Manifest

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
File:                     _APy-Wb2K_3GawQVYum6QAMtoJ4.mft (raw, json)
Hash identifier:          ZFNpGrg5ShjZi8RNT89Re6rGoZMqNFHEPcE6IiaQcsQ=
Subject key identifier:   6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
Authority key identifier: FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E
Certificate issuer:       /CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
Certificate serial:       24DE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
Manifest number:          24D7
Signing time:             Fri 20 Feb 2026 00:00:25 +0000
Manifest this update:     Fri 20 Feb 2026 00:00:25 +0000
Manifest next update:     Fri 20 Feb 2026 06:00:25 +0000
Files and hashes:         1: _APy-Wb2K_3GawQVYum6QAMtoJ4.crl (hash: iPTHNbDzA/sJvQqYeL+lxx13T90eb0YKi1oN0m56TxA=)
                          2: qdfiI2Y17pKUSM8_poz1SVLUglM.roa (hash: Qt1HJ94TCNTNrlkYIPGsR9ES/pRyt3LS1fuaFkyaClY=)
Validation:               OK
Signature path:           rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl
                          rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 05:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9438 (0x24de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC03F2F966F62BFDC66B041562E9BA40032DA09E
        Validity
            Not Before: Feb 20 00:00:25 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=6BBB7649DCD7DA21A07DB3A61B5E61604AAD1499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:1f:a3:40:9e:ad:bd:4a:db:7b:e9:45:00:
                    93:7e:81:b8:fe:f0:3b:18:64:0f:5d:24:a9:3e:c5:
                    e4:6f:72:06:04:ed:37:4e:0c:3f:10:7e:d7:6a:9e:
                    c3:c7:89:4e:82:d5:e2:bf:58:b0:12:e4:c9:4e:af:
                    e8:db:b5:fa:af:bc:47:f8:d9:ec:22:38:41:0d:ca:
                    65:97:c4:af:04:8b:30:54:a8:ce:63:4d:f5:74:cb:
                    77:7a:1b:ae:b7:11:38:8c:a4:80:70:4c:61:4f:38:
                    b3:07:03:91:9f:97:d9:83:ac:4d:e3:38:7e:99:11:
                    6c:2e:09:ba:c0:05:a6:43:7c:77:65:a9:78:05:63:
                    a2:83:88:9c:4f:4d:a3:aa:92:e0:5c:64:a4:2a:37:
                    c5:2f:60:cf:58:7a:92:01:ac:c4:18:37:13:4f:ba:
                    3e:5e:63:8e:aa:1d:2b:dc:83:74:24:df:4b:e6:cf:
                    60:ae:6b:64:f7:f0:45:b2:9d:b1:10:5c:89:78:a7:
                    f6:6b:f9:78:08:2e:06:e7:fa:8e:17:3c:5c:ac:1e:
                    99:1b:a4:cf:0b:6a:18:e5:a7:c7:72:0a:32:9c:e5:
                    ef:e6:cd:1b:b1:71:5b:2f:7c:ea:a7:bf:d3:0d:a1:
                    37:cd:b6:f0:8e:f4:0b:eb:8b:a5:f6:0e:59:34:5a:
                    30:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BB:76:49:DC:D7:DA:21:A0:7D:B3:A6:1B:5E:61:60:4A:AD:14:99
            X509v3 Authority Key Identifier:
                keyid:FC:03:F2:F9:66:F6:2B:FD:C6:6B:04:15:62:E9:BA:40:03:2D:A0:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_APy-Wb2K_3GawQVYum6QAMtoJ4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3051/_APy-Wb2K_3GawQVYum6QAMtoJ4.mft
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e9:ac:79:e3:27:44:19:29:20:8d:90:05:6b:be:0a:03:ee:
         cf:9a:8d:32:7b:4b:37:23:36:48:2f:77:a8:53:e0:6e:18:18:
         3c:9e:31:f7:42:2b:c9:3d:1c:f5:37:50:8d:e2:0d:6a:22:d3:
         bf:58:68:21:c0:94:91:56:84:9f:3f:72:09:45:23:86:a4:2a:
         2e:3f:32:e0:4d:bd:d4:61:1c:5f:d1:ea:98:7f:24:9e:a8:18:
         8a:a6:8b:6f:82:2a:5f:03:3b:ff:a1:fb:35:6d:27:cc:11:a2:
         30:cd:93:86:84:e4:47:30:72:a7:29:c6:49:a8:28:5b:95:f8:
         b5:82:8d:3b:a0:39:6e:0d:65:18:2f:83:6c:c0:be:bf:fa:74:
         d0:d5:d1:81:55:f3:0b:22:5d:03:fd:f4:16:2e:41:17:a4:93:
         98:0e:c8:0b:d9:93:a8:e7:5a:e9:48:fa:1e:30:a1:6c:8e:94:
         36:81:3a:b3:48:c6:2d:2d:28:33:a8:d1:52:e7:26:84:38:06:
         af:de:2d:75:ce:9a:3a:63:8a:51:9d:24:4e:a8:e8:f2:5e:75:
         c5:f8:ae:22:90:d7:c5:67:0e:2a:39:f0:12:31:72:a1:1a:ed:
         82:c4:b8:3b:d3:f6:53:4b:67:7c:16:73:4c:84:52:39:38:e2:
         6d:6b:1f:cc
-----BEGIN CERTIFICATE-----
MIIE8DCCA9igAwIBAgICJN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkMw
M0YyRjk2NkY2MkJGREM2NkIwNDE1NjJFOUJBNDAwMzJEQTA5RTAeFw0yNjAyMjAw
MDAwMjVaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDZCQkI3NjQ5RENEN0RB
MjFBMDdEQjNBNjFCNUU2MTYwNEFBRDE0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2xR+jQJ6tvUrbe+lFAJN+gbj+8DsYZA9dJKk+xeRvcgYE7TdO
DD8QftdqnsPHiU6C1eK/WLAS5MlOr+jbtfqvvEf42ewiOEENymWXxK8EizBUqM5j
TfV0y3d6G663ETiMpIBwTGFPOLMHA5Gfl9mDrE3jOH6ZEWwuCbrABaZDfHdlqXgF
Y6KDiJxPTaOqkuBcZKQqN8UvYM9YepIBrMQYNxNPuj5eY46qHSvcg3Qk30vmz2Cu
a2T38EWynbEQXIl4p/Zr+XgILgbn+o4XPFysHpkbpM8Lahjlp8dyCjKc5e/mzRux
cVsvfOqnv9MNoTfNtvCO9Avri6X2Dlk0WjAxAgMBAAGjggIMMIICCDAdBgNVHQ4E
FgQUa7t2SdzX2iGgfbOmG15hYEqtFJkwHwYDVR0jBBgwFoAU/APy+Wb2K/3GawQV
Yum6QAMtoJ4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzA1
MS9fQVB5LVdiMktfM0dhd1FWWXVtNlFBTXRvSjQuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL19BUHktV2IyS18zR2F3UVZZdW02UUFNdG9KNC5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMwNTEvX0FQeS1XYjJLXzNH
YXdRVll1bTZRQU10b0o0Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBALTprHnjJ0QZKSCNkAVrvgoD7s+ajTJ7SzcjNkgvd6hT4G4YGDyeMfdCK8k9
HPU3UI3iDWoi079YaCHAlJFWhJ8/cglFI4akKi4/MuBNvdRhHF/R6ph/JJ6oGIqm
i2+CKl8DO/+h+zVtJ8wRojDNk4aE5EcwcqcpxkmoKFuV+LWCjTugOW4NZRgvg2zA
vr/6dNDV0YFV8wsiXQP99BYuQRekk5gOyAvZk6jnWulI+h4woWyOlDaBOrNIxi0t
KDOo0VLnJoQ4Bq/eLXXOmjpjilGdJE6o6PJedcX4riKQ18VnDio58BIxcqEa7YLE
uDvT9lNLZ3wWc0yEUjk44m1rH8w=
-----END CERTIFICATE-----
Generated at Fri Feb 20 01:53:15 2026 by rpki-client