifier:          KhSFpGYYh/7z9jx9IpfgDAOxrYmB9C0BAzDn2CM+WDA=
Subject key identifier:   C4:EA:DA:2B:1F:6B:BF:68:63:AC:68:D7:F5:84:1F:70:AD:CF:4F:72
Authority key identifier: A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53
Certificate issuer:       /CN=A91209740000/serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
Certificate serial:       75EC282B4599C9977A95E9EABC82DD9E01C13F7D
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
Manifest number:          02F3
Signing time:             Mon 19 Oct 2026 23:33:58 +0000
Manifest this update:     Mon 19 Oct 2026 23:28:58 +0000
Manifest next update:     Fri 23 Oct 2026 08:55:58 +0000
Files and hashes:         1: AS45090.roa (hash: sn70bdO2V7+ZbQfzexLi6sW+lrFjwUJxIN4L0R9gCzE=)
                          2: A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl (hash: o9r1suJL8wAT4t4noygBi/an3pHiivA3kIB/w1iyf7U=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 Oct 2026 08:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:ec:28:2b:45:99:c9:97:7a:95:e9:ea:bc:82:dd:9e:01:c1:3f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353
        Validity
            Not Before: Oct 19 23:28:58 2026 GMT
            Not After : Oct 23 08:55:58 2026 GMT
        Subject: CN=C4EADA2B1F6BBF6863AC68D7F5841F70ADCF4F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:6d:fc:e4:a4:60:68:56:2e:db:24:fe:73:
                    54:91:8c:c5:6d:1f:47:00:b8:56:ab:3f:d5:73:bd:
                    8c:44:ef:9b:31:05:9d:48:cb:0a:22:7f:21:c9:55:
                    66:a2:ca:48:7f:90:a8:52:9e:45:70:bd:66:55:34:
                    fa:02:d2:b5:26:86:57:79:78:7d:64:4f:d3:c8:80:
                    0b:1d:12:7a:84:67:48:a7:41:67:5a:b8:e7:3d:c3:
                    58:61:4b:91:ad:76:8c:05:e5:73:8a:ac:50:58:44:
                    75:08:a1:df:31:79:35:99:a5:90:a8:b6:fc:cd:b0:
                    1b:21:f3:d9:6e:ca:94:4a:8c:18:9f:97:6b:2b:9d:
                    07:2e:2f:08:3d:61:41:e1:14:b1:a9:dc:98:28:ac:
                    90:79:9c:5d:83:fd:05:75:63:c3:ba:fa:13:a9:d3:
                    8d:e6:2e:33:28:f1:0c:bf:ea:1b:9a:46:c5:f7:05:
                    c9:d8:74:3a:12:f8:98:0d:10:d2:ea:b1:3a:d2:88:
                    33:a5:81:cc:1b:29:e9:61:74:fa:00:eb:75:eb:cf:
                    21:8f:e8:d4:6e:33:ff:13:4b:0d:4e:6a:be:77:5e:
                    8c:6b:58:b3:cf:1f:6c:8a:ae:6d:33:8d:b2:e1:84:
                    fa:ba:1a:0d:ba:0e:23:0e:91:10:4c:05:ce:a4:ba:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:DA:2B:1F:6B:BF:68:63:AC:68:D7:F5:84:1F:70:AD:CF:4F:72
            X509v3 Authority Key Identifier:
                keyid:A3:AF:71:76:2F:A0:5E:5A:CE:3B:6A:3C:33:2C:AB:7F:29:AA:33:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/o69xdi-gXlrOO2o8MyyrfymqM1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/3/A3AF71762FA05E5ACE3B6A3C332CAB7F29AA3353.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:08:1e:54:6d:ee:d0:00:b4:86:5b:cc:ae:f8:1c:8d:31:9d:
         55:dc:38:e2:8a:69:a3:05:01:b2:18:95:e1:3b:c1:81:60:77:
         06:c8:7c:6f:8e:88:e5:59:12:23:d9:9c:08:62:ab:b0:8d:65:
         02:99:46:1e:0e:f8:ef:9f:df:9f:7d:52:90:ae:06:5c:6d:67:
         e4:f1:16:c2:b6:0d:24:5c:97:c1:43:50:04:92:88:9c:da:e9:
         7c:3c:06:68:97:bd:f1:e6:20:ab:c9:04:1c:f5:07:e2:7f:28:
         e3:f7:09:ae:cf:13:20:4d:87:81:49:f8:9e:68:75:49:5b:45:
         d4:1d:c3:28:c4:da:b4:f6:be:55:b5:f4:54:ba:37:3c:11:db:
         a7:77:a4:27:f1:7f:82:ad:73:c1:05:ef:0e:ed:6b:1f:f2:b4:
         b0:cf:5a:32:8e:59:39:49:c0:e2:24:a6:09:63:97:f0:c7:bb:
         1d:90:5b:4d:46:c3:b1:ed:86:8d:32:ad:33:c6:d6:c1:22:80:
         05:0a:3c:7a:98:e9:cb:66:29:66:ec:0c:33:a5:d6:af:e6:57:
         9f:7d:1e:cf:33:b7:76:35:8c:71:1b:ca:67:4a:02:34:16:03:
         f4:5a:1f:ba:35:92:16:12:fa:6a:fc:03:ac:8e:9f:c9:e2:74:
         75:03:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:38:49 2026 by rpki-client