Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.mft
File:                     UrTjMSd258rhlIrKmcqSE52r69w.mft (raw, json)
Hash identifier:          3Kv7eBnbAJNE/q/j44mTaOy4QhrBaO0is+8i1HHKMwg=
Subject key identifier:   A5:1B:22:F3:72:4A:8A:B8:4E:41:97:78:25:8F:0C:11:93:E2:70:E3
Authority key identifier: 52:B4:E3:31:27:76:E7:CA:E1:94:8A:CA:99:CA:92:13:9D:AB:EB:DC
Certificate issuer:       /CN=52B4E3312776E7CAE1948ACA99CA92139DABEBDC
Certificate serial:       31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrTjMSd258rhlIrKmcqSE52r69w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.mft
Manifest number:          0C3A
Signing time:             Thu 26 Mar 2026 03:42:43 +0000
Manifest this update:     Thu 26 Mar 2026 03:42:43 +0000
Manifest next update:     Fri 10 Apr 2026 03:42:43 +0000
Files and hashes:         1: UrTjMSd258rhlIrKmcqSE52r69w.crl (hash: 8m+rp8qRGXPZZyE+QIuFQ6GD4EZWaqVuVm2219Z1pt8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrTjMSd258rhlIrKmcqSE52r69w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 04:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B4E3312776E7CAE1948ACA99CA92139DABEBDC
        Validity
            Not Before: Mar 15 01:32:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A51B22F3724A8AB84E419778258F0C1193E270E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:f8:24:42:25:77:8b:7a:f9:f6:68:2b:1f:
                    be:3a:c6:07:8d:97:21:b0:3c:81:fd:ef:a3:a4:36:
                    e1:a9:b8:3a:37:62:4d:a5:16:95:c2:e8:5a:fc:d8:
                    55:6f:73:df:44:2e:51:ca:cb:40:27:a0:ca:00:27:
                    40:dc:0b:10:a0:67:f2:c8:ad:7c:c3:92:69:13:44:
                    58:35:6f:8f:7b:e4:34:e8:f5:5f:6b:ae:4e:7d:f5:
                    d4:4c:bd:64:01:5a:09:c8:ab:34:78:13:2c:f9:71:
                    4a:c0:13:e3:54:3e:48:98:67:e0:6a:4e:a6:ef:9d:
                    c2:8e:f8:9e:03:22:e8:1f:c6:25:dd:05:e8:d9:1a:
                    d2:ce:8a:f5:d8:45:76:cb:3a:ee:3f:87:df:89:8a:
                    54:58:fc:6d:fe:7a:99:48:eb:c4:af:84:22:d7:b4:
                    08:cc:a9:a1:d0:60:88:ec:ec:61:5c:43:83:29:f5:
                    fd:be:04:5b:ee:a9:a9:7f:94:1e:03:1e:52:e6:2a:
                    10:80:1e:91:7c:3c:0d:3f:1f:2b:d5:68:06:79:09:
                    ac:1c:05:27:9f:a0:fa:7c:eb:4a:7c:91:79:ac:82:
                    25:c9:01:d3:ee:f0:39:18:ac:e7:b2:a4:c7:09:63:
                    cf:d8:71:ef:64:2e:8f:e2:7e:30:83:f0:b3:52:5b:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1B:22:F3:72:4A:8A:B8:4E:41:97:78:25:8F:0C:11:93:E2:70:E3
            X509v3 Authority Key Identifier:
                keyid:52:B4:E3:31:27:76:E7:CA:E1:94:8A:CA:99:CA:92:13:9D:AB:EB:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrTjMSd258rhlIrKmcqSE52r69w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2298/UrTjMSd258rhlIrKmcqSE52r69w.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:f4:5e:37:56:f6:e0:ac:0b:7b:9c:08:63:78:aa:4d:b7:
         34:31:f9:f8:dd:af:be:b1:9e:2e:01:58:b1:22:d9:62:9c:e9:
         c0:bf:b1:64:20:ab:14:b0:cf:34:f1:01:89:94:8c:52:34:e9:
         0b:dc:70:63:30:e7:39:b8:a5:b7:8b:4e:b5:d1:39:cd:da:89:
         4f:36:7e:a4:d1:3b:37:61:45:20:67:f4:cc:e2:b9:ac:66:7f:
         28:4a:89:d8:ef:04:0f:cd:a5:e9:0c:8a:77:a0:62:83:00:f5:
         7c:e0:b0:d8:96:0f:76:88:88:d8:5a:16:dd:ff:33:6e:ce:2f:
         df:70:34:ef:c1:40:86:bf:f2:a2:fd:b9:66:b7:be:73:e4:e8:
         22:ff:f2:00:cf:c2:45:c2:ff:83:ea:c0:75:9f:69:60:3d:ed:
         3a:6a:a2:2e:ec:5f:06:9c:e6:d7:51:67:a0:77:c2:f2:53:b7:
         0a:99:dc:0b:22:54:98:d5:40:e6:c6:24:e9:5a:4a:17:9e:2b:
         d5:cb:c1:f1:8f:52:0c:d6:e2:9f:3d:85:79:9c:40:51:13:37:
         c5:26:81:83:02:29:dd:16:c3:22:ac:42:5f:23:c4:c9:87:c4:
         9a:2b:8a:2b:84:fb:26:2f:6d:66:39:9f:96:e6:04:c3:eb:97:
         f9:15:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:48 2026 by rpki-client