Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft
File:                     veQ8a67j-AOtItvzaSqwktfoj1o.mft (raw, json)
Hash identifier:          Yy6fF+ybu0d5SY/BfrmvhoDU4jij9Wl69+BKEMHqLow=
Subject key identifier:   35:F3:3E:4A:25:12:E3:B0:9A:2B:3A:E0:02:24:88:B0:5E:80:53:4E
Authority key identifier: BD:E4:3C:6B:AE:E3:F8:03:AD:22:DB:F3:69:2A:B0:92:D7:E8:8F:5A
Certificate issuer:       /CN=BDE43C6BAEE3F803AD22DBF3692AB092D7E88F5A
Certificate serial:       0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft
Manifest number:          018B
Signing time:             Thu 26 Mar 2026 07:12:06 +0000
Manifest this update:     Thu 26 Mar 2026 07:12:06 +0000
Manifest next update:     Fri 10 Apr 2026 07:12:06 +0000
Files and hashes:         1: DQW-dR23RElCZ0DJcGBLsnHCHc0.roa (hash: d2MNKyFf7QR1+EBRil5iC1s9S4ttnl+m0PoWmZNEmzo=)
                          2: e2mMJ9qRJqBp33PRkB39rlWGH90.roa (hash: ZELert8faG8aCuxRogEAt7eagXDk4BSKYlgWdd+Umdc=)
                          3: veQ8a67j-AOtItvzaSqwktfoj1o.crl (hash: qNC/bkD0ELNOrKaFSHfh0c3mKlkytWrNZuDh1gN18Jg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDE43C6BAEE3F803AD22DBF3692AB092D7E88F5A
        Validity
            Not Before: Mar 26 07:12:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35F33E4A2512E3B09A2B3AE0022488B05E80534E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:e2:09:bb:7c:ce:22:66:75:5b:f9:8c:59:
                    55:e0:fc:19:68:4b:0c:5e:ef:8b:be:ac:1d:b7:3b:
                    21:57:fd:70:76:e6:2a:b2:e7:f3:c3:d4:e1:8e:20:
                    0c:a9:be:75:71:b3:7c:92:13:61:02:0b:15:cf:91:
                    ef:a5:f6:74:0d:ce:31:1e:de:ad:25:c3:fc:70:b5:
                    85:e9:90:da:6f:87:55:46:77:14:3f:22:aa:3f:df:
                    eb:ae:91:89:7b:01:91:b8:51:9e:41:98:a3:85:bb:
                    e9:2a:ac:3e:39:1f:35:88:c9:cb:f7:7a:67:a1:bf:
                    42:5a:14:ef:0a:96:a5:4d:15:81:66:3f:bd:ee:75:
                    2c:2e:89:bd:1c:83:2a:ad:c8:59:65:76:49:78:02:
                    ce:57:97:23:e4:3a:39:3d:81:fe:0a:9c:52:b9:ab:
                    c7:54:a1:76:2b:2c:55:93:95:87:7f:94:cd:bb:dd:
                    57:44:24:90:91:6b:da:73:11:5d:24:9b:da:72:b9:
                    7f:cd:03:25:ab:e5:87:4a:20:0f:aa:83:74:f5:85:
                    5f:6d:77:36:c0:61:b5:66:18:03:19:50:a5:92:9e:
                    bd:a6:c1:b9:9b:f7:66:a7:72:4b:18:7e:d4:bc:8a:
                    6b:9a:56:f4:e9:6e:43:25:80:87:2b:07:44:4e:5e:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F3:3E:4A:25:12:E3:B0:9A:2B:3A:E0:02:24:88:B0:5E:80:53:4E
            X509v3 Authority Key Identifier:
                keyid:BD:E4:3C:6B:AE:E3:F8:03:AD:22:DB:F3:69:2A:B0:92:D7:E8:8F:5A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/veQ8a67j-AOtItvzaSqwktfoj1o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20201/veQ8a67j-AOtItvzaSqwktfoj1o.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:ab:89:d0:2a:71:b1:7c:da:b7:99:4a:c4:7c:f4:56:57:
         88:6a:f9:18:92:fe:b7:4c:a6:38:36:75:d8:b3:c1:88:28:51:
         7f:82:de:37:21:e3:ca:04:f4:9a:1a:90:09:48:11:65:50:8e:
         d3:25:2d:b2:cd:03:9d:f5:dd:3b:e8:4c:99:0f:ac:c5:7f:58:
         6f:3a:58:9b:9d:9b:f1:d2:5f:c3:1d:be:4b:0e:4b:cb:c4:f0:
         bc:5a:82:1c:99:39:f9:97:e6:1c:23:0d:da:c5:1c:a4:af:30:
         0c:31:5e:0a:17:67:19:c1:8d:e2:96:d3:ef:09:48:2c:e6:7c:
         bf:ee:eb:01:4e:82:dc:51:6d:4b:eb:12:60:25:1c:ec:f1:47:
         ee:23:56:92:76:da:e6:40:68:ad:a1:92:8c:e4:3b:1a:66:0b:
         ce:26:00:30:b3:78:78:7a:83:09:10:8c:c7:72:30:fd:bf:92:
         4d:aa:7e:2f:c0:51:54:45:cc:48:7d:ba:e3:ec:0b:fd:89:d9:
         dd:c2:2c:de:d1:b9:ab:a0:2b:85:15:01:46:b6:ea:a0:0f:0b:
         7b:70:1f:d3:eb:9e:5b:e7:36:f3:dd:d2:0c:83:29:db:b7:5b:
         95:3d:5d:1f:55:9b:a4:cf:34:05:de:24:87:0d:a5:53:7a:55:
         97:6c:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:21 2026 by rpki-client