Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft
File:                     0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft (raw, json)
Hash identifier:          f5McLYJW8SxpVsA/W6am9GTrCxoLk+j3OH6qSooFAqk=
Subject key identifier:   5B:16:BB:89:B7:66:9A:6C:57:7F:D0:30:24:33:20:D9:93:FC:D6:7E
Authority key identifier: D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED
Certificate issuer:       /CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
Certificate serial:       0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft
Manifest number:          0452
Signing time:             Fri 24 Jul 2026 08:01:34 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:34 +0000
Manifest next update:     Sun 23 Aug 2026 08:01:34 +0000
Files and hashes:         1: 0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl (hash: qI8z9WdLptiHjLx7p0ZmDbwLD6vixPgEOqk8WFXfIKA=)
                          2: XaXXlOUMhQT6ePtKKR_EMyIABzk.roa (hash: CQ0JS7zOwGpTD7YMI5nL7apkRGzrSkatScOru8O89RM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A4C934C5490DF6144A05EB1E6E605EB2AE13ED
        Validity
            Not Before: Jul 15 01:30:27 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=5B16BB89B7669A6C577FD030243320D993FCD67E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:21:cd:6a:78:6f:e4:e5:81:08:6d:fb:44:
                    3b:8b:89:da:f3:61:dd:95:59:2e:3e:77:b0:9e:e9:
                    e5:d1:8f:2d:eb:36:9b:4e:91:9d:4e:0d:60:39:5c:
                    90:69:7f:54:5b:a3:dc:d9:16:12:46:b6:70:25:03:
                    be:89:98:aa:42:2e:34:da:c8:20:c3:c3:58:00:7c:
                    04:cf:7c:53:80:15:c7:59:d6:2e:cc:69:72:f7:47:
                    a7:60:47:db:d8:1d:49:5f:74:f7:fd:8c:99:71:41:
                    43:df:e0:25:77:e7:24:ca:11:3a:2b:48:74:66:6e:
                    ac:ef:c1:8e:7d:db:84:48:b0:d5:47:7e:a2:57:d9:
                    57:cd:c5:78:cb:e2:30:e6:0b:f9:20:bf:ee:1b:31:
                    39:f7:e3:47:22:19:eb:37:06:e4:98:d9:94:5b:40:
                    78:5a:45:5e:8a:78:1d:6a:93:52:08:cf:fd:ae:92:
                    e2:0a:54:16:66:ef:11:ac:9f:25:1b:f8:17:70:49:
                    71:8b:f3:d8:0a:e5:07:75:cd:12:52:81:6f:1b:2e:
                    46:8b:2a:e4:cf:7c:8d:66:91:fd:f7:87:79:7d:b5:
                    a1:09:df:0f:64:d1:08:68:17:31:8d:84:ab:d3:60:
                    ad:e7:35:5e:8e:b4:d5:b9:40:94:58:60:09:b4:ee:
                    94:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:BB:89:B7:66:9A:6C:57:7F:D0:30:24:33:20:D9:93:FC:D6:7E
            X509v3 Authority Key Identifier:
                keyid:D0:A4:C9:34:C5:49:0D:F6:14:4A:05:EB:1E:6E:60:5E:B2:AE:13:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KTJNMVJDfYUSgXrHm5gXrKuE-0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2007/0KTJNMVJDfYUSgXrHm5gXrKuE-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:d4:f7:76:f1:d1:af:73:b2:6b:17:86:83:bf:d2:8d:80:37:
         ae:13:70:be:d7:c4:48:7b:10:7c:c6:88:95:57:9b:19:cf:5a:
         33:19:87:2c:c1:4e:82:c9:09:98:b3:6a:01:0d:86:45:cc:d1:
         6d:c8:00:63:6d:52:0f:2f:8b:f8:f4:74:0b:15:98:31:b2:4b:
         d8:98:24:21:97:ee:ad:12:49:82:a1:20:e6:21:f2:6f:e7:c1:
         d8:17:cf:fe:8f:22:89:16:e7:fd:5a:c4:a1:a9:53:66:9b:3f:
         77:0e:19:92:c3:b1:57:e9:79:d8:dc:33:d8:3c:8e:b9:2b:b0:
         fc:8b:0b:c6:af:cb:6c:13:12:9c:9d:da:36:ef:67:5b:14:9d:
         92:72:e9:b5:08:80:e9:6b:21:3f:c8:2d:42:3e:b3:20:f2:cb:
         85:0c:a5:fe:72:8c:6f:dd:53:c7:d7:7f:61:e0:fa:c6:2e:01:
         6b:a7:94:47:d4:63:98:0b:ac:0f:c7:46:6c:da:a3:a6:63:bb:
         60:c1:37:26:43:bd:63:81:3a:ac:67:00:39:20:f5:23:53:22:
         30:a1:1c:f3:cb:f4:e8:f9:74:10:b3:2a:68:80:06:0f:d2:a9:
         8a:de:67:7e:41:d1:78:d9:9d:89:43:c5:55:6a:8e:9a:93:ee:
         c8:34:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:09 2026 by rpki-client