Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
File:                     8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft (raw, json)
Hash identifier:          hUaS3qmbPGKhqEaVDL4qvI7Pz7AWKVY/o3cKIxcXf3o=
Subject key identifier:   C3:78:75:D7:47:AA:86:59:9B:B8:9E:32:B9:4B:6C:6A:BA:C6:77:54
Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62
Certificate issuer:       /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
Certificate serial:       2A7D87CC18D2B8307F9E54A35E64695D6328715D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
Manifest number:          7E
Signing time:             Fri 17 Jul 2026 17:51:21 +0000
Manifest this update:     Fri 17 Jul 2026 17:46:21 +0000
Manifest next update:     Sat 18 Jul 2026 18:20:21 +0000
Files and hashes:         1: 8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl (hash: tev2sMvUNVIOWM4YcGd1yrJ7R9KSF02eDE5S4r7SOko=)
                          2: AS7497.roa (hash: Y/zfyPennx+DRI8BGLvU/n1ZQD1T1L8KB7R1aNj5vzE=)
                          3: AS3460.roa (hash: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 18:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:7d:87:cc:18:d2:b8:30:7f:9e:54:a3:5e:64:69:5d:63:28:71:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162
        Validity
            Not Before: Jul 17 17:46:21 2026 GMT
            Not After : Jul 18 18:20:21 2026 GMT
        Subject: CN=C37875D747AA86599BB89E32B94B6C6ABAC67754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:d0:ed:fc:07:aa:d9:8e:7c:fe:57:ad:cd:
                    8b:35:84:30:7c:3b:88:56:6d:fe:83:2c:6c:3e:d5:
                    c7:1a:69:5f:35:a3:70:02:0f:55:1c:43:9e:08:83:
                    83:23:80:b0:b5:f5:75:9d:aa:36:f0:84:9a:48:75:
                    fd:65:1b:ee:24:aa:a6:2f:c2:25:1c:d2:4d:e2:0e:
                    2b:10:0f:ec:68:a0:0a:cd:c5:57:63:e2:d7:5c:7f:
                    e3:a2:db:94:fb:8d:a3:e5:e6:6c:2e:d8:76:5e:1f:
                    58:d0:54:e2:d1:b7:da:b1:14:a3:aa:11:b9:55:c6:
                    be:b3:db:af:1e:25:fb:61:b3:15:1f:75:3d:3f:54:
                    10:5f:dc:17:d9:94:73:c0:a7:92:b9:fd:36:f2:83:
                    bf:87:4e:b8:ca:d4:13:7c:34:9b:69:40:53:1e:b8:
                    d4:ff:1e:18:6a:a0:0f:99:63:50:92:f2:05:22:f4:
                    64:e3:2b:74:7c:dd:5e:47:df:4b:dc:c8:0a:a1:6f:
                    fc:ef:78:f3:1e:df:4e:c8:fa:e5:3d:bb:96:8d:41:
                    43:8d:3c:5d:4c:53:58:12:c6:42:99:5f:51:1c:8f:
                    91:58:57:87:01:c6:43:ec:d9:a1:af:6a:b8:e1:a3:
                    b0:52:e5:ec:65:0d:a2:a3:7b:63:87:a9:43:bb:70:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:75:D7:47:AA:86:59:9B:B8:9E:32:B9:4B:6C:6A:BA:C6:77:54
            X509v3 Authority Key Identifier:
                keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:05:b5:d8:4d:d1:79:da:43:d5:e2:72:9e:76:18:d0:f4:59:
         29:a9:c3:ec:09:38:59:ee:69:81:98:30:b8:53:8d:d9:c0:c4:
         30:dc:74:fb:f6:3d:33:e1:4f:d3:38:b0:31:c5:6a:59:5c:08:
         e2:64:72:5d:77:a8:be:df:91:3c:68:8b:a4:63:94:3f:37:e2:
         98:30:8e:a6:1b:aa:d8:89:ab:ef:f5:86:9d:b0:8e:57:e5:05:
         a4:1c:03:5d:88:20:8a:8b:59:54:64:49:80:4d:66:af:a8:db:
         54:d4:ae:8c:42:9b:fb:13:a8:a0:dd:2c:a0:b5:8f:8a:f0:27:
         87:f9:55:d7:41:75:9b:ce:fd:bd:3d:a0:dd:4f:e2:2a:ed:52:
         75:18:b9:06:40:19:9e:f4:8b:a4:8c:86:45:31:9c:c5:cd:1d:
         a7:a9:13:1f:ba:be:fa:84:ee:16:88:b1:b9:e7:bb:d7:58:77:
         cb:0e:39:c9:6f:0f:86:d9:9e:c8:b3:66:24:41:13:c5:3b:85:
         26:f3:9d:61:72:1c:3a:d1:ff:1d:d9:1e:90:d4:16:7c:ef:3a:
         de:d2:7d:c5:b9:23:f7:4e:3c:eb:f6:37:7e:2f:43:82:58:a1:
         ce:18:5e:8d:0d:7d:c6:03:e9:b1:aa:a5:21:0a:46:1c:ba:7d:
         3c:69:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:58 2026 by rpki-client