Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
File:                     xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft (raw, json)
Hash identifier:          KIxr8H4TaG9FTkYfm4XpO437uFFqa0vPyxIrnhADVP4=
Subject key identifier:   18:C0:8A:2A:FD:F1:25:C8:2F:77:85:A6:24:21:EB:DE:E0:AF:E9:B6
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
Manifest number:          D1
Signing time:             Thu 26 Mar 2026 16:37:02 +0000
Manifest this update:     Thu 26 Mar 2026 16:37:02 +0000
Manifest next update:     Fri 10 Apr 2026 16:37:02 +0000
Files and hashes:         1: IvRCtjGGOvp5Qe0xq1IySe-OGvA.roa (hash: 9jSJ0eq8POtkIY5OWmTSpPh85i0iIWTFryydLrz7Q+0=)
                          2: tDTs61EyugE7EeFyS40fAolcWDM.roa (hash: uwcwymSeAynx/YJcSi16AJtddaGOwZR2Mmu98t76vwc=)
                          3: xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl (hash: EMdEVnX5NLzP4LcfIslhA3UTS1nsEMkrSy2ZvZKXeyA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Mar 15 01:37:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=18C08A2AFDF125C82F7785A62421EBDEE0AFE9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:90:da:49:64:42:f1:c2:b6:de:37:8a:c7:
                    d3:f4:1a:16:16:55:4c:35:fb:d5:4e:8f:c3:56:73:
                    89:34:e4:56:e4:7f:4f:9f:ae:4a:f7:ec:24:af:50:
                    76:bc:a6:4d:8b:c3:c5:a8:bd:bb:6f:a8:fe:c8:b3:
                    6c:97:0a:e4:40:84:f8:b9:58:69:fc:ec:61:14:fb:
                    e2:85:45:59:b7:54:66:3a:c9:92:7e:a7:25:f5:c2:
                    24:5f:cb:0f:50:0a:b1:ea:11:88:6f:b5:f5:94:e7:
                    a7:04:2d:1b:5a:d0:cf:50:8e:7c:4a:cf:6d:00:a1:
                    49:67:3f:c0:36:32:40:c4:a5:c6:16:a5:27:43:a0:
                    49:c0:78:d0:04:a3:a1:d2:0f:c9:a6:ad:65:4d:1e:
                    f5:5b:62:1d:ee:ae:a6:87:46:f7:18:7b:91:a6:13:
                    05:5f:ae:10:12:e5:62:25:3a:f7:e9:6d:6a:4c:fa:
                    5c:87:c9:55:7c:22:e8:0f:da:d3:3f:e2:ec:23:d9:
                    f9:48:da:29:ae:8a:6a:33:95:a0:1a:ca:7e:81:ef:
                    b4:68:df:36:c1:c6:71:28:4a:88:cf:e8:44:fc:db:
                    9c:b5:2c:ba:ea:1b:e4:16:ac:de:b1:62:00:ed:10:
                    5e:a0:29:2a:06:b9:c6:ea:d8:b1:b8:9c:a0:6c:53:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:8A:2A:FD:F1:25:C8:2F:77:85:A6:24:21:EB:DE:E0:AF:E9:B6
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e7:5c:43:6e:f4:eb:5d:38:23:cf:23:c7:7c:f4:86:41:73:
         08:1e:36:7f:58:95:0c:52:b4:ed:2f:80:fe:61:c1:87:7c:33:
         63:8f:62:e1:fd:ab:e7:da:46:86:c2:f7:17:45:99:2f:45:cc:
         ae:ee:3d:9a:20:3a:d6:61:43:9b:fb:93:74:68:f5:26:20:a7:
         e5:d5:55:ee:01:cf:e7:7e:37:7f:71:45:5a:7a:60:73:1b:1a:
         a8:e3:33:18:75:43:80:df:6d:12:d8:06:64:98:39:5f:a1:6e:
         8f:5b:a5:2f:5a:35:db:89:49:c3:8c:21:e6:79:5f:b5:5a:45:
         26:f5:7b:f4:b8:25:75:ef:09:67:ea:22:7c:77:20:73:9b:f7:
         de:1e:44:67:ca:45:3b:66:9c:16:32:7e:99:96:8e:24:49:46:
         6b:b2:f3:b8:da:32:4c:35:4b:70:70:f3:9c:dc:81:24:6d:53:
         64:0c:4b:c9:a3:af:1f:a3:64:6b:2e:6b:9c:d5:32:bb:21:40:
         96:71:97:c1:2c:13:92:8e:de:7a:9f:8a:c3:d1:e1:f0:a2:67:
         e5:a4:2c:56:55:8e:34:15:62:fe:5d:7f:35:11:79:2d:be:c4:
         87:d7:7e:81:65:69:5c:61:4c:ba:ba:b7:79:81:5c:75:8e:96:
         91:8b:b7:c6
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNTU2
RUU1Q0VEMDMzQkM2QTFEMUQyRUZDQ0Y5ODIxNjIwOEM3REQxMB4XDTI2MDMxNTAx
MzczNVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMThDMDhBMkFGREYxMjVD
ODJGNzc4NUE2MjQyMUVCREVFMEFGRTlCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfUkNpJZELxwrbeN4rH0/QaFhZVTDX71U6Pw1ZziTTkVuR/T5+u
SvfsJK9QdrymTYvDxai9u2+o/sizbJcK5ECE+LlYafzsYRT74oVFWbdUZjrJkn6n
JfXCJF/LD1AKseoRiG+19ZTnpwQtG1rQz1COfErPbQChSWc/wDYyQMSlxhalJ0Og
ScB40ASjodIPyaatZU0e9VtiHe6upodG9xh7kaYTBV+uEBLlYiU69+ltakz6XIfJ
VXwi6A/a0z/i7CPZ+UjaKa6KajOVoBrKfoHvtGjfNsHGcShKiM/oRPzbnLUsuuob
5Bas3rFiAO0QXqApKga5xurYsbicoGxT3FkCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQYwIoq/fElyC93haYkIeve4K/ptjAfBgNVHSMEGDAWgBTFVu5c7QM7xqHR0u/M
+YIWIIx90TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMTAveFZidVhPMERPOGFoMGRMdnpQbUNGaUNNZmRFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveFZidVhPMERPOGFoMGRMdnpQbUNG
aUNNZmRFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDEwL3hWYnVYTzBETzhhaDBkTHZ6UG1DRmlDTWZkRS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+51xDbvTrXTgjzyPHfPSGQXMIHjZ/WJUMUrTtL4D+YcGHfDNjj2Lh
/avn2kaGwvcXRZkvRcyu7j2aIDrWYUOb+5N0aPUmIKfl1VXuAc/nfjd/cUVaemBz
Gxqo4zMYdUOA320S2AZkmDlfoW6PW6UvWjXbiUnDjCHmeV+1WkUm9Xv0uCV17wln
6iJ8dyBzm/feHkRnykU7ZpwWMn6Zlo4kSUZrsvO42jJMNUtwcPOc3IEkbVNkDEvJ
o68fo2RrLmuc1TK7IUCWcZfBLBOSjt56n4rD0eHwomflpCxWVY40FWL+XX81EXkt
vsSH136BZWlcYUy6urd5gVx1jpaRi7fG
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:13:11 2026 by rpki-client