Manifest

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
File:                     AEB6C1171350C22B2084932E16868862A537F167.mft (raw, json)
Hash identifier:          VXdXGklsxEofO7kmCTczmrSE1cM1H2sQTxBEKv+rNC8=
Subject key identifier:   B3:EA:F7:58:2E:2E:39:FA:16:5D:49:77:80:A3:E1:E6:66:52:7B:73
Authority key identifier: AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67
Certificate issuer:       /CN=AEB6C1171350C22B2084932E16868862A537F167
Certificate serial:       42B5D04EE079CBD506488627A8B0119423335642
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
Manifest number:          C0
Signing time:             Thu 03 Sep 2026 18:53:55 +0000
Manifest this update:     Thu 03 Sep 2026 18:48:55 +0000
Manifest next update:     Mon 07 Sep 2026 02:44:55 +0000
Files and hashes:         1: AEB6C1171350C22B2084932E16868862A537F167.crl (hash: kbdxYki7psLezghUCX/UYyctzK4RrFIlyHAf2QzKfGE=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 10:41:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:b5:d0:4e:e0:79:cb:d5:06:48:86:27:a8:b0:11:94:23:33:56:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB6C1171350C22B2084932E16868862A537F167
        Validity
            Not Before: Sep  3 18:48:55 2026 GMT
            Not After : Sep  7 02:44:55 2026 GMT
        Subject: CN=B3EAF7582E2E39FA165D497780A3E1E666527B73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:f6:5c:02:75:c0:8c:21:1f:56:06:67:ca:
                    58:5b:39:9e:90:4d:42:10:d1:f6:4f:24:61:85:2c:
                    b4:fe:9d:0b:46:52:a7:9e:f6:89:bb:bd:b6:93:85:
                    95:91:e8:9d:d8:5f:76:23:69:0b:b4:5b:ab:f5:1a:
                    f2:0e:cf:f0:00:73:69:c2:2f:69:31:37:0a:5a:55:
                    4d:ed:3a:49:dc:b1:ef:7f:4f:63:39:b9:62:58:00:
                    cf:44:35:76:06:4c:80:9b:84:0d:ee:bf:14:ea:22:
                    3d:c8:9e:b9:38:6e:09:b8:12:76:4c:74:7a:77:35:
                    fc:2a:bf:1a:e0:03:d3:39:70:58:e0:30:02:de:5b:
                    c2:d8:f5:bf:e6:ad:89:32:e4:72:26:f4:88:e9:2e:
                    08:cb:c8:6d:70:0c:27:f3:55:bf:d9:d5:63:cc:f6:
                    35:16:d0:3e:20:a3:2d:71:05:fe:c4:66:f7:24:ec:
                    b7:a6:62:f6:c4:55:9d:56:c1:52:ad:66:a8:28:3e:
                    22:b1:c3:9a:12:d7:21:e2:02:85:f4:2e:fe:ea:28:
                    9e:3f:72:79:09:1a:04:38:fe:5c:17:95:6b:d3:c7:
                    47:6e:b5:a1:50:58:98:31:68:f5:b8:28:30:47:56:
                    b9:71:32:b5:5b:57:f9:f0:9e:e1:65:15:b4:2e:3e:
                    0c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:EA:F7:58:2E:2E:39:FA:16:5D:49:77:80:A3:E1:E6:66:52:7B:73
            X509v3 Authority Key Identifier:
                keyid:AE:B6:C1:17:13:50:C2:2B:20:84:93:2E:16:86:88:62:A5:37:F1:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AEB6C1171350C22B2084932E16868862A537F167.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094468310696722435/0/AEB6C1171350C22B2084932E16868862A537F167.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:19:41:80:18:f2:cc:d3:65:14:14:57:ce:81:df:8b:67:d4:
         bd:fe:f8:1b:7c:2c:ac:cd:f0:a0:7c:ec:0c:17:6d:4a:8f:78:
         ba:91:4e:cc:67:31:f8:4c:8f:a0:4d:12:85:71:b6:61:87:08:
         2b:14:97:6d:07:5c:63:26:f5:35:9d:a4:3f:9b:12:bf:7e:96:
         23:14:5d:1b:44:5c:fa:b1:d6:a2:4b:c4:99:fe:f7:f4:08:f6:
         06:17:f3:62:73:98:c9:82:88:f6:80:1a:f0:8c:38:57:87:4c:
         69:db:78:f8:5b:14:c9:db:d0:58:75:99:ac:73:94:06:2a:10:
         05:20:41:98:97:05:36:6e:24:7e:94:82:c5:90:d2:b3:eb:b0:
         2d:2d:67:cc:f8:7d:3a:0d:69:df:1a:f7:0d:32:61:1e:a0:d1:
         a8:1c:ab:1e:d9:24:93:c3:70:91:67:a1:89:fb:37:a2:9d:d2:
         3e:ef:dc:3a:e3:43:30:ff:7a:3e:af:c5:78:22:6c:d9:d0:d9:
         b5:d9:2e:cd:c8:dc:01:31:49:48:08:35:dd:13:b2:31:45:64:
         5c:74:d3:1b:7c:b2:f4:5e:9b:d3:4e:b6:1d:fd:c6:df:c5:72:
         d9:c6:84:f0:3c:6d:eb:c8:60:4f:e7:60:c7:ed:5f:ad:71:75:
         06:da:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:21:09 2026 by rpki-client