This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File:                     87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier:          jOtZui+0QzMl8S7zqwmrxPsaSNMkdtUxPdgn2VwNFeE=
Subject key identifier:   3F:B2:A4:9A:59:3F:B6:96:B7:08:3E:6D:78:FA:25:DF:71:B3:34:3D
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer:       /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial:       56FE663C55DB4C8EE417BD4B030F06450F9623E2
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number:          EE
Signing time:             Tue 20 Jan 2026 23:05:30 +0000
Manifest this update:     Tue 20 Jan 2026 23:00:30 +0000
Manifest next update:     Thu 22 Jan 2026 01:21:30 +0000
Files and hashes:         1: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: x83TCO3EEgsc9D/wmsTWokTLh7yKpf+Eizim24N8TfQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Jan 2026 01:21:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fe:66:3c:55:db:4c:8e:e4:17:bd:4b:03:0f:06:45:0f:96:23:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
        Validity
            Not Before: Jan 20 23:00:30 2026 GMT
            Not After : Jan 22 01:21:30 2026 GMT
        Subject: CN=3FB2A49A593FB696B7083E6D78FA25DF71B3343D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e7:af:18:c1:26:30:32:47:db:a4:ad:c8:c3:
                    28:c3:e3:ba:f0:4a:4c:cd:11:9c:32:1f:27:23:8d:
                    ac:ef:64:64:11:c9:80:52:0a:a5:8e:61:bc:4f:af:
                    60:bc:bd:a0:a9:3e:5d:ce:ba:06:b7:76:5b:8c:a8:
                    4a:13:00:37:a1:ef:4c:4e:0f:4a:05:1a:6f:73:de:
                    4d:a6:98:31:eb:bd:81:1d:5c:30:0b:22:c1:a0:83:
                    bb:56:1c:88:d3:af:af:89:ca:92:61:71:5d:83:54:
                    bc:e9:b4:33:10:12:38:a8:fc:97:62:28:1d:25:d8:
                    15:4d:ad:46:f1:a7:61:65:c6:ce:2a:91:71:61:64:
                    17:44:ec:8a:9a:8d:c2:14:a9:8b:68:53:3b:33:72:
                    d7:a7:3f:02:7c:0b:49:0b:8a:c3:cd:2c:76:0c:36:
                    a3:5a:14:45:3e:63:cd:02:6f:98:ff:46:4c:4d:7f:
                    15:b3:59:30:02:19:ae:66:e3:f9:da:57:d1:87:fc:
                    b5:ba:21:bb:87:0e:c4:10:7c:9d:43:e5:bc:fd:a6:
                    ed:81:c9:a8:78:e8:8b:7a:83:06:4c:b0:c2:dd:c8:
                    3d:73:7d:38:f5:f1:41:fd:ce:7d:b2:88:f1:f4:6b:
                    65:d0:5e:8f:3f:46:ed:be:83:c9:81:17:6a:53:ef:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B2:A4:9A:59:3F:B6:96:B7:08:3E:6D:78:FA:25:DF:71:B3:34:3D
            X509v3 Authority Key Identifier:
                keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ce:09:6d:a9:8f:e4:ef:90:68:48:58:6b:97:ee:89:33:df:
         6d:af:6f:17:d3:d9:32:93:67:19:99:cd:4b:58:39:a7:72:9d:
         f3:79:fd:91:aa:f1:49:c0:0a:dd:44:9a:9c:69:10:5b:6d:f0:
         b0:3a:2f:8d:3a:c2:a5:3a:8a:d4:0c:5d:c9:f6:9e:06:ab:28:
         35:7d:dd:88:70:48:6d:86:9d:de:97:68:c7:67:56:0e:a0:a2:
         5c:ab:1f:ae:ed:0b:e6:c3:3c:46:11:f9:72:32:40:32:62:09:
         01:d3:13:fe:3e:56:18:bf:fd:23:40:d0:4d:49:54:ec:e2:44:
         eb:98:83:c7:3a:70:da:82:3b:09:cb:3c:e2:11:48:34:00:9b:
         93:8c:6e:24:84:d4:78:e6:4a:47:fc:46:b6:aa:bb:63:77:74:
         fb:f2:fa:19:ef:c9:c7:e1:34:79:d5:c6:08:e0:b0:f4:8b:01:
         0b:8e:4e:f4:90:5e:72:86:07:bc:2b:e3:0f:5b:da:2f:6a:f9:
         b7:db:13:f8:03:ac:97:31:3d:26:55:be:13:57:17:5f:1e:e8:
         28:33:d9:33:96:fb:9b:f1:95:b5:27:f7:ef:5e:0e:d1:27:90:
         14:39:b4:04:6c:9e:7a:70:4c:02:ac:40:d9:39:2d:20:ad:18:
         e4:7a:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 07:45:10 2026 by rpki-client