Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
File:                     78A515C1A913D89B4134674C867CEE6B49AE149E.mft (raw, json)
Hash identifier:          oThsfyI1QRHB9HHzCn5QmTpzshAdlz8zv3zj2EVZL2g=
Subject key identifier:   8E:FD:31:15:B2:25:95:CD:20:B6:EC:13:F8:3B:C5:56:FA:55:27:9C
Authority key identifier: 78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E
Certificate issuer:       /CN=A918C4250000/serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
Certificate serial:       1CDAC81928D7AE9B31A486617D1F0FEB8E8906EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
Manifest number:          D4
Signing time:             Tue 18 Aug 2026 22:56:39 +0000
Manifest this update:     Tue 18 Aug 2026 22:51:39 +0000
Manifest next update:     Thu 20 Aug 2026 02:52:39 +0000
Files and hashes:         1: 78A515C1A913D89B4134674C867CEE6B49AE149E.crl (hash: e5vcM43zZD+3uULp/yZNUKj/9hMa2RwdX8af/dU21CA=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 02:52:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:da:c8:19:28:d7:ae:9b:31:a4:86:61:7d:1f:0f:eb:8e:89:06:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C4250000, serialNumber=78A515C1A913D89B4134674C867CEE6B49AE149E
        Validity
            Not Before: Aug 18 22:51:39 2026 GMT
            Not After : Aug 20 02:52:39 2026 GMT
        Subject: CN=8EFD3115B22595CD20B6EC13F83BC556FA55279C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:90:12:d0:d7:f8:9d:11:75:96:a0:d6:67:
                    78:6d:9c:10:97:e8:ac:ff:69:27:a5:42:7b:cb:a4:
                    43:70:9a:de:20:34:23:b9:3c:43:88:66:20:d0:7d:
                    d4:14:12:60:29:e8:fd:d3:78:ae:32:3e:35:51:6b:
                    be:44:0f:9d:33:42:03:33:33:30:72:a3:e1:ee:47:
                    da:54:15:2e:d1:f0:5e:01:6f:30:1f:b4:57:fa:21:
                    25:cf:92:61:31:c6:99:bf:5b:ea:16:63:b5:60:b1:
                    5b:ad:9f:ad:b9:13:ea:c2:ce:73:7e:88:19:2c:37:
                    5e:0e:70:45:39:8c:f3:3f:29:10:31:9e:b5:5b:fa:
                    01:1b:ea:d0:fb:4b:ba:30:ed:e9:d8:89:08:b9:33:
                    57:30:49:33:80:90:a2:eb:fe:5d:40:b7:3b:52:6b:
                    82:3c:35:37:e4:f7:18:9e:b8:88:a9:e2:d0:2c:7a:
                    3f:36:42:fc:46:b0:f2:67:f5:71:02:64:16:d1:4d:
                    0f:ab:90:8f:56:33:ae:37:d0:02:cc:5d:a2:b1:4c:
                    d1:60:6e:1c:5f:50:66:af:37:9a:fa:e8:11:93:67:
                    cc:0c:8e:71:c1:67:26:14:bf:20:21:e5:bc:cb:5c:
                    f9:59:ee:aa:97:45:90:4e:8c:ac:cb:13:bc:7f:f9:
                    e7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FD:31:15:B2:25:95:CD:20:B6:EC:13:F8:3B:C5:56:FA:55:27:9C
            X509v3 Authority Key Identifier:
                keyid:78:A5:15:C1:A9:13:D8:9B:41:34:67:4C:86:7C:EE:6B:49:AE:14:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eKUVwakT2JtBNGdMhnzua0muFJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055385718764929025/0/78A515C1A913D89B4134674C867CEE6B49AE149E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fa:a4:c0:aa:a3:30:9b:71:04:4b:a7:12:61:39:1e:48:ec:
         b1:45:bd:d5:7e:62:a8:b8:31:6e:69:b3:f5:22:12:39:7e:02:
         b3:49:55:37:83:c3:a6:c9:b9:3e:d7:68:83:01:b6:d3:89:15:
         59:d3:af:a3:5d:57:5f:a9:1d:e8:34:ce:45:86:31:ad:4e:fb:
         58:e0:59:16:81:ce:b2:dc:c1:6e:a4:a9:c6:f6:be:fe:bf:14:
         f8:f9:ba:4c:24:64:93:ae:0c:3e:84:c0:a4:81:19:5a:f4:5d:
         19:40:b0:00:f0:f9:38:26:e9:20:9f:a6:ab:ba:d8:be:34:9f:
         ec:3d:2a:39:34:89:3b:a9:c6:a6:7c:c2:91:b2:ac:c9:d6:9c:
         e1:49:09:32:65:d7:86:4c:28:2d:a0:90:fa:38:02:7c:05:54:
         99:5b:9b:c5:4a:42:54:9c:1f:ee:75:06:8e:af:c6:7d:4e:26:
         e8:20:60:6f:1b:70:32:d1:a2:46:7d:30:aa:0e:cd:76:4c:51:
         48:29:6a:0c:37:3b:20:6a:5f:ec:83:a9:7f:2f:18:1d:ea:00:
         f4:cb:0b:8a:02:cb:0f:31:31:df:67:52:62:46:8f:bf:ef:c7:
         b9:66:1c:cc:c5:e3:3f:39:2a:3e:46:e6:46:0b:ea:fd:13:f1:
         d1:f0:41:cf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHNrIGSjXrpsxpIZhfR8P646JBu8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOEM0MjUwMDAwMTEwLwYDVQQFEyg3OEE1MTVDMUE5
MTNEODlCNDEzNDY3NEM4NjdDRUU2QjQ5QUUxNDlFMB4XDTI2MDgxODIyNTEzOVoX
DTI2MDgyMDAyNTIzOVowMzExMC8GA1UEAxMoOEVGRDMxMTVCMjI1OTVDRDIwQjZF
QzEzRjgzQkM1NTZGQTU1Mjc5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKtwkBLQ1/idEXWWoNZneG2cEJforP9pJ6VCe8ukQ3Ca3iA0I7k8Q4hmINB9
1BQSYCno/dN4rjI+NVFrvkQPnTNCAzMzMHKj4e5H2lQVLtHwXgFvMB+0V/ohJc+S
YTHGmb9b6hZjtWCxW62frbkT6sLOc36IGSw3Xg5wRTmM8z8pEDGetVv6ARvq0PtL
ujDt6diJCLkzVzBJM4CQouv+XUC3O1Jrgjw1N+T3GJ64iKni0Cx6PzZC/Eaw8mf1
cQJkFtFND6uQj1YzrjfQAsxdorFM0WBuHF9QZq83mvroEZNnzAyOccFnJhS/ICHl
vMtc+VnuqpdFkE6MrMsTvH/5568CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSO/TEV
siWVzSC27BP4O8VW+lUnnDAfBgNVHSMEGDAWgBR4pRXBqRPYm0E0Z0yGfO5rSa4U
njAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1Mzg1NzE4NzY0OTI5MDI1LzAvNzhBNTE1
QzFBOTEzRDg5QjQxMzQ2NzRDODY3Q0VFNkI0OUFFMTQ5RS5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvZUtVVndha1Qy
SnRCTkdkTWhuenVhMG11Rko0LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM4NTcxODc2
NDkyOTAyNS8wLzc4QTUxNUMxQTkxM0Q4OUI0MTM0Njc0Qzg2N0NFRTZCNDlBRTE0
OUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQCQ+qTAqqMwm3EES6cSYTkeSOyxRb3VfmKouDFuabP1IhI5
fgKzSVU3g8Omybk+12iDAbbTiRVZ06+jXVdfqR3oNM5FhjGtTvtY4FkWgc6y3MFu
pKnG9r7+vxT4+bpMJGSTrgw+hMCkgRla9F0ZQLAA8Pk4Jukgn6aruti+NJ/sPSo5
NIk7qcamfMKRsqzJ1pzhSQkyZdeGTCgtoJD6OAJ8BVSZW5vFSkJUnB/udQaOr8Z9
TiboIGBvG3Ay0aJGfTCqDs12TFFIKWoMNzsgal/sg6l/Lxgd6gD0ywuKAssPMTHf
Z1JiRo+/78e5ZhzMxeM/OSo+RuZGC+r9E/HR8EHP
-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:48 2026 by rpki-client