Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
File:                     7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft (raw, json)
Hash identifier:          dQgpefFVo8864eR80w4gZDx5U0BDrAQyuhdOwjcaVP0=
Subject key identifier:   F9:D9:C1:DA:29:F8:E7:8C:6A:5D:BF:94:D4:AA:35:74:63:B5:E9:97
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       5B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
Manifest number:          0CB4
Signing time:             Thu 26 Mar 2026 15:41:30 +0000
Manifest this update:     Thu 26 Mar 2026 15:41:30 +0000
Manifest next update:     Fri 10 Apr 2026 15:41:30 +0000
Files and hashes:         1: 7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl (hash: dDSXnRpONCndZTrwsSID1NOf4gSCnbjjZ53tIxJhF4g=)
                          2: lcmyB7IlGmx7MNWfXpXa8FviWg4.roa (hash: 2PsbWwKn+NDo6jALuWG7zGo1yW9IDAM5bUFyTmEDsTc=)
                          3: ttRxN9kp1fDbDW91ILCSaBahZ18.roa (hash: YEfruXdtLY2JeKiBjivqTfeM5Xu6YIV6hT1rInSV17g=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Mar 15 01:33:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F9D9C1DA29F8E78C6A5DBF94D4AA357463B5E997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:db:05:be:90:ee:69:cc:35:b5:91:81:e6:
                    63:26:73:56:05:fc:07:4b:fd:24:17:45:cd:53:a5:
                    d4:31:2e:ad:80:0c:af:f0:70:bb:66:e2:f0:19:02:
                    66:1e:9f:63:53:a0:53:35:d6:33:1d:d9:8a:4a:01:
                    db:27:56:83:a6:af:d5:aa:33:74:cc:e4:7b:e4:94:
                    f8:e3:f7:80:e0:93:56:48:bc:84:1c:bd:17:ce:bc:
                    0f:14:1e:af:4d:5c:37:4b:0d:a1:f2:3c:bf:22:c9:
                    f3:2e:6a:32:dd:48:c5:b7:60:d6:df:17:f4:9c:e7:
                    ba:09:f9:a8:74:e7:11:13:c7:05:a3:f1:79:75:36:
                    19:d1:5e:12:aa:b0:95:de:ec:ec:91:ff:33:ce:78:
                    b8:9f:4b:f3:47:37:ff:c8:50:aa:eb:f8:58:42:98:
                    d8:ad:88:5a:9f:32:49:b4:81:bc:51:0f:10:16:b8:
                    1b:e4:07:b4:71:f9:00:f1:6a:99:0d:bb:41:8e:bd:
                    26:6a:73:ef:fd:f3:31:f7:18:2e:7a:c9:f5:02:b8:
                    8c:ba:f1:02:ee:43:b4:c1:5a:fa:d8:95:06:8d:c1:
                    e3:27:0b:b3:44:a9:e2:06:71:59:dc:5b:77:eb:b6:
                    11:c9:0e:2d:37:1e:cf:45:bb:5a:9f:e4:22:b8:18:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:C1:DA:29:F8:E7:8C:6A:5D:BF:94:D4:AA:35:74:63:B5:E9:97
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:e7:30:02:13:25:85:d1:f5:b6:b5:c1:ab:47:dd:01:9e:
         d9:7b:27:69:ee:e2:34:4c:fd:e3:ed:f2:aa:7f:ff:7f:ff:95:
         64:e2:73:7e:3c:10:a8:75:34:85:b9:b1:88:71:99:4f:9f:d1:
         2c:4b:c8:e3:8d:21:2f:04:22:e9:71:68:e6:af:d3:97:0d:d4:
         ce:fd:af:0e:87:df:89:06:96:c2:e2:32:5c:34:64:a0:69:21:
         25:91:b6:83:eb:e9:8b:08:5e:6e:58:f1:00:19:05:f1:39:cf:
         89:0c:f6:30:6e:3e:a1:cc:54:6c:b0:18:16:b0:9d:ab:8d:c7:
         9f:66:2c:e4:f3:57:77:97:1b:d2:33:09:16:f4:f7:88:76:05:
         ee:2c:e4:f5:04:99:d8:f3:f7:e9:d3:e0:be:38:e3:07:be:e9:
         54:9d:6e:22:1f:e8:10:6c:e3:dd:c5:aa:29:0c:ac:d5:c4:60:
         1c:21:6a:64:86:7e:1a:8e:d6:c9:d2:35:cc:72:7f:cd:65:9c:
         09:82:c9:bb:86:3d:ce:cb:57:9b:19:fd:cc:82:de:71:5d:e7:
         ba:13:e8:40:14:17:af:2a:e4:e1:cb:6a:d4:6c:02:12:ce:df:
         5b:55:84:7a:8f:ed:59:b0:b3:00:cf:a4:3c:c3:e8:db:b4:de:
         8b:b9:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:38 2026 by rpki-client