This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
File:                     A56E872A403E7B9CEB9431A08F540401D2FBD710.mft (raw, json)
Hash identifier:          pP9bfaf1Oj9Izf/b0HV7a/LA82STA22Nmy1nZ4EvO1w=
Subject key identifier:   19:5C:D7:C4:6C:D5:D6:49:77:98:89:B5:7A:D5:00:EB:CE:26:68:B7
Authority key identifier: A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10
Certificate issuer:       /CN=A9162E3D0001/serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
Certificate serial:       58C66970881E5B05B6986721DA84A378E809B149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
Manifest number:          12
Signing time:             Wed 07 Jan 2026 00:49:38 +0000
Manifest this update:     Wed 07 Jan 2026 00:44:38 +0000
Manifest next update:     Thu 08 Jan 2026 02:23:38 +0000
Files and hashes:         1: A56E872A403E7B9CEB9431A08F540401D2FBD710.crl (hash: 60VY3smXupLhKssiyuw8TRNBSUHDgQa94xKeFcvWFio=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Jan 2026 02:23:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:69:70:88:1e:5b:05:b6:98:67:21:da:84:a3:78:e8:09:b1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=A56E872A403E7B9CEB9431A08F540401D2FBD710
        Validity
            Not Before: Jan  7 00:44:38 2026 GMT
            Not After : Jan  8 02:23:38 2026 GMT
        Subject: CN=195CD7C46CD5D649779889B57AD500EBCE2668B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:02:bf:38:08:e9:ec:91:fa:84:e9:b2:ad:91:
                    6b:c0:b8:08:63:82:ba:68:93:a3:7d:b0:70:a0:c2:
                    97:77:b3:82:45:db:f6:a6:6b:a2:ff:14:b1:5b:d9:
                    30:03:6c:66:d4:d6:c3:8b:be:e9:73:91:c7:bc:3d:
                    73:a9:b0:27:be:39:65:1d:cd:bd:4e:97:19:1a:62:
                    85:0d:63:76:16:d7:8f:3a:8b:9c:3f:31:39:6c:b8:
                    c9:80:30:18:3c:14:53:c0:17:e3:b0:ad:68:41:9b:
                    38:64:b0:a2:82:82:9f:0b:a0:47:be:c7:91:1e:69:
                    e9:db:9c:8b:78:ab:e4:e6:b5:e2:8c:bc:02:02:c8:
                    6d:77:2d:90:e4:ca:f6:e4:2f:33:9e:b2:9a:b0:f1:
                    4d:12:1c:91:c3:a1:37:ba:1e:8e:46:1a:1e:cb:21:
                    a1:46:04:ed:24:93:f2:e6:df:c2:ce:03:f1:ab:68:
                    d3:f1:5c:11:5c:a4:ef:12:31:f9:31:cb:0c:1b:7c:
                    5d:e2:63:5d:38:38:50:59:62:e1:a7:c4:7d:70:f1:
                    59:95:d3:d7:18:de:2b:94:63:53:1c:d9:b6:55:3a:
                    8f:18:08:03:97:d7:0e:3b:60:98:e6:b3:95:b8:64:
                    94:cb:fe:5d:46:c7:9e:df:bd:ac:6f:bd:c2:1c:66:
                    af:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:D7:C4:6C:D5:D6:49:77:98:89:B5:7A:D5:00:EB:CE:26:68:B7
            X509v3 Authority Key Identifier:
                keyid:A5:6E:87:2A:40:3E:7B:9C:EB:94:31:A0:8F:54:04:01:D2:FB:D7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:46:73:c6:4e:99:1f:52:da:c5:6f:63:b7:d3:a0:5c:1b:55:
         6c:a2:f3:08:60:8c:25:fe:6b:d3:17:6b:a8:b4:a0:a9:4e:73:
         8b:2c:1b:1a:2f:cf:61:81:6f:58:70:ac:94:13:6a:3e:34:95:
         8d:8e:b2:51:57:22:58:b7:a8:99:82:d3:0f:09:d7:91:7f:e7:
         a6:a0:af:d0:1c:dc:8c:bb:94:12:92:3e:c9:f9:6b:a5:15:74:
         c7:be:fe:c2:0c:a1:92:d8:2d:f1:15:4e:fe:dc:c2:42:03:22:
         e1:fb:d3:aa:41:63:b6:be:62:e9:c6:2c:68:7c:33:df:60:8d:
         88:ad:6e:30:f1:f0:34:05:be:fc:05:b8:e5:4c:cf:ba:f0:ba:
         e5:39:6a:48:3f:c4:92:2e:01:fe:f8:44:e5:6f:b9:94:31:28:
         4d:5c:3a:55:b4:50:e1:01:b5:cd:d5:fa:35:5e:34:43:6f:a3:
         c2:12:03:c1:99:e8:3f:c1:27:a2:ed:a6:02:30:2d:3a:f2:7a:
         77:57:99:48:3b:c8:f3:24:b2:c9:e0:71:d3:cb:36:77:82:9b:
         63:61:30:6d:5d:29:f6:b0:9c:09:a1:ea:f0:fb:e2:ea:74:0d:
         46:6d:b0:26:a6:a2:03:83:4d:ec:21:4b:1c:86:08:44:a8:a7:
         e0:94:af:b1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWMZpcIgeWwW2mGch2oSjeOgJsUkwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyhBNTZFODcyQTQw
M0U3QjlDRUI5NDMxQTA4RjU0MDQwMUQyRkJENzEwMB4XDTI2MDEwNzAwNDQzOFoX
DTI2MDEwODAyMjMzOFowMzExMC8GA1UEAxMoMTk1Q0Q3QzQ2Q0Q1RDY0OTc3OTg4
OUI1N0FENTAwRUJDRTI2NjhCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIwCvzgI6eyR+oTpsq2Ra8C4CGOCumiTo32wcKDCl3ezgkXb9qZrov8UsVvZ
MANsZtTWw4u+6XORx7w9c6mwJ745ZR3NvU6XGRpihQ1jdhbXjzqLnD8xOWy4yYAw
GDwUU8AX47CtaEGbOGSwooKCnwugR77HkR5p6duci3ir5Oa14oy8AgLIbXctkOTK
9uQvM56ymrDxTRIckcOhN7oejkYaHsshoUYE7SST8ubfws4D8ato0/FcEVyk7xIx
+THLDBt8XeJjXTg4UFli4afEfXDxWZXT1xjeK5RjUxzZtlU6jxgIA5fXDjtgmOaz
lbhklMv+XUbHnt+9rG+9whxmr/kCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQZXNfE
bNXWSXeYibV61QDrziZotzAfBgNVHSMEGDAWgBSlbocqQD57nOuUMaCPVAQB0vvX
EDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp
LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1LzEvQTU2RTg3
MkE0MDNFN0I5Q0VCOTQzMUEwOEY1NDA0MDFEMkZCRDcxMC5jcmwwfgYIKwYBBQUH
AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvcFc2SEtrQS1l
NXpybERHZ2oxUUVBZEw3MXhBLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH
MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5
MDY3NTcxNS8xL0E1NkU4NzJBNDAzRTdCOUNFQjk0MzFBMDhGNTQwNDAxRDJGQkQ3
MTAubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E
EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQAXRnPGTpkfUtrFb2O306BcG1VsovMIYIwl/mvTF2uotKCp
TnOLLBsaL89hgW9YcKyUE2o+NJWNjrJRVyJYt6iZgtMPCdeRf+emoK/QHNyMu5QS
kj7J+WulFXTHvv7CDKGS2C3xFU7+3MJCAyLh+9OqQWO2vmLpxixofDPfYI2IrW4w
8fA0Bb78BbjlTM+68LrlOWpIP8SSLgH++ETlb7mUMShNXDpVtFDhAbXN1fo1XjRD
b6PCEgPBmeg/wSei7aYCMC068np3V5lIO8jzJLLJ4HHTyzZ3gptjYTBtXSn2sJwJ
oerw++LqdA1GbbAmpqIDg03sIUschghEqKfglK+x
-----END CERTIFICATE-----
Generated at Wed Jan 7 06:36:47 2026 by rpki-client