Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
File:                     ycrrDhoGe5-iYkk_qDahm97roDA.mft (raw, json)
Hash identifier:          k+Tnzq9LkQ6P5OMdlzcWAQuIQgtE2PEN2N/dRvDoHKA=
Subject key identifier:   D2:39:5A:97:9F:8F:37:12:73:A6:74:9F:90:A6:32:2B:A3:A2:F9:CC
Authority key identifier: C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30
Certificate issuer:       /CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
Manifest number:          22
Signing time:             Tue 12 May 2026 21:31:10 +0000
Manifest this update:     Tue 12 May 2026 21:31:10 +0000
Manifest next update:     Wed 27 May 2026 21:31:10 +0000
Files and hashes:         1: ycrrDhoGe5-iYkk_qDahm97roDA.crl (hash: izA+Lxo/8R+fiyeXoBWyHempC1u5My+teu1uBcPuiD0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
        Validity
            Not Before: May  7 08:02:48 2026 GMT
            Not After : May  7 07:56:09 2027 GMT
        Subject: CN=D2395A979F8F371273A6749F90A6322BA3A2F9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:4f:c3:de:7c:da:8c:f0:56:58:15:fd:7e:
                    99:74:b1:ef:a6:e8:72:6a:54:1e:44:03:67:76:5a:
                    6f:15:ec:bb:28:2a:9b:a4:ce:03:fd:e4:09:a7:5d:
                    4f:59:26:e5:54:33:6d:80:4b:05:c9:e9:52:8c:67:
                    85:f6:3c:87:71:c6:b4:8e:85:ad:bb:32:90:62:51:
                    e0:34:db:4b:e1:5f:4a:06:93:1a:4c:1e:52:3e:93:
                    1e:37:be:38:dc:81:be:db:47:4c:f6:12:ff:66:8b:
                    78:f5:6e:99:07:7d:c7:f8:a0:65:fb:0c:e9:ae:3b:
                    ab:f9:de:ef:c2:2c:8a:ab:1b:a9:ba:cd:e1:17:fa:
                    ba:fa:7f:9b:6b:f5:89:a0:a1:6b:76:85:62:10:e2:
                    c9:cf:23:2f:8b:be:d3:f6:45:1d:73:8e:b6:de:34:
                    7a:0e:13:bb:db:b7:ea:31:e8:12:07:bc:8a:42:19:
                    5e:af:b0:ed:57:63:8a:ce:48:ba:dd:d0:c3:05:60:
                    28:8b:30:e2:94:94:fc:cd:99:f7:a2:46:19:8d:07:
                    f0:a6:c0:14:91:4d:e2:f3:9f:b8:10:31:1a:66:6e:
                    f1:ac:8d:04:72:ba:fc:f6:5f:01:d4:f7:99:68:43:
                    88:e3:1c:4e:18:5b:ca:d0:d4:d9:77:db:8c:7f:92:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:5A:97:9F:8F:37:12:73:A6:74:9F:90:A6:32:2B:A3:A2:F9:CC
            X509v3 Authority Key Identifier:
                keyid:C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:52:ea:cb:17:3d:ad:77:dd:08:3d:1f:11:63:35:10:a7:f7:
         20:d5:89:95:37:65:f1:ea:4b:1f:98:cb:8d:0b:17:c7:47:e3:
         aa:41:eb:1c:0d:e8:7f:3e:0f:2f:bf:f4:85:86:c0:a3:eb:98:
         b8:04:ab:44:c4:0c:1c:6f:d4:6a:1f:8a:da:b3:f6:85:72:ee:
         99:1b:ed:d6:a8:f4:ed:d7:65:95:f9:2b:a6:b2:c4:93:df:a7:
         d7:8e:a8:9d:ec:d3:8d:ed:45:67:9e:fe:76:e5:1b:27:3e:18:
         7d:92:76:64:71:0e:6c:78:c3:51:ef:a2:a2:a3:a2:11:e6:52:
         d8:b5:0c:c3:da:d0:fc:ad:cf:52:38:e1:b5:d5:4b:57:a8:ff:
         26:a7:9e:82:c2:62:11:5d:9d:ae:b1:1c:a3:38:15:cc:21:08:
         5c:b3:5c:5a:6c:10:64:b8:a4:6a:c9:d8:65:06:ee:b7:37:b1:
         98:b5:25:29:a5:18:07:2a:3e:8b:52:a3:b3:98:8f:5a:b1:f4:
         dd:fe:a5:b7:d6:a3:fc:7b:0a:b7:82:f9:fc:a2:fb:be:94:c1:
         ee:40:da:32:7c:34:74:4f:71:0f:57:41:5e:41:e6:2f:68:b9:
         50:67:83:04:56:56:1f:22:66:24:24:65:85:a5:be:58:43:b4:
         6d:75:8d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:40:15 2026 by rpki-client