Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.mft
File:                     tpPpc6vphRJSZmcc0FgiomoX_wI.mft (raw, json)
Hash identifier:          yii7mcyXVxK4ygjZYFDf8JQn2kllSn8bozo833RXkx4=
Subject key identifier:   A9:E5:5B:6E:7C:5F:3F:DF:DC:E6:79:81:48:5F:7B:02:52:0D:7B:F7
Authority key identifier: B6:93:E9:73:AB:E9:85:12:52:66:67:1C:D0:58:22:A2:6A:17:FF:02
Certificate issuer:       /CN=B693E973ABE985125266671CD05822A26A17FF02
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.mft
Manifest number:          5F
Signing time:             Thu 26 Mar 2026 17:25:05 +0000
Manifest this update:     Thu 26 Mar 2026 17:25:05 +0000
Manifest next update:     Fri 10 Apr 2026 17:25:05 +0000
Files and hashes:         1: EG8Pn-4CTubjnDsLcIdi4WTycys.roa (hash: 2JUodx1m5pa0V99Wl08P8SkFD4CZRztpd+CVeN+d1BE=)
                          2: tpPpc6vphRJSZmcc0FgiomoX_wI.crl (hash: kAzJmj6qy6tDy1OgoAC978yisRGq1B2g6dhoZoVy3RI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B693E973ABE985125266671CD05822A26A17FF02
        Validity
            Not Before: Mar 15 01:37:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A9E55B6E7C5F3FDFDCE67981485F7B02520D7BF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3f:ad:63:38:28:91:53:6d:37:7e:f3:d0:52:
                    50:90:3b:25:60:37:de:33:07:a5:a5:f0:6f:86:fb:
                    0c:86:1b:4f:ff:b6:9e:c2:f7:fc:0c:d4:02:2f:45:
                    8c:27:da:fe:3b:49:35:5c:1d:de:69:27:09:dc:ff:
                    b0:b8:86:92:7d:61:27:9c:62:9b:7d:d8:56:62:cc:
                    d4:54:f4:24:ce:5d:d1:2b:f9:ae:bc:24:74:cc:9b:
                    eb:ea:b4:6f:77:28:b1:a7:61:11:98:44:08:cf:0a:
                    42:8a:00:a7:d7:55:bd:0c:fa:7d:f6:7f:97:39:23:
                    c8:8b:0a:ac:37:a4:e7:1c:e2:c8:9a:1e:4e:03:e7:
                    1c:f5:7f:6b:bc:82:96:0b:68:83:3b:e5:17:5c:7f:
                    84:2b:5a:1b:fc:e2:b7:db:c3:d0:35:1e:ee:05:25:
                    9b:27:18:07:2f:bb:3b:77:77:42:68:59:39:e1:fe:
                    a6:96:79:35:34:85:74:0e:97:7a:27:a9:03:13:81:
                    1e:5b:d3:c1:71:0e:29:68:62:26:79:58:cf:a4:bc:
                    49:ff:70:cb:b5:e5:01:62:d4:25:1b:61:32:32:7d:
                    36:93:81:36:25:69:38:50:fb:cc:d8:aa:7c:77:fe:
                    d6:52:d3:4f:05:4d:e6:81:0e:d4:e0:26:bf:40:69:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E5:5B:6E:7C:5F:3F:DF:DC:E6:79:81:48:5F:7B:02:52:0D:7B:F7
            X509v3 Authority Key Identifier:
                keyid:B6:93:E9:73:AB:E9:85:12:52:66:67:1C:D0:58:22:A2:6A:17:FF:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tpPpc6vphRJSZmcc0FgiomoX_wI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20278/tpPpc6vphRJSZmcc0FgiomoX_wI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:56:d1:35:34:02:ce:e6:62:58:ea:cc:e7:ba:dc:7c:04:
         6e:c2:f1:26:2b:d3:ae:07:f7:c4:e7:da:9a:92:e7:7d:8e:26:
         82:0c:a0:04:bf:63:7c:69:74:3a:0d:07:fc:6f:e2:69:03:3f:
         84:21:b5:51:ae:5b:25:01:77:03:5f:27:ff:d3:60:69:8e:a9:
         49:ac:ea:d6:00:63:34:48:23:2f:d1:c6:4c:ad:91:7a:95:ec:
         32:f3:0e:a3:11:f3:b9:22:70:7b:32:ae:84:e2:2d:d0:7d:35:
         68:58:f2:86:e1:23:02:8e:7e:42:47:19:e5:e6:ed:af:68:c0:
         37:aa:5e:31:40:c5:1d:34:6e:db:04:11:91:0c:22:2e:48:28:
         d8:c6:47:77:62:9b:a5:7d:23:cb:cc:bb:dd:8c:b9:cf:6f:ff:
         32:31:cd:6b:87:d2:92:fe:3c:da:65:c0:1c:d5:11:9d:da:8c:
         b2:2e:73:b9:ea:44:0d:22:5e:d2:8a:83:b9:72:5b:b6:fb:23:
         cb:08:85:fa:1a:d9:4f:70:a4:e7:6b:56:24:2c:93:00:21:54:
         ea:88:ac:e4:93:a9:59:ab:df:55:24:e3:af:9b:e1:9f:5e:bf:
         80:2b:75:6a:fc:82:84:f0:86:1d:1b:3a:c4:7f:72:5b:0f:bf:
         9d:e0:2d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:40:53 2026 by rpki-client