Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
File:                     pimqiuskKhP7NxpEyl4fKVenDhs.mft (raw, json)
Hash identifier:          Y8ulWa3Tn2NuMRAZv4gQJlpOFP6J8p4uWFdEXZQjggs=
Subject key identifier:   CB:B5:50:79:1C:AD:DB:48:94:BD:7D:BF:A5:12:62:96:25:54:62:95
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Certificate issuer:       /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial:       4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
Manifest number:          0C71
Signing time:             Thu 26 Mar 2026 08:31:25 +0000
Manifest this update:     Thu 26 Mar 2026 08:31:25 +0000
Manifest next update:     Fri 10 Apr 2026 08:31:25 +0000
Files and hashes:         1: D2HK0FIOyeMZq_fTewzh1gLgZDk.roa (hash: bO/BVdMDNyOzPjaXzIMDH3Jn3ehAdmrZtXTI2m0ZWxY=)
                          2: GkdCjGjBIUbM3I3LI4spEav0kT4.roa (hash: lmYwVibLLyjGzZ0Rv05kOvI5fYX326IR12XuwFTDyHQ=)
                          3: WmoDuAJ2FYU63usl4IsPSCQWPV0.roa (hash: Tn1D4qkvT7hddXvzdozllaN4lEMKWpF6dUJERK4MfRM=)
                          4: pimqiuskKhP7NxpEyl4fKVenDhs.crl (hash: jLUyebkLmNBpfed/1j8nxlABHij0tsZt/osQBEferog=)
                          5: qmwgAtNfCMg6GElLF3FOgQYzcwE.roa (hash: PsYdvtejSUnwBdpOwCMmy4PMsrM7Vapf2JMOoslzVow=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
        Validity
            Not Before: Mar 15 01:43:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CBB550791CADDB4894BD7DBFA512629625546295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:37:0e:92:46:b3:37:0b:32:b8:c6:2d:c2:
                    ee:2b:03:0b:25:56:f5:2c:78:c9:af:03:4f:3a:0d:
                    d9:8e:cf:8e:34:76:20:a6:b2:75:7a:02:88:51:7f:
                    6b:90:87:10:33:d2:81:cb:ff:c2:ea:4e:01:be:79:
                    bf:12:bc:a1:45:89:95:fe:c0:b7:21:ae:5c:52:32:
                    ae:75:98:a7:75:24:b0:d8:df:a2:d6:52:6b:ef:eb:
                    83:c2:29:8f:32:c8:4c:3a:f5:ad:fe:e8:64:a1:b4:
                    3d:e7:64:04:7e:57:30:2c:90:c9:72:9e:74:bb:0e:
                    4c:7e:01:19:a8:e4:78:d3:eb:9d:0c:e5:75:54:9c:
                    a1:b2:d3:47:7b:bc:d2:e5:78:c2:97:1d:c2:15:ae:
                    cb:ea:8d:43:e3:cd:b2:c9:ab:4c:c2:af:64:77:45:
                    a5:be:83:9f:38:e7:60:ea:83:d1:f0:6c:59:0f:8f:
                    dd:18:b7:ec:ee:86:22:5d:0b:99:30:da:20:8a:38:
                    27:65:db:7d:91:a6:ce:f6:75:64:e4:46:a9:3c:4e:
                    e9:0a:ca:89:15:2b:da:d8:51:39:fa:ee:3e:c9:b7:
                    16:ab:81:76:fc:c6:93:6d:5f:f5:1e:eb:30:9f:f0:
                    7d:7d:d0:b0:61:ab:45:72:7e:1a:06:30:21:d6:28:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B5:50:79:1C:AD:DB:48:94:BD:7D:BF:A5:12:62:96:25:54:62:95
            X509v3 Authority Key Identifier:
                keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c2:39:a0:70:8f:fd:d0:b7:f4:41:97:86:48:a3:80:42:2d:
         cd:22:e0:9c:47:b1:f1:ec:fc:95:90:ff:95:9f:26:96:d2:d5:
         42:c1:e1:34:da:5b:f4:1d:ee:e5:d8:b8:e4:86:75:9d:a9:34:
         7a:1e:ac:f7:4c:8b:39:0d:6b:a5:c8:a1:b3:0e:82:a7:94:11:
         42:c9:9a:4e:cb:49:8e:6c:94:af:6a:62:2d:4e:46:c8:3e:a4:
         69:12:aa:df:0a:89:46:31:d7:c8:62:5d:62:4c:56:da:9a:9e:
         52:57:ad:12:6c:e8:38:07:e2:09:27:e7:95:c5:51:44:de:20:
         dd:94:11:bf:1c:92:60:42:fa:6d:d9:bf:d4:ed:ea:68:53:0c:
         57:2b:07:7e:f8:01:10:20:4f:13:5f:80:31:be:b7:a8:65:48:
         93:17:d7:5f:65:ba:e0:72:80:2f:3c:19:8f:21:ff:77:df:83:
         25:f8:43:e8:13:fd:30:5d:63:2f:dc:de:de:d6:4f:ac:0a:b6:
         0e:70:a7:42:94:6e:53:a6:b4:16:81:b9:85:f8:97:0b:96:d5:
         ae:2d:29:f5:4d:18:cc:2f:d9:5c:78:fc:bd:52:86:f4:d7:56:
         b2:50:bd:6f:8d:ad:db:cc:45:6e:3f:38:f8:47:1d:1e:f6:cb:
         b5:d5:ee:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:14 2026 by rpki-client