Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
File:                     2zuIrk16jERG-aguEsb9kWvoRaw.mft (raw, json)
Hash identifier:          bldVxW/ULhxy/xN8rMaEAQJp+u12FCpt7fwv0m0/bmM=
Subject key identifier:   CE:11:AD:B7:00:82:51:49:60:B1:4B:A2:52:CB:74:18:D7:A4:D1:FF
Authority key identifier: DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC
Certificate issuer:       /CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
Certificate serial:       0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
Manifest number:          0687
Signing time:             Thu 26 Mar 2026 08:30:00 +0000
Manifest this update:     Thu 26 Mar 2026 08:30:00 +0000
Manifest next update:     Fri 10 Apr 2026 08:30:00 +0000
Files and hashes:         1: 2zuIrk16jERG-aguEsb9kWvoRaw.crl (hash: ri0nzqAsLWouqs+GpFznOgsxbcj8/72V1ViP84hjlg4=)
                          2: w58ZEx12K4igsXALMZytyuSX7bo.roa (hash: m0JRwbsjHHSqVnqw9z0olXm9gs5iH6L30fsEWoguAfM=)
                          3: wghH3pFHDcdVZB63cJZaX-PKgA8.roa (hash: PkEdWuf5SZj7o5WAo8nE/wDExC5MtekKNPmnzi34WtY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC
        Validity
            Not Before: Mar 15 01:30:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE11ADB70082514960B14BA252CB7418D7A4D1FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:7e:ed:81:98:b7:88:1b:ea:ba:5b:a0:ea:
                    a6:06:3f:e4:fc:89:e9:1e:2c:d6:cf:52:5a:7b:f8:
                    61:43:d0:8e:17:91:48:9a:59:26:b6:53:42:b7:b9:
                    cd:f5:5b:e3:41:a1:91:37:b9:d6:25:1d:63:96:62:
                    e4:c1:60:4a:f4:15:34:6b:5a:a9:1b:a8:14:dc:92:
                    b2:64:bd:5c:d6:8c:5b:cb:e7:f2:d1:55:d3:26:ed:
                    c9:24:bf:ad:19:98:40:58:be:22:18:70:25:89:87:
                    14:72:61:cb:50:1d:f6:27:78:cd:a2:0f:2d:4f:74:
                    4b:77:b0:54:15:0c:a2:33:06:c0:91:04:9d:d1:ff:
                    56:ce:14:2e:3a:41:00:e0:c0:5b:b4:f0:cf:4c:97:
                    38:87:ef:d1:b9:ee:bd:af:2b:b3:dd:73:94:7f:a6:
                    ed:d9:07:7c:7e:7c:d3:f7:7e:13:9b:fd:5a:cd:b0:
                    38:31:00:4f:5e:49:04:a6:6d:a9:4e:c5:92:f0:92:
                    88:b4:ec:4d:ca:b6:05:d2:8d:70:2b:d2:9f:a2:79:
                    bf:6b:f9:59:be:87:6b:37:44:b8:2c:0a:ee:f4:7e:
                    b0:26:28:23:d1:26:a4:db:a6:3a:24:d5:d9:56:4f:
                    4f:ea:b8:b3:c3:ce:5f:70:95:60:af:92:25:08:1a:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:11:AD:B7:00:82:51:49:60:B1:4B:A2:52:CB:74:18:D7:A4:D1:FF
            X509v3 Authority Key Identifier:
                keyid:DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:ae:6c:a9:77:a8:a8:7e:88:25:e4:ac:a5:89:ab:6b:9f:03:
         0d:dc:42:fa:7e:2e:90:7b:31:d3:2e:0e:14:c4:24:c6:87:18:
         c3:81:92:77:9e:99:72:45:ea:e7:33:5b:fd:ac:ca:77:0e:97:
         19:41:a0:71:04:21:22:59:98:a1:7d:bb:d9:ca:1c:40:a2:7b:
         af:42:1f:2a:f4:f0:9b:c2:2f:b3:1b:f8:4c:0a:1b:c1:2a:23:
         f1:69:43:31:9d:fc:36:dc:1f:84:57:45:bc:32:11:56:b4:1f:
         bb:48:d3:91:56:1d:a2:f1:20:aa:3e:01:ec:f9:bd:2f:65:0d:
         0a:bd:0c:20:67:37:26:1c:95:2a:c3:d9:0a:f4:50:ff:bb:56:
         24:ed:8a:f6:62:03:24:b7:0d:b9:56:dc:2b:2b:dc:21:ff:a4:
         47:aa:80:28:fd:0b:44:4f:1a:4a:74:d8:7c:49:75:53:28:47:
         62:ef:d4:48:a7:1c:c4:87:13:25:e9:ea:d5:ad:d7:c0:c2:b3:
         5f:be:44:93:87:d6:a7:4d:58:ab:d1:9e:19:c8:59:29:aa:a8:
         d6:73:b4:62:59:e5:16:0f:2e:c3:8b:ab:99:85:18:52:da:9a:
         95:02:3a:ca:9b:a4:4e:01:13:a8:c2:d9:d1:19:e9:11:f2:e6:
         7c:7d:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:29 2026 by rpki-client