Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
File:                     AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft (raw, json)
Hash identifier:          bXq8UAL2EyatCS2CVKm9LpCZJTgTKQRws/Y1Su7GpyI=
Subject key identifier:   B5:6F:57:30:75:57:1B:60:FA:07:97:15:1F:9F:DF:FF:26:17:33:F0
Authority key identifier: AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26
Certificate issuer:       /CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126
Certificate serial:       0664599CFCC18B59D2F6D688BE2D1CF791FE6C54
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
Manifest number:          2F
Signing time:             Sun 22 Feb 2026 17:57:30 +0000
Manifest this update:     Sun 22 Feb 2026 17:52:30 +0000
Manifest next update:     Mon 23 Feb 2026 21:23:30 +0000
Files and hashes:         1: AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl (hash: T1BRoQe5itZzQ2WFVZhMJD82u3jAf63jTv3q9gR/Wu4=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 09:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:59:9c:fc:c1:8b:59:d2:f6:d6:88:be:2d:1c:f7:91:fe:6c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF78431646A0FABBD8F081F9FF34BCAE995EB126
        Validity
            Not Before: Feb 22 17:52:30 2026 GMT
            Not After : Feb 23 21:23:30 2026 GMT
        Subject: CN=B56F573075571B60FA0797151F9FDFFF261733F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:eb:bd:10:56:93:9e:3f:70:02:ea:14:b9:
                    b4:1c:5b:bd:c9:4f:ce:25:1f:b9:48:9d:97:ec:7f:
                    08:4e:58:52:21:24:cc:25:23:62:d0:6b:25:65:75:
                    a5:42:b6:e6:5b:66:32:e4:37:24:67:af:9a:f9:d4:
                    74:e9:f9:96:12:4b:3c:9b:2b:43:46:06:91:04:e4:
                    40:79:f2:9d:34:35:23:95:d5:c7:01:d7:1a:f5:a4:
                    49:36:af:d2:f3:f6:b8:68:0b:73:ef:f5:d0:7e:61:
                    11:95:d5:d2:fc:b8:ec:2d:40:10:7d:9b:7c:15:1a:
                    86:d6:a3:1e:f4:83:86:8e:83:11:f5:48:72:fc:35:
                    c1:62:88:6a:68:a6:47:c0:84:9f:7a:cb:79:e7:bd:
                    af:96:f2:73:3a:03:fc:ad:32:41:ab:e1:18:23:74:
                    bc:cc:79:48:d7:0d:84:7e:dd:4b:3a:f9:4b:97:e1:
                    eb:31:0b:e3:70:a9:1d:68:42:be:78:1a:ee:d5:1c:
                    92:ef:fe:90:3b:72:27:cf:6e:69:7d:85:9a:bf:ba:
                    a4:ca:80:58:70:9c:91:b1:5c:0e:63:ae:0a:de:b9:
                    7c:e0:8e:d4:04:8d:6d:65:11:0f:b1:79:ba:a2:f6:
                    22:71:4e:65:ab:43:3e:d6:c4:50:b4:2f:09:a7:fd:
                    85:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6F:57:30:75:57:1B:60:FA:07:97:15:1F:9F:DF:FF:26:17:33:F0
            X509v3 Authority Key Identifier:
                keyid:AF:78:43:16:46:A0:FA:BB:D8:F0:81:F9:FF:34:BC:AE:99:5E:B1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF78431646A0FABBD8F081F9FF34BCAE995EB126.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394392579/0/AF78431646A0FABBD8F081F9FF34BCAE995EB126.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:5d:6c:15:da:50:ce:d6:55:5c:5e:a0:1f:45:24:f8:f2:
         ed:eb:47:1e:f1:53:9e:13:9a:21:77:f8:3b:5a:fa:af:ae:64:
         f5:a9:cf:b6:d0:1c:93:da:98:dd:e6:93:97:67:e8:66:6f:94:
         30:3a:12:2a:5b:8f:e8:68:15:ca:31:ef:ed:88:77:c6:40:b7:
         e9:13:01:fb:af:1a:d8:6a:01:32:41:fd:ef:7d:0d:5a:02:51:
         5a:80:fa:b3:d9:9f:3c:c5:21:5a:c0:37:ef:34:57:d9:39:8d:
         3c:73:78:fc:2b:48:d2:2e:39:a0:51:da:7d:66:67:ee:2d:89:
         06:fb:e2:e8:3b:ce:a3:92:3e:aa:6c:3b:6f:fe:0e:5e:15:d3:
         92:36:a0:b0:42:12:f2:1a:e0:7d:fd:25:6a:b3:27:20:40:b2:
         ec:9b:3b:19:b3:81:da:4f:92:d0:b4:8c:96:0c:cf:cb:59:90:
         dc:18:92:50:ba:a7:69:6a:88:c3:3a:67:af:eb:b5:be:57:97:
         aa:78:ba:74:16:04:d5:80:6d:f4:5e:7a:70:5f:f6:96:00:1e:
         7d:78:fc:a6:58:72:a4:23:0c:1b:e4:aa:22:74:66:c3:34:25:
         a8:35:cf:f4:e8:b2:e8:22:06:2c:37:ce:12:fd:3e:82:5d:a3:
         c0:52:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:07:13 2026 by rpki-client