Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30076/x0zRD1KIl6j6X1xYwNXfGWS_jXA.mft
File:                     x0zRD1KIl6j6X1xYwNXfGWS_jXA.mft (raw, json)
Hash identifier:          SWK0mFhH2UkuUUSNr7ogHtdidOe2xbqHxTZlbjZ1MXQ=
Subject key identifier:   6D:DE:AD:D9:CC:FD:8C:A3:FE:7E:19:8C:47:5C:22:98:9A:4D:F9:82
Authority key identifier: C7:4C:D1:0F:52:88:97:A8:FA:5F:5C:58:C0:D5:DF:19:64:BF:8D:70
Certificate issuer:       /CN=C74CD10F528897A8FA5F5C58C0D5DF1964BF8D70
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x0zRD1KIl6j6X1xYwNXfGWS_jXA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30076/x0zRD1KIl6j6X1xYwNXfGWS_jXA.mft
Manifest number:          0457
Signing time:             Sat 14 Nov 2026 16:09:47 +0000
Manifest this update:     Sat 14 Nov 2026 16:09:47 +0000
Manifest next update:     Mon 14 Dec 2026 16:09:47 +0000
Files and hashes:         1: FEAJa4mB2sTxRBt7HCCPb4jp_Ts.roa (hash: XcRS0ONVSxEqigI7Mmf9xnw6M+SoZkr0RXfke0HoT3Q=)
                          2: x0zRD1KIl6j6X1xYwNXfGWS_jXA.crl (hash: IqRs6p+VFXl+NVJBAEx4orCm3CPdxj6jkiPLUGBAwrY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30076/x0zRD1KIl6j6X1xYwNXfGWS_jXA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30076/x0zRD1KIl6j6X1xYwNXfGWS_jXA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x0zRD1KIl6j6X1xYwNXfGWS_jXA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C74CD10F528897A8FA5F5C58C0D5DF1964BF8D70
        Validity
            Not Before: Oct 15 01:34:52 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=6DDEADD9CCFD8CA3FE7E198C475C22989A4DF982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:f7:76:fc:dd:a5:9f:37:86:59:06:36:0a:
                    0c:52:17:89:ec:86:36:78:95:97:3f:f2:15:78:35:
                    fd:2b:62:3c:a5:a7:06:9b:cb:7d:ce:0b:22:6f:e4:
                    67:5f:3e:c6:09:a0:ad:86:60:5c:9b:50:9b:6b:dc:
                    cc:29:1c:de:9a:bb:e0:78:4e:5e:08:98:09:19:0d:
                    c4:ea:9c:19:04:7a:ad:2a:6b:d9:c0:b4:ad:7c:1b:
                    da:c3:dc:6e:a8:d2:0c:3c:67:d8:1a:fd:5d:2b:89:
                    ad:a7:77:fb:18:70:46:fe:fc:bf:2c:9f:cf:6b:a6:
                    16:d4:aa:fe:c6:65:a3:ce:4e:95:96:1c:21:8c:12:
                    1a:62:07:61:87:d8:c2:f1:17:fd:ce:d1:2e:21:6d:
                    ec:99:21:19:03:b7:62:53:93:87:6c:ab:f3:78:ca:
                    f4:b3:13:6f:c3:af:d6:f8:35:f5:f3:7f:ae:e3:d9:
                    65:08:9e:4c:9c:31:47:00:61:3a:d0:d1:e2:4e:96:
                    e2:ab:c0:20:dc:79:d0:92:05:50:be:21:27:32:81:
                    8e:bc:24:01:00:13:e3:d4:54:5e:30:e8:9e:02:24:
                    73:5d:47:0b:98:9f:d7:c3:29:12:a5:59:ec:99:28:
                    8e:d6:4d:42:64:3f:49:81:73:48:16:12:77:03:52:
                    19:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DE:AD:D9:CC:FD:8C:A3:FE:7E:19:8C:47:5C:22:98:9A:4D:F9:82
            X509v3 Authority Key Identifier:
                keyid:C7:4C:D1:0F:52:88:97:A8:FA:5F:5C:58:C0:D5:DF:19:64:BF:8D:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30076/x0zRD1KIl6j6X1xYwNXfGWS_jXA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x0zRD1KIl6j6X1xYwNXfGWS_jXA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30076/x0zRD1KIl6j6X1xYwNXfGWS_jXA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b4:b4:58:6c:1b:26:19:e4:bd:41:26:aa:16:1d:63:09:9a:
         6a:2f:88:1b:30:a3:03:c7:1a:d9:5a:68:6d:ef:2e:32:2a:78:
         3b:e8:60:0f:7f:69:d9:a7:45:ff:d9:3a:58:44:ca:27:06:e7:
         71:2c:cb:f2:34:79:a3:f9:8e:7b:31:45:65:37:9f:16:3f:c0:
         ce:3c:ec:cb:18:60:72:f1:64:a9:71:59:58:47:88:da:c0:c0:
         24:c1:34:2b:e3:d5:26:b9:71:ea:e1:32:ad:7b:28:52:55:07:
         be:4b:60:79:82:bb:b8:71:05:d9:02:ee:39:1b:cc:f1:6d:cd:
         19:17:43:e3:53:64:f3:40:ad:15:b8:52:44:86:b8:ce:94:e2:
         09:fd:fb:9b:a9:6b:70:3c:06:4d:1a:04:3e:60:4e:f7:8d:87:
         51:3f:b9:93:e4:a0:54:23:a9:d2:c4:b0:1e:15:f0:25:da:e6:
         54:77:ec:56:ca:ef:b2:6e:93:97:b8:21:1c:98:ca:fc:12:8a:
         cb:98:b6:5e:8f:b6:a4:24:83:30:4b:52:0b:e3:7d:d6:73:16:
         e2:88:1e:70:7c:27:aa:b0:8a:82:d2:87:90:c5:6a:25:b8:ff:
         9f:17:05:51:80:99:90:34:26:dc:a7:3a:fa:22:53:fa:ec:46:
         60:ab:26:f3
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzRD
RDEwRjUyODg5N0E4RkE1RjVDNThDMEQ1REYxOTY0QkY4RDcwMB4XDTI2MTAxNTAx
MzQ1MloXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNkRERUFERDlDQ0ZEOENB
M0ZFN0UxOThDNDc1QzIyOTg5QTRERjk4MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALff93b83aWfN4ZZBjYKDFIXieyGNniVlz/yFXg1/StiPKWnBpvL
fc4LIm/kZ18+xgmgrYZgXJtQm2vczCkc3pq74HhOXgiYCRkNxOqcGQR6rSpr2cC0
rXwb2sPcbqjSDDxn2Br9XSuJrad3+xhwRv78vyyfz2umFtSq/sZlo85OlZYcIYwS
GmIHYYfYwvEX/c7RLiFt7JkhGQO3YlOTh2yr83jK9LMTb8Ov1vg19fN/ruPZZQie
TJwxRwBhOtDR4k6W4qvAINx50JIFUL4hJzKBjrwkAQAT49RUXjDongIkc11HC5if
18MpEqVZ7JkojtZNQmQ/SYFzSBYSdwNSGScCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRt3q3ZzP2Mo/5+GYxHXCKYmk35gjAfBgNVHSMEGDAWgBTHTNEPUoiXqPpfXFjA
1d8ZZL+NcDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNzYveDB6UkQxS0lsNmo2WDF4WXdOWGZHV1NfalhBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDB6UkQxS0lsNmo2WDF4WXdOWGZH
V1NfalhBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDc2L3gwelJEMUtJbDZqNlgxeFl3TlhmR1dTX2pYQS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjtLRYbBsmGeS9QSaqFh1jCZpq
L4gbMKMDxxrZWmht7y4yKng76GAPf2nZp0X/2TpYRMonBudxLMvyNHmj+Y57MUVl
N58WP8DOPOzLGGBy8WSpcVlYR4jawMAkwTQr49UmuXHq4TKteyhSVQe+S2B5gru4
cQXZAu45G8zxbc0ZF0PjU2TzQK0VuFJEhrjOlOIJ/fubqWtwPAZNGgQ+YE73jYdR
P7mT5KBUI6nSxLAeFfAl2uZUd+xWyu+ybpOXuCEcmMr8EorLmLZej7akJIMwS1IL
433WcxbiiB5wfCeqsIqC0oeQxWoluP+fFwVRgJmQNCbcpzr6IlP67EZgqybz
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:54:34 2026 by rpki-client