Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
File:                     4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft (raw, json)
Hash identifier:          JpxaZfJF51EH2RmK51U8PveQEJVJPJNCt5qH9DDPckg=
Subject key identifier:   42:72:90:92:30:57:FA:FF:BE:1C:3C:DC:90:AC:30:94:87:07:20:5A
Authority key identifier: 4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4
Certificate issuer:       /CN=A91209740000/serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
Certificate serial:       273E93988D4C47339EA26CDCE0B03F5FC29B9FA4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
Manifest number:          02A2
Signing time:             Sat 18 Jul 2026 00:36:25 +0000
Manifest this update:     Sat 18 Jul 2026 00:31:25 +0000
Manifest next update:     Sun 19 Jul 2026 03:23:25 +0000
Files and hashes:         1: 4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl (hash: gT5vze9vGM7ozoWhaP/dAIwff0PzrMHFfd/V3NMjWj4=)
                          2: AS132203.roa (hash: fZ2Dzcmlcda8QriWm9MPFFha68GDZGAYoxuOF8fzv/k=)
                          3: AS45090.roa (hash: 9z/vGwk9GoR4CuDglXxJBbz0kxT3UXkooKIlTGvAJ1I=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Jul 2026 03:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:3e:93:98:8d:4c:47:33:9e:a2:6c:dc:e0:b0:3f:5f:c2:9b:9f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=4C9E671EAD464E04623BB043FD62E7BA2A77EDD4
        Validity
            Not Before: Jul 18 00:31:25 2026 GMT
            Not After : Jul 19 03:23:25 2026 GMT
        Subject: CN=427290923057FAFFBE1C3CDC90AC30948707205A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:40:8f:03:4e:c0:b4:b9:9c:bf:4c:e5:e5:52:
                    61:f0:46:c0:78:88:4a:40:aa:7d:76:d3:cf:97:0d:
                    50:15:0d:75:9a:e1:71:ce:fa:69:6b:51:dd:34:0d:
                    4d:90:c5:24:23:56:07:59:4a:ba:0d:fd:c9:25:bf:
                    02:3e:83:ee:bc:4d:e8:8c:d6:c2:3a:93:78:07:47:
                    4c:9a:4c:5a:12:fc:8c:bd:36:90:55:66:5b:65:48:
                    bd:90:dc:a1:0f:eb:f8:3a:e6:f8:f0:43:76:d7:d1:
                    e8:3a:6a:bb:4f:96:42:86:0e:a6:de:c9:69:94:90:
                    62:5c:1e:f7:2d:77:f1:c8:7c:9e:fd:f5:0a:a8:6d:
                    64:c6:91:6d:89:0a:06:59:df:5b:d0:fe:e1:c9:e1:
                    25:e8:13:15:15:64:18:c2:a0:35:cb:57:59:54:51:
                    33:4e:db:a8:f7:62:4f:f6:f0:bf:16:21:16:d1:f1:
                    50:6f:fe:15:87:c0:c0:e1:71:fe:16:72:b4:fa:9c:
                    5f:6d:99:fc:b5:25:39:c9:04:f8:e2:32:f0:ff:a5:
                    cb:e3:7c:86:18:75:0b:da:0a:6e:d7:99:59:7c:cf:
                    52:3b:76:0d:c2:07:0b:da:5a:f4:8f:f7:cb:4a:9d:
                    6e:98:43:b7:b6:3e:60:78:85:c2:d8:4a:7a:5b:47:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:72:90:92:30:57:FA:FF:BE:1C:3C:DC:90:AC:30:94:87:07:20:5A
            X509v3 Authority Key Identifier:
                keyid:4C:9E:67:1E:AD:46:4E:04:62:3B:B0:43:FD:62:E7:BA:2A:77:ED:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TJ5nHq1GTgRiO7BD_WLnuip37dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/1/4C9E671EAD464E04623BB043FD62E7BA2A77EDD4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:51:e1:73:e7:99:86:39:8e:52:9a:74:e7:be:cf:78:45:
         18:d1:b5:9f:9f:55:d2:c5:56:8a:e1:2f:95:ca:d4:1c:f5:bc:
         f5:70:6b:04:23:e1:b4:f4:61:5d:7d:d9:66:20:b8:cf:78:92:
         80:5d:e9:76:c1:8f:5a:6e:75:15:8e:69:b2:f9:32:51:53:2d:
         b0:7b:de:1d:95:66:3d:e9:c6:da:d7:9b:80:49:51:09:02:0d:
         1e:51:c7:aa:b8:8b:73:f2:74:30:20:56:2d:f6:8f:46:fd:a9:
         4b:19:05:86:a2:1a:29:ab:df:9e:0d:33:31:f9:be:7b:4c:10:
         15:08:bb:5a:3c:32:ca:cd:0e:11:dc:bb:5f:c0:df:c7:e6:c2:
         4c:2b:7f:6e:f6:fd:4f:d3:36:60:12:3a:0d:09:cd:5a:c9:95:
         5f:aa:3e:e1:74:e2:0a:c9:9c:6e:fc:10:dc:4a:13:60:f6:7f:
         46:d0:f8:5b:ab:08:c2:3f:d4:5d:8a:96:b2:43:53:7b:fb:e7:
         59:52:2a:9f:34:42:1f:bc:73:6d:88:00:2a:9a:be:4c:b0:f0:
         bc:d5:1b:4a:0e:a0:8d:7c:ba:96:ac:5e:32:c3:91:ae:c4:de:
         d1:4d:90:73:b2:c0:17:ad:be:35:44:7b:b8:14:39:fa:90:d7:
         af:3a:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:42 2026 by rpki-client