Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
File:                     7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft (raw, json)
Hash identifier:          Yj8Cizx6Xl+N0TAM3d/WbBKRKotmUpZQ+/q7vHtzCTw=
Subject key identifier:   2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76
Certificate issuer:       /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
Certificate serial:       2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
Manifest number:          0C02
Signing time:             Thu 26 Mar 2026 05:03:46 +0000
Manifest this update:     Thu 26 Mar 2026 05:03:46 +0000
Manifest next update:     Fri 10 Apr 2026 05:03:46 +0000
Files and hashes:         1: 7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl (hash: blWWf/4WBjhuXojazP0gl4Wpef5DCCNUoQaMbaAJhH4=)
                          2: JDgeaMKQJV5QrEw8FvQvdbx-B7M.roa (hash: Ebn3c/G70pJ3WMwcFxysJ9IT5J1p47JGyO+jwH3KcB8=)
                          3: qFoIeIMO2M3KuT6GqHoeMJugV1o.roa (hash: 1hc4DJuncS1V9gKuN31LUn202vFgw+nBoaEMcwJI1Os=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
        Validity
            Not Before: Mar 15 01:41:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2A59330303DE16FE6523A526B03C8F0915B697BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:4a:5a:51:9c:d6:a4:8d:a4:75:f6:a1:38:
                    e0:b6:0e:0a:ce:9a:87:aa:b6:d1:65:d7:1c:71:da:
                    bf:f7:68:15:db:43:35:17:2c:0d:ae:06:97:7c:e1:
                    2f:6b:9f:c0:20:d5:2c:4e:5f:51:e6:f1:d2:93:aa:
                    6a:6e:f1:95:2f:4b:e3:7b:ee:7d:73:d2:55:86:39:
                    c0:c5:a7:91:21:aa:a7:c2:bc:05:27:43:d5:31:99:
                    52:47:21:34:ec:ea:d1:83:7b:55:18:eb:36:f6:d0:
                    fb:55:0c:ff:d4:f9:e2:ac:9b:2f:08:ee:f9:90:db:
                    f3:c9:d5:e3:9e:f7:3d:c5:b9:c4:0a:d3:18:fb:1d:
                    52:fe:59:6d:39:42:e9:33:9a:ce:7c:59:bc:1a:f5:
                    a5:a8:17:7a:5c:0f:49:fe:0f:61:33:73:34:85:9e:
                    c7:1b:40:d7:de:30:31:e1:32:17:02:a0:31:d4:ba:
                    ff:2c:84:1e:15:58:e5:23:54:27:b9:b0:61:a1:85:
                    55:f5:36:87:61:66:1e:5c:1c:72:f0:36:a3:cf:cf:
                    b4:5b:ec:1e:b2:00:bf:ef:a5:16:1b:a8:39:4e:0f:
                    21:c5:c5:8c:74:51:0c:b6:3d:31:c0:69:96:17:ef:
                    2e:50:43:d3:11:2f:8c:ef:d1:38:54:e8:41:87:97:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
            X509v3 Authority Key Identifier:
                keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a5:7f:d8:15:2a:c1:42:ae:29:f6:c0:5a:44:be:f3:ee:c4:
         e5:6a:70:21:cb:1b:86:7c:39:4f:a2:37:02:e9:18:56:08:90:
         ce:a7:b3:cd:b0:1e:99:22:e2:05:b8:55:8f:34:46:f8:53:07:
         e5:43:5e:75:e3:64:c4:4a:51:ad:15:89:22:c4:ca:5d:32:47:
         be:77:1b:55:a9:ee:32:1e:9c:44:4b:0d:8a:f2:88:9e:0c:e9:
         c6:32:48:9f:17:d7:07:47:59:56:0c:f4:8c:d0:e1:9a:37:b9:
         53:e0:73:7c:23:e5:fc:09:e9:8c:ab:b6:e1:57:04:02:72:e3:
         22:11:7c:a4:1b:00:a7:69:ca:e4:06:72:82:3d:42:be:97:b4:
         ad:03:27:b7:66:61:6c:5e:a9:16:2c:4b:80:91:eb:68:63:a8:
         c1:16:d0:9a:68:7a:d3:9e:cf:af:47:2a:85:7a:6d:6d:c5:d6:
         ad:a8:f6:3d:77:f4:c7:0d:b2:72:20:d9:8e:e0:f7:c9:7f:fa:
         8d:01:2b:1f:db:13:5e:b4:c2:84:33:96:87:b8:4f:aa:66:96:
         32:ba:23:8a:bb:95:53:68:06:4e:a9:33:91:cd:b8:27:0e:c5:
         54:2f:37:0c:cc:05:84:d9:fa:aa:cc:4a:be:3c:5a:3a:b1:7f:
         20:8f:3d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:42 2026 by rpki-client