$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft File: 87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json) Hash identifier: glV1CsIAe0xJ1wtv9USfumcm7x9nvtzVDjl6U/Egd68= Subject key identifier: AB:6C:4B:02:61:BF:3D:93:94:CC:AF:6E:A6:5E:2D:EB:93:DA:7B:99 Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Certificate serial: 62B66B74670E0B7AA9B1B0E788980688F97F5E0F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft Manifest number: 02C6 Signing time: Tue 21 Apr 2026 15:07:56 +0000 Manifest this update: Tue 21 Apr 2026 15:02:56 +0000 Manifest next update: Wed 22 Apr 2026 16:19:56 +0000 Files and hashes: 1: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: Lkk+Qmk4uhO8QI5TZRgB3W6gVDxOlI7mU/dO/+NOwEc=) 2: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 16:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b6:6b:74:67:0e:0b:7a:a9:b1:b0:e7:88:98:06:88:f9:7f:5e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Validity Not Before: Apr 21 15:02:56 2026 GMT Not After : Apr 22 16:19:56 2026 GMT Subject: CN=AB6C4B0261BF3D9394CCAF6EA65E2DEB93DA7B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:78:a7:75:99:e4:63:46:61:a7:6e:ab:27: 97:e1:45:9e:b5:be:8e:10:f8:e3:38:d3:86:53:8b: c3:7b:69:34:f2:45:7b:0a:89:de:77:27:69:ae:86: 5b:70:a9:57:63:bb:21:1d:e1:40:cb:70:15:5d:f2: 2c:ff:c7:fb:68:26:5a:53:fa:1c:8f:9a:7d:7b:86: 66:5d:59:75:f3:d3:17:fc:2b:56:cb:71:31:13:c5: c2:29:8a:b6:14:f4:f4:23:c2:20:28:8e:02:0b:6c: 91:14:dd:09:7b:7a:3f:fd:0b:f6:d9:4b:5a:dd:ce: fa:ec:3c:74:ca:e9:23:d0:05:0d:d0:3c:1f:fc:d7: a6:56:8b:b9:0e:68:e8:d4:95:b4:ea:b9:1d:af:79: b4:5f:d6:e1:fe:f0:59:1f:ec:09:1f:c5:c8:7b:b6: 4b:40:11:ec:b7:11:2d:66:4b:96:40:e4:58:f6:d3: 0c:30:ec:6d:7e:04:bc:70:69:dc:e4:c0:05:70:14: f3:8e:da:44:a8:6c:5b:a9:9d:bd:1b:a7:dc:4a:15: 67:ca:cf:99:32:3d:63:02:a1:78:60:f7:11:33:6e: ea:da:2d:ef:c6:48:2b:49:fe:45:cc:b9:b4:8c:c5: 07:85:8a:ef:e6:df:88:3b:be:44:3c:ba:ec:cd:2a: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:4B:02:61:BF:3D:93:94:CC:AF:6E:A6:5E:2D:EB:93:DA:7B:99 X509v3 Authority Key Identifier: keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2d:a8:a6:90:00:84:19:c7:ad:6f:d8:57:24:59:7f:b2:12: f7:92:32:4f:b2:b0:1f:7f:0f:8f:69:66:52:b1:68:b3:f9:17: 29:00:02:e9:8c:a6:1c:94:fe:73:c5:a0:bb:8c:91:c6:f3:f9: 62:05:ce:45:10:ed:98:cd:6d:7b:e6:94:ff:87:13:97:de:6d: c0:76:0f:50:4c:0d:2f:9f:ed:59:50:fd:03:fe:88:a7:fb:bb: 28:e1:32:b7:bd:a7:44:1a:d9:1f:ad:b3:c3:92:4e:68:61:80: 83:44:90:8a:ef:38:69:b8:12:da:f8:f7:0a:ea:b0:51:41:91: f6:cb:7f:f4:42:ef:24:43:94:f2:e3:5c:b0:fa:17:8e:ec:1b: 0a:7a:a4:43:b9:2e:32:7c:6c:36:d0:6a:96:be:8c:72:0d:da: 9e:fd:0b:ce:ce:22:3e:35:3a:1a:c7:b3:b2:a4:fd:a6:60:48: 00:bb:6c:35:c3:fa:3d:b1:75:57:63:8b:55:e0:e6:40:fe:e7: ae:9a:06:5d:61:a3:b2:b2:ff:4c:6a:bc:73:8b:43:ef:05:e5: 24:73:ab:e7:1b:b9:6f:d5:f4:77:8d:53:55:cc:fb:05:f5:7c: 1b:76:84:ee:c8:8c:37:9b:73:dd:2b:8d:dd:29:ad:09:18:7a: d6:8e:94:5a -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUYrZrdGcOC3qpsbDniJgGiPl/Xg8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyg4N0I1MTQ2NzU0 OUZGQzVBMDIyNjA5REJBQjk2MTk3NUQxRkJBNEIzMB4XDTI2MDQyMTE1MDI1NloX DTI2MDQyMjE2MTk1NlowMzExMC8GA1UEAxMoQUI2QzRCMDI2MUJGM0Q5Mzk0Q0NB RjZFQTY1RTJERUI5M0RBN0I5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyCeKd1meRjRmGnbqsnl+FFnrW+jhD44zjThlOLw3tpNPJFewqJ3ncnaa6G W3CpV2O7IR3hQMtwFV3yLP/H+2gmWlP6HI+afXuGZl1ZdfPTF/wrVstxMRPFwimK thT09CPCICiOAgtskRTdCXt6P/0L9tlLWt3O+uw8dMrpI9AFDdA8H/zXplaLuQ5o 6NSVtOq5Ha95tF/W4f7wWR/sCR/FyHu2S0AR7LcRLWZLlkDkWPbTDDDsbX4EvHBp 3OTABXAU847aRKhsW6mdvRun3EoVZ8rPmTI9YwKheGD3ETNu6tot78ZIK0n+Rcy5 tIzFB4WK7+bfiDu+RDy67M0qHoMCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSrbEsC Yb89k5TMr26mXi3rk9p7mTAfBgNVHSMEGDAWgBSHtRRnVJ/8WgImCdurlhl10fuk szAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1LzIvODdCNTE0 Njc1NDlGRkM1QTAyMjYwOURCQUI5NjE5NzVEMUZCQTRCMy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvaDdVVVoxU2Zf Rm9DSmduYnE1WVpkZEg3cExNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5 MDY3NTcxNS8yLzg3QjUxNDY3NTQ5RkZDNUEwMjI2MDlEQkFCOTYxOTc1RDFGQkE0 QjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQClLaimkACEGcetb9hXJFl/shL3kjJPsrAffw+PaWZSsWiz +RcpAALpjKYclP5zxaC7jJHG8/liBc5FEO2YzW175pT/hxOX3m3Adg9QTA0vn+1Z UP0D/oin+7so4TK3vadEGtkfrbPDkk5oYYCDRJCK7zhpuBLa+PcK6rBRQZH2y3/0 Qu8kQ5Ty41yw+heO7BsKeqRDuS4yfGw20GqWvoxyDdqe/QvOziI+NToax7OypP2m YEgAu2w1w/o9sXVXY4tV4OZA/ueumgZdYaOysv9Marxzi0PvBeUkc6vnG7lv1fR3 jVNVzPsF9XwbdoTuyIw3m3PdK43dKa0JGHrWjpRa -----END CERTIFICATE-----Generated at Tue Apr 21 21:35:51 2026 by rpki-client