Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.mft
File:                     A7YMj5hsHx2gS4bMPim64AZ0kcY.mft (raw, json)
Hash identifier:          IMeZa5f2VI58uTRe2lY5W5kAYjSWhEsx0GGSCQ7Urgs=
Subject key identifier:   7D:6E:41:37:82:C8:1B:5F:AE:2C:B0:E3:AD:38:57:99:07:4A:15:19
Authority key identifier: 03:B6:0C:8F:98:6C:1F:1D:A0:4B:86:CC:3E:29:BA:E0:06:74:91:C6
Certificate issuer:       /CN=03B60C8F986C1F1DA04B86CC3E29BAE0067491C6
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.mft
Manifest number:          10
Signing time:             Thu 26 Mar 2026 14:18:31 +0000
Manifest this update:     Thu 26 Mar 2026 14:18:31 +0000
Manifest next update:     Fri 10 Apr 2026 14:18:31 +0000
Files and hashes:         1: A7YMj5hsHx2gS4bMPim64AZ0kcY.crl (hash: sWrDpqe91LVCVvK6UY8BDWazBKtkmDd+pbImRg3PvlM=)
                          2: FBId7qN6V-AByTrIuvayrePBGDA.roa (hash: e0RO2gPPPo6yOvxd0ap5Mg1LMB+/Hno3PdsjIS9cKJQ=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03B60C8F986C1F1DA04B86CC3E29BAE0067491C6
        Validity
            Not Before: Mar 24 02:52:40 2026 GMT
            Not After : Mar 24 02:46:29 2027 GMT
        Subject: CN=7D6E413782C81B5FAE2CB0E3AD385799074A1519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:74:48:f0:a9:97:b8:be:b0:b4:14:08:7d:
                    33:d8:28:10:30:63:70:80:6c:b7:be:43:d2:14:7d:
                    e9:0f:c2:85:27:e6:f1:9d:9a:fe:d1:86:3e:ac:4f:
                    81:e3:57:88:99:34:a9:91:73:55:01:a9:11:d9:85:
                    8d:43:7f:35:16:8c:e9:f4:22:f1:67:e4:70:4d:66:
                    3c:ad:4c:f7:1b:57:c3:a0:13:cb:d0:42:bc:91:1b:
                    21:9e:a8:05:54:3b:33:94:0b:44:2d:6f:5c:ba:ef:
                    11:0a:ef:2d:c1:90:02:1d:48:0e:35:c7:58:a8:cc:
                    d1:b7:0f:23:71:bb:08:50:27:8f:89:1d:6b:8c:65:
                    ec:54:f6:6c:9e:1a:01:b1:1a:ad:0f:49:9a:b8:49:
                    1d:48:d7:46:94:3b:98:ad:db:2f:3c:73:63:f3:c5:
                    ee:66:47:78:10:82:35:2e:5b:41:57:ca:09:74:0a:
                    4d:89:0f:bf:ab:d0:a2:8d:e0:2d:05:34:48:48:a4:
                    98:bd:ac:ec:9f:31:a6:31:16:50:ac:63:95:ad:69:
                    bd:57:15:e5:12:e7:63:79:d0:7d:9d:0c:b6:0c:51:
                    55:f3:15:b7:31:8a:8f:76:0e:95:c9:91:4e:59:7c:
                    fd:4d:a9:28:a2:66:ef:d8:3c:70:44:b7:fb:74:fd:
                    65:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:41:37:82:C8:1B:5F:AE:2C:B0:E3:AD:38:57:99:07:4A:15:19
            X509v3 Authority Key Identifier:
                keyid:03:B6:0C:8F:98:6C:1F:1D:A0:4B:86:CC:3E:29:BA:E0:06:74:91:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A7YMj5hsHx2gS4bMPim64AZ0kcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30039/A7YMj5hsHx2gS4bMPim64AZ0kcY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:42:0c:ff:b9:6a:b1:40:47:37:95:1c:45:ce:25:4e:6e:b8:
         bb:64:1e:a1:90:0a:7b:de:65:60:8f:84:03:35:44:e9:bf:91:
         01:55:54:06:1c:6c:2e:98:39:af:23:8c:f7:1c:b6:82:f2:3b:
         3f:e6:c5:b0:22:7c:1a:e2:a9:c5:f9:7d:9d:e2:e0:31:65:e5:
         a2:45:56:b9:1e:1c:a8:18:12:9b:98:29:0e:8f:42:c0:36:d4:
         44:b1:a6:9a:c7:71:49:2a:2d:60:2e:aa:b7:90:88:54:c7:74:
         2b:22:b3:13:80:c4:c3:c1:08:2e:3c:47:2c:d9:c3:bc:0a:a7:
         d6:2b:53:ad:c2:0c:5e:7c:dc:8f:11:30:f2:a5:cb:c7:47:7d:
         60:d6:1d:62:27:d9:c9:a9:08:91:17:f3:c7:89:6a:93:f3:4c:
         87:37:db:d9:92:0d:70:ad:26:2a:1e:6a:24:20:2a:fc:cd:52:
         9d:2a:55:d1:9f:13:36:49:9c:2f:df:fa:f8:16:b5:d4:cd:2c:
         36:4a:e8:f5:03:f6:67:44:cb:03:32:4e:77:99:98:ad:fb:d8:
         64:05:27:80:3f:13:45:b6:57:8c:d2:f7:66:ef:b1:6a:2d:c1:
         4c:ac:b4:22:9f:74:7b:30:b1:45:1b:c7:d8:5c:57:4c:2f:95:
         6b:db:6c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:35 2026 by rpki-client