Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
File:                     aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json)
Hash identifier:          T2Y3/ZNjVfXcB8CzbPw5zCQNT3HrsZlvqIi8Ib9+3ZI=
Subject key identifier:   18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86
Certificate issuer:       /CN=68EF440AA360C0D21035A81AD2C23339D2233F86
Certificate serial:       0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
Manifest number:          06C0
Signing time:             Thu 26 Mar 2026 05:00:09 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:09 +0000
Manifest next update:     Fri 10 Apr 2026 05:00:09 +0000
Files and hashes:         1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: Zh2lG0ekPehSCL2ilGQJHYp+2DLie5U1tcTbMHuWE5s=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86
        Validity
            Not Before: Mar 15 01:43:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42:
                    df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b:
                    a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c:
                    27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1:
                    5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f:
                    56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31:
                    b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf:
                    6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43:
                    d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab:
                    54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2:
                    06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d:
                    a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07:
                    16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f:
                    b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95:
                    fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5:
                    60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe:
                    7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
            X509v3 Authority Key Identifier:
                keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:58:83:1e:9b:f0:73:d8:ed:ae:7e:74:84:9a:d3:bf:ae:1c:
         6f:10:16:89:f5:af:2e:5e:39:9c:2b:68:5d:9b:c1:df:49:1b:
         69:c9:ec:11:f8:7c:ee:35:bb:e9:3c:02:ce:07:44:13:ee:85:
         97:0d:73:97:ef:b7:2b:6c:99:06:a0:04:1e:d0:c5:a3:77:c8:
         19:e1:4c:8a:b8:0b:98:52:64:35:a1:c0:7b:e9:f0:f6:e8:5f:
         b1:94:2a:17:42:7c:af:7e:9b:c2:e4:70:d5:3a:04:b5:1b:60:
         49:88:e2:e3:51:64:c0:3a:94:97:4f:7b:e7:89:65:09:1b:22:
         d6:4b:c3:71:66:d7:2d:f5:e2:31:dc:63:c5:5b:fd:b2:c5:ae:
         e9:f7:f4:e1:41:8e:4c:f4:a9:1c:ce:d6:12:19:3e:4b:2c:96:
         46:6e:18:7a:e9:d6:a9:06:a2:28:04:ee:4d:63:95:b2:aa:17:
         63:fe:dc:eb:d5:0a:16:e7:4d:62:d8:39:f8:86:97:8b:04:35:
         a7:86:6f:fd:a6:0a:e9:e1:25:77:af:8a:96:c4:58:40:a5:33:
         cd:98:75:fd:12:dd:ad:c2:c9:52:4a:f5:09:10:52:7f:d8:c1:
         49:eb:8b:66:06:7e:92:d9:52:67:80:36:a0:dd:de:48:01:f7:
         56:35:a9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:30:57 2026 by rpki-client