Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
File:                     6845D331C417296D3A93181DD9010591B1F70D50.mft (raw, json)
Hash identifier:          JH/huGz198KT4gD6iMWNCWnK6K81UNbZ+Ic48jR7EwA=
Subject key identifier:   30:0A:46:9F:93:3B:37:B4:17:1B:45:38:C0:DE:9F:1A:CE:4F:B5:F0
Authority key identifier: 68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50
Certificate issuer:       /CN=A91209740000/serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
Certificate serial:       56A0C7AA86058488C07189DA9B5C79025C259B79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
Manifest number:          0291
Signing time:             Sun 05 Jul 2026 00:36:12 +0000
Manifest this update:     Sun 05 Jul 2026 00:31:12 +0000
Manifest next update:     Mon 06 Jul 2026 01:22:12 +0000
Files and hashes:         1: 6845D331C417296D3A93181DD9010591B1F70D50.crl (hash: mdJvROyL/M1DMgxWS+ZhkF6N+UCW8VPL/yj5rJB+JhM=)
                          2: AS45090.roa (hash: HEeeGmrOuHbjsvEBYWjApEe9XYDpObqvfUUdLqGqjVU=)
                          3: AS132203.roa (hash: LCoS0er/7zh/bY2O8Xb/4U/28JPzEL9/b42FKGTNuk0=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 Jul 2026 01:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:a0:c7:aa:86:05:84:88:c0:71:89:da:9b:5c:79:02:5c:25:9b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91209740000, serialNumber=6845D331C417296D3A93181DD9010591B1F70D50
        Validity
            Not Before: Jul  5 00:31:12 2026 GMT
            Not After : Jul  6 01:22:12 2026 GMT
        Subject: CN=300A469F933B37B4171B4538C0DE9F1ACE4FB5F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:a6:50:e4:07:36:35:bd:df:cc:25:f1:75:
                    54:93:e7:cf:0b:7f:b1:37:40:c4:0a:10:61:9e:a1:
                    d9:2d:6c:49:7d:42:59:29:0c:b4:93:a2:e2:1e:b3:
                    73:90:57:85:21:fa:27:8e:e4:e4:b9:5a:82:6d:cc:
                    13:0f:c3:52:59:00:d4:6c:a6:f2:c1:a5:11:34:4e:
                    5f:8a:e6:c5:b0:3a:c7:45:f4:e3:f1:60:80:20:5e:
                    93:d8:02:44:37:83:b1:be:f6:c3:ab:48:c4:6f:c7:
                    14:ee:24:9a:11:e0:e5:c6:f0:3b:35:2a:36:a7:d8:
                    72:08:18:27:b4:5f:de:da:90:c9:73:43:12:9a:77:
                    43:25:ba:cb:fb:03:9b:5d:3c:1b:e9:46:99:41:22:
                    0e:86:0d:99:fd:a3:df:9d:4f:bc:4a:9d:48:63:21:
                    41:d8:60:2c:f8:fc:8b:a1:cd:9d:78:d0:7a:8a:c3:
                    2d:9c:64:ca:7c:f2:5a:2f:72:53:7b:53:0d:aa:f9:
                    ec:a6:6a:80:0c:8c:83:3e:06:4c:ee:0b:cf:87:9f:
                    c4:42:46:c4:97:db:21:a5:9f:f7:2c:2c:77:9b:67:
                    f7:5b:b0:1d:99:2e:9b:36:5c:93:28:37:dc:af:06:
                    1a:e1:1c:92:e7:fe:94:19:c5:1c:23:8e:03:69:f5:
                    f7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0A:46:9F:93:3B:37:B4:17:1B:45:38:C0:DE:9F:1A:CE:4F:B5:F0
            X509v3 Authority Key Identifier:
                keyid:68:45:D3:31:C4:17:29:6D:3A:93:18:1D:D9:01:05:91:B1:F7:0D:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aEXTMcQXKW06kxgd2QEFkbH3DVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121615833404080165/2/6845D331C417296D3A93181DD9010591B1F70D50.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:26:fd:85:c5:84:18:e5:45:78:09:dd:56:69:62:e6:d8:c0:
         48:4f:f4:73:93:2d:da:a9:0e:bc:3c:6f:2c:58:95:cb:11:b4:
         f2:31:0f:2e:47:19:0d:0d:64:53:14:ea:d0:fb:52:08:4c:a2:
         41:16:e6:01:56:37:62:a0:96:24:37:10:6c:98:22:14:48:ff:
         00:8f:d8:a2:85:4d:67:df:15:12:27:d9:b6:42:b2:db:cf:a3:
         b1:ee:03:5d:32:71:6a:0e:92:6c:28:88:ac:90:35:c0:23:e2:
         ff:8d:cb:97:d7:96:cd:a1:39:bc:40:c7:b3:e4:92:28:75:12:
         10:0b:a9:61:b1:1a:6c:69:30:c8:5c:22:f6:39:c2:8f:e8:a5:
         13:df:f0:28:03:12:20:26:5d:3a:5c:c9:97:30:cd:cf:32:cb:
         f6:a2:f7:05:1a:17:42:28:25:2c:f0:5d:63:74:71:18:45:9a:
         d1:7e:8d:80:7f:ce:ba:1f:87:f6:bc:fd:47:a2:4c:81:af:44:
         f4:81:fe:9f:a2:0d:34:93:dd:76:34:5f:05:29:99:4f:1b:9e:
         96:24:f4:c5:91:2d:e4:52:64:79:d9:4e:33:02:5c:ba:18:28:
         3c:24:f8:f9:18:74:ec:be:b5:82:43:5b:9c:5e:91:48:be:39:
         54:46:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 08:36:16 2026 by rpki-client