Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
File:                     if8a6GSr-fEmFOMHZAT1VtVv-oI.mft (raw, json)
Hash identifier:          Zpj+PgT9qDQQwc6YDbgZbL87fZqZX7a9Lg9iSeTZsrc=
Subject key identifier:   F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Certificate issuer:       /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial:       1E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
Manifest number:          0BCE
Signing time:             Thu 26 Mar 2026 06:26:31 +0000
Manifest this update:     Thu 26 Mar 2026 06:26:31 +0000
Manifest next update:     Fri 10 Apr 2026 06:26:31 +0000
Files and hashes:         1: YyOOrkTLusz-eHJzEvqcBXB09wk.roa (hash: filSosAJRRvpchdGUyVX8fvm/0Va+8bzYmiKum5GlpA=)
                          2: if8a6GSr-fEmFOMHZAT1VtVv-oI.crl (hash: L1cAS5fipUeji0XzqOfoaa+Rx1uYdhiOf1dUi1vFX9Q=)
                          3: lc34sKmnuTaf1zwMLkP85-29nLo.roa (hash: /WIhfZI0ncbjU2jZLBVHY+eMeD/i+XMv5UxJY0iSQYY=)
                          4: n8eQBYjvsUifgiHUdBIk3JHJA2E.roa (hash: lgdTeUR2d4aveju6dE0o2ntWyi20B2bFNgnTeqmPTpM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
        Validity
            Not Before: Mar 18 02:08:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F1909AA87C867B21FDB4D114F22D6DF0B32EF517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:e0:34:8b:f8:f6:49:bf:f9:7e:b7:2b:fe:
                    d8:d9:31:2c:93:47:7c:cb:15:ad:10:b8:16:94:05:
                    3d:fb:39:81:24:32:db:9f:20:5d:e4:b1:1d:77:47:
                    45:05:61:00:dc:b9:8d:b0:63:64:7f:a9:d6:22:c4:
                    93:cd:e5:8d:e7:c2:3c:d2:32:e1:4f:a4:50:36:42:
                    c9:f7:09:e2:1e:bb:f1:52:7e:c1:ca:4b:c4:29:6f:
                    40:9c:05:45:de:be:8f:cb:81:f0:6c:dd:f0:79:6f:
                    8a:f7:8a:03:a9:ec:c6:f9:8e:be:e9:ba:c6:3e:7e:
                    80:ff:cc:c3:39:76:72:ff:12:2e:f3:46:6e:2a:04:
                    ca:43:d7:8b:18:22:91:b0:77:3f:45:87:1b:f3:b7:
                    e1:94:31:1b:4f:40:6a:7b:1f:f4:10:24:e0:7b:df:
                    bc:ad:ef:52:63:d3:15:e6:50:c2:02:08:35:85:67:
                    64:0e:c6:db:61:9a:25:d4:c8:ff:ab:0b:b5:f1:9f:
                    43:20:95:aa:7e:d1:72:6a:77:10:fa:4b:8f:bc:3d:
                    03:eb:84:32:3a:e8:ca:6f:83:c3:b4:28:ac:b2:68:
                    89:2a:98:af:78:2e:bd:80:45:06:3c:54:ae:dd:36:
                    35:06:7f:a9:fa:98:3b:3d:87:fc:aa:55:2b:e0:15:
                    34:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17
            X509v3 Authority Key Identifier:
                keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:19:34:e6:0e:a4:c9:d4:9b:af:8e:6b:0d:71:28:a7:23:4d:
         c5:5d:d9:4b:a0:09:79:78:cf:e6:a8:09:3e:4a:35:34:b7:16:
         cb:b4:2e:55:11:bd:fa:01:18:e2:87:e2:03:33:aa:c9:17:bf:
         b8:f1:48:2e:df:4b:a7:75:7e:06:91:ae:75:9a:56:ae:ad:e5:
         f8:26:27:77:56:74:d9:62:7d:40:6d:8d:e9:7a:4a:77:61:1c:
         07:c2:33:57:cb:f1:1d:d2:85:a5:45:76:0b:65:19:4e:41:4a:
         79:47:14:30:0a:f7:46:97:a3:b1:c4:44:50:b5:12:28:60:1c:
         e0:85:d0:6e:62:6a:ff:b9:0b:8f:da:d1:6b:19:0f:26:8f:ac:
         c6:64:c9:5e:8a:eb:73:52:83:6a:b8:a4:04:c7:1c:82:79:53:
         2c:e6:5e:1a:fc:96:b2:d9:64:43:c5:d2:72:dc:24:9a:8d:09:
         bc:36:b3:a8:2b:15:24:6a:f7:e8:5e:5a:ae:22:4a:18:01:da:
         52:4b:65:e6:73:c9:05:9b:fb:61:9d:0b:79:fd:fa:e8:b8:77:
         5d:bb:cf:c1:a1:b8:a9:3e:00:58:e2:fc:04:64:3b:fb:9c:6a:
         8f:62:27:83:c2:b4:75:c4:bd:93:e7:8e:f5:05:7e:af:38:a0:
         10:3c:4f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:40 2026 by rpki-client