Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
File:                     IDGu-ghglvkKwRY7Um329B-HfKw.mft (raw, json)
Hash identifier:          YVeZPxxWM9TLUWddLryldGWs5XFfZCCmawVrhdbEVWw=
Subject key identifier:   95:92:81:A1:A8:8E:24:18:15:5D:0B:0C:2E:13:02:1D:ED:7C:C8:B8
Authority key identifier: 20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC
Certificate issuer:       /CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
Certificate serial:       23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
Manifest number:          0BEC
Signing time:             Thu 26 Mar 2026 08:44:37 +0000
Manifest this update:     Thu 26 Mar 2026 08:44:37 +0000
Manifest next update:     Fri 10 Apr 2026 08:44:37 +0000
Files and hashes:         1: IDGu-ghglvkKwRY7Um329B-HfKw.crl (hash: Ps6kUhK6/wHJNy6TnXnA7b2/F0yWKwJKhDUiJWP20VY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
        Validity
            Not Before: Mar 15 01:44:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=959281A1A88E2418155D0B0C2E13021DED7CC8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:fa:53:3c:d3:22:d1:32:8f:b0:37:23:98:
                    4a:e9:b9:7b:c8:38:b0:92:58:a2:38:c6:f1:fc:85:
                    b3:52:ee:e8:41:2e:20:c9:93:e1:a0:6c:05:d1:69:
                    10:ea:d4:6b:ce:84:c2:59:48:9c:73:d5:b9:3b:bf:
                    ba:50:7d:66:b2:31:f3:a1:be:95:6c:65:4a:dd:3f:
                    c9:a0:dc:a7:51:32:91:43:18:33:02:d8:e2:6a:7e:
                    e9:b8:08:e7:3f:4f:dd:e1:1e:c1:1a:8f:83:20:89:
                    1e:fa:ad:7b:62:51:4e:54:f8:7f:db:7d:4b:96:da:
                    41:aa:e7:1d:3f:3c:91:e8:2b:37:8e:a6:e1:79:97:
                    dd:78:ae:d5:4d:7b:15:b8:6b:a6:93:2e:76:9a:91:
                    4a:99:3b:8a:ce:1b:f0:5a:bf:35:db:7d:c4:a9:23:
                    00:ed:44:01:15:8f:06:a5:77:55:62:bb:3c:b1:02:
                    c2:12:fb:cb:9f:3c:c2:f1:09:26:d1:7d:0a:26:21:
                    0e:44:e6:aa:88:73:4c:b4:02:f2:0a:17:cb:de:3d:
                    47:48:ad:b6:cf:10:b1:38:ad:e4:1c:30:1f:64:42:
                    86:9c:84:2a:df:c5:d0:b5:60:2f:8c:09:11:30:ed:
                    16:72:9d:6a:bc:fb:04:1a:8e:ed:03:ef:8c:ff:12:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:81:A1:A8:8E:24:18:15:5D:0B:0C:2E:13:02:1D:ED:7C:C8:B8
            X509v3 Authority Key Identifier:
                keyid:20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ca:81:bc:1c:f8:fa:ab:d7:c4:9c:c0:cd:a2:2a:61:59:c1:
         0f:c8:d8:12:be:07:c8:b1:4e:f1:4d:94:98:9e:96:c3:b4:48:
         62:42:18:86:44:66:e4:f9:f5:3f:f7:48:b4:cb:d0:14:35:11:
         a8:b7:20:04:25:e1:ee:99:0b:1d:c8:e7:92:9b:48:28:be:4e:
         ff:f1:aa:80:78:49:00:df:e2:71:3d:0e:e7:3b:c1:09:50:2f:
         0d:a3:41:8f:b6:e1:ee:f9:b1:57:1a:ea:ca:96:f8:9a:79:01:
         ab:a0:46:3b:41:9f:4b:79:1c:90:23:fc:18:39:93:98:8f:b5:
         f6:51:5c:34:fa:6a:dd:67:fa:4e:86:0d:92:69:6e:4d:b3:62:
         cc:2a:25:91:c9:f6:c7:2a:cd:db:40:5f:d7:82:97:83:77:e2:
         13:c1:1e:32:eb:9b:b4:1b:03:9c:1d:e8:2c:e5:74:da:de:5d:
         4d:f8:11:dd:37:79:43:35:ee:a9:8d:1e:15:01:c2:f6:27:c4:
         ca:c1:53:f0:20:01:0f:cc:c2:f5:bd:69:cb:6d:ae:09:53:0e:
         ea:f6:3d:ab:8c:91:41:92:72:6d:5f:b8:ab:95:e1:46:f2:c6:
         ab:12:ad:e8:85:7f:87:d9:c2:d1:70:19:4a:f6:30:76:27:c5:
         5b:51:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:56 2026 by rpki-client