Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
File:                     AEB6C1171350C22B2084932E16868862A537F167.mft (raw, json)
Hash identifier:          cWgc8PEdeDY+CIaLergRELyiyQMwJwb4cSFKK4DM0q0=
Subject key identifier:   D4:D2:77:4B:66:C7:72:AF:54:64:B4:EA:51:30:E7:AA:10:2E:F8:9B
Authority key identifier: AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67
Certificate issuer:       /CN=AEB6C1171350C22B2084932E16868862A537F167
Certificate serial:       0A7C5E4EEC7A1EDBB96F170E1AC7778C8D287A7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
Manifest number:          0D
Signing time:             Sat 18 Apr 2026 04:09:51 +0000
Manifest this update:     Sat 18 Apr 2026 04:04:51 +0000
Manifest next update:     Sun 19 Apr 2026 07:51:51 +0000
Files and hashes:         1: AEB6C1171350C22B2084932E16868862A537F167.crl (hash: 55GsGwA9L7P4Ifp0C1W+7p/uFxTk6nEe1Ljb/+BbJCI=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 07:51:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:7c:5e:4e:ec:7a:1e:db:b9:6f:17:0e:1a:c7:77:8c:8d:28:7a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB6C1171350C22B2084932E16868862A537F167
        Validity
            Not Before: Apr 18 04:04:51 2026 GMT
            Not After : Apr 19 07:51:51 2026 GMT
        Subject: CN=D4D2774B66C772AF5464B4EA5130E7AA102EF89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b0:64:92:b7:2c:fc:37:c6:e3:18:e9:7a:ee:
                    d1:da:c4:38:b3:9e:e4:5a:e7:09:cc:b9:e1:88:97:
                    61:f6:a4:5f:d3:69:f9:25:8c:9e:2b:07:f8:9a:2f:
                    6f:5c:3c:77:f3:32:be:fa:1a:73:63:64:5a:20:37:
                    20:47:80:44:b3:8c:87:ca:c3:78:64:6c:8d:45:e2:
                    d8:fb:dc:4c:90:c2:3f:4c:79:c4:01:46:d9:f5:9f:
                    7c:0f:e0:6e:60:11:0c:47:c4:2c:89:4b:92:4e:10:
                    a4:04:48:72:60:7a:1b:b2:43:8f:d8:d0:3c:e5:bc:
                    06:dd:b4:16:70:38:00:6a:9b:4e:96:be:4d:bf:92:
                    90:41:bd:81:98:3c:2f:cb:05:8c:0a:7a:8a:30:e3:
                    73:4a:30:c1:44:b0:08:a7:25:d6:a0:99:30:24:25:
                    3e:2c:d2:a5:3a:e9:cd:dd:de:c2:8d:af:f9:58:4c:
                    42:9c:a5:d5:75:bd:11:d2:64:71:91:f4:ba:8f:7c:
                    a4:13:7d:fb:11:1c:5d:d4:84:fa:83:60:1f:29:2b:
                    16:e3:91:b5:21:ad:46:08:15:9a:0e:14:b9:f7:c9:
                    0f:f9:7e:b2:1e:78:05:92:2f:42:ab:63:72:fb:76:
                    c8:e1:e0:d4:ea:ab:ea:da:42:fc:7b:f5:02:da:f5:
                    c5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D2:77:4B:66:C7:72:AF:54:64:B4:EA:51:30:E7:AA:10:2E:F8:9B
            X509v3 Authority Key Identifier:
                keyid:AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:38:97:dc:0b:e3:9e:c1:3a:4b:6b:62:b3:e3:30:b8:48:3a:
         02:1e:c6:00:f3:59:d3:75:60:ae:90:ae:6c:0f:2e:da:67:a7:
         02:0c:7a:76:6b:cc:0f:31:46:de:46:a2:c6:64:6b:84:b4:ac:
         ba:b4:d9:5c:7a:d2:d0:c8:26:57:80:a2:17:69:c6:3c:67:57:
         a4:dd:16:fe:a7:1c:92:21:c0:07:24:24:c3:50:48:44:fd:f1:
         df:65:4f:0f:68:96:e6:89:8b:78:cc:b6:7e:73:2c:27:ab:2c:
         36:fc:34:ad:81:63:43:a5:2f:3c:69:a9:70:9b:fc:85:9b:a3:
         ba:08:09:9b:d7:66:b6:8d:34:c4:de:5b:2c:ee:59:c4:3d:e4:
         1c:85:ce:f8:69:5a:ac:9c:7a:9b:f6:48:b3:08:cd:e4:22:45:
         47:08:84:a5:cb:4d:91:ca:e7:b1:14:dc:c7:bc:cb:b6:0c:86:
         56:0a:4a:7d:1d:64:3b:b1:2a:ba:cb:1a:fe:e8:20:70:9a:af:
         87:53:be:72:57:1a:6b:be:c4:14:d3:14:9a:bc:2b:ee:4d:88:
         b2:1c:3b:a1:34:f3:5d:8a:3d:60:ce:9c:5a:1d:97:94:dd:07:
         b1:3e:9a:80:ff:57:3e:0c:b7:6e:ef:25:e8:d0:84:74:84:0b:
         0c:f3:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 01:11:27 2026 by rpki-client