Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
File:                     G_-mDYo0HWFiEcOLuSUGEINtO50.mft (raw, json)
Hash identifier:          jwkSoZ1rxCn4g+R+axl0pu9rwfGpJXcvzu5M3/JTOAc=
Subject key identifier:   CF:6D:62:E2:AE:D3:85:15:DD:B2:9A:BF:24:85:4D:D5:74:DE:C2:6C
Authority key identifier: 1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D
Certificate issuer:       /CN=1BFFA60D8A341D616211C38BB9250610836D3B9D
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
Manifest number:          03F0
Signing time:             Thu 26 Mar 2026 08:30:16 +0000
Manifest this update:     Thu 26 Mar 2026 08:30:16 +0000
Manifest next update:     Fri 10 Apr 2026 08:30:16 +0000
Files and hashes:         1: G_-mDYo0HWFiEcOLuSUGEINtO50.crl (hash: XIbAATNANOCgM9ZVOoxtdcXQ0AxGSK8Wao7LC33awl4=)
                          2: JT1jIZbOORHe7D1W2-K1cgkhv9E.roa (hash: smXuoow/iYqnNnNQAqsOg52GEjWg89CROpEwLFzf63I=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFFA60D8A341D616211C38BB9250610836D3B9D
        Validity
            Not Before: Mar 15 01:31:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF6D62E2AED38515DDB29ABF24854DD574DEC26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:a2:c1:4c:f6:8c:5b:95:40:76:7a:41:9c:
                    bc:8a:ac:d8:44:a3:b5:39:86:60:92:d5:5b:d2:51:
                    b4:4d:55:d1:ea:37:a4:c5:c8:92:80:b0:9f:21:fb:
                    ba:d9:53:c5:4e:98:ff:13:04:3d:22:0a:fd:c2:f2:
                    05:12:e7:79:ee:e2:ff:19:c0:38:e6:b4:d0:29:7e:
                    f9:4d:ea:35:ef:46:e2:38:10:49:02:63:b3:0c:0e:
                    11:cc:70:ea:d8:ed:b1:be:9d:bd:e6:46:60:3f:ed:
                    7b:48:2a:be:8a:f3:47:0b:a1:e5:2d:9f:94:4e:7d:
                    61:0b:a1:ea:31:88:0c:aa:d6:94:44:9e:20:fb:ff:
                    0a:a4:da:6c:57:72:30:9f:6b:06:57:a7:5a:17:8e:
                    df:89:73:ac:41:6d:f5:ac:30:d6:a3:3e:48:93:c3:
                    9e:e3:5a:41:2f:f6:2f:df:72:11:3d:32:de:e7:55:
                    c8:ae:da:c4:26:fb:be:b2:db:b8:ae:a0:eb:3c:e4:
                    c4:c2:8b:f5:0b:24:23:fe:89:68:39:6b:cb:87:9a:
                    96:90:11:bd:b2:9a:fc:b9:87:b7:f7:6f:12:2d:50:
                    a1:5e:7a:37:c6:17:9a:2e:60:93:c0:c0:cc:cc:b8:
                    fb:11:9b:0a:6c:09:ce:71:d2:86:7d:11:2a:66:57:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:62:E2:AE:D3:85:15:DD:B2:9A:BF:24:85:4D:D5:74:DE:C2:6C
            X509v3 Authority Key Identifier:
                keyid:1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5f:0a:7a:10:b7:31:ad:3d:63:bb:6a:1e:fc:a4:91:f6:18:
         09:43:bb:a8:d3:15:06:a0:2c:86:5a:19:47:5c:67:30:12:e9:
         38:df:0d:cd:13:c6:e3:93:3d:fe:6b:d1:45:62:7a:3b:ea:fe:
         66:54:89:af:ca:97:f1:fd:4d:4b:60:5d:77:c1:39:82:ae:99:
         ba:25:33:80:23:bf:8d:b7:f1:54:e9:aa:f1:f8:0d:f5:eb:71:
         35:2e:64:1c:78:74:9e:b0:f6:21:45:74:1c:78:5c:12:e3:4a:
         68:96:58:cd:a7:30:49:d8:16:0b:66:f3:f1:1f:1e:49:84:fa:
         38:49:f3:b0:3b:6e:87:39:98:86:80:c4:bf:cb:f6:2f:0a:6f:
         bf:af:df:41:50:b2:33:03:20:a3:57:10:ed:e0:6e:32:d5:0b:
         6c:03:22:a4:95:db:95:44:dc:58:b8:49:99:47:03:ef:f0:52:
         57:8a:04:3f:41:62:08:dc:6f:38:36:6c:eb:38:62:93:84:85:
         63:47:1e:d0:1f:63:fb:60:3d:d3:c6:15:1e:72:1c:c5:89:ca:
         43:af:d8:a9:79:36:31:ca:b3:de:6f:ae:b3:a3:90:60:b7:d5:
         3f:89:60:c7:69:6f:fe:1f:04:d8:b2:d0:7c:f0:0f:ce:05:39:
         aa:b9:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:59:13 2026 by rpki-client