Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
File:                     0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json)
Hash identifier:          7Gnw441CFss/5t0RIF4Uvipaw5nKMbcaKK2O+RQrB38=
Subject key identifier:   2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       59
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
Manifest number:          0FA4
Signing time:             Fri 24 Jul 2026 07:34:03 +0000
Manifest this update:     Fri 24 Jul 2026 07:34:03 +0000
Manifest next update:     Sun 23 Aug 2026 07:34:03 +0000
Files and hashes:         1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: cemc2sTBCrNkmRrukZQvksLRIDgeM/dxrnuaCX+20q4=)
                          2: 2XPknBidNhrPcuFgBlGkgluQNiw.roa (hash: tDDV9BVjp+J1a6/2nV8qlHNF0h2nNDHRFkrlCCiNw8k=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 07:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: Jul 15 01:32:54 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5:
                    29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd:
                    2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3:
                    f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3:
                    ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67:
                    99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30:
                    f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df:
                    ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a:
                    4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6:
                    13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e:
                    c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70:
                    82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2:
                    6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3:
                    99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c:
                    94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7:
                    a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc:
                    d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:ac:a2:1e:04:a8:f8:51:a9:d9:76:7f:ca:d2:b3:f4:92:7d:
         78:9c:36:92:29:d9:c4:95:87:b0:c0:33:3b:05:b1:5c:a6:6d:
         28:28:1d:fa:22:2d:0c:78:f5:d7:62:ac:e9:c6:af:e8:b5:cf:
         6a:ad:b7:9d:1d:ef:35:b2:5a:0e:02:f3:85:17:31:5d:0c:a2:
         a1:b7:b6:77:27:eb:2b:0d:ad:97:a8:4d:6e:4c:bf:f1:26:57:
         5d:3f:6b:e1:71:4a:33:f4:fa:ff:15:13:d3:7a:8f:46:45:d3:
         e5:cc:ea:67:24:46:19:c0:31:20:8b:1e:37:e8:b0:57:92:26:
         d1:15:c4:ec:1c:41:d4:78:30:fe:e8:ed:b7:71:ec:a2:a9:db:
         32:b6:9d:da:35:29:ed:34:cd:92:b3:86:80:10:d5:30:d6:76:
         77:cd:c5:4e:71:39:8d:34:32:f6:8d:b3:1e:0a:68:40:94:43:
         99:83:cc:e9:d2:2d:77:cc:8c:3f:0d:0d:2f:3b:f4:8c:c2:ed:
         1d:6c:f0:a9:12:b5:27:fb:35:c5:4b:df:7a:a9:64:f4:c9:14:
         2e:99:94:80:69:72:34:c6:ff:f7:b4:e3:72:23:5c:85:25:7e:
         24:65:ac:81:72:34:0d:22:ec:a9:ee:66:3d:f5:4a:05:81:b4:
         b3:dc:c3:0a
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEE5
NTJBMDBEQjIxNTQxNzVDMjBCNEM4ODdFRkEyRjgwQUM2RjA1MB4XDTI2MDcxNTAx
MzI1NFoXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMkI2QkQ4QUYzQTI3RDg0
OTYyMDQwQTlCMzE2QzQzMTdCMkVBMDY3NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKUv9+SEKsV3yQk8RbzVKRTOb5kEs3VM5Ly0WxC9Kjupsxfq4fat
8/8RYKnT+XqBiyqRb0L70bCHUIfz7LfW48X/ZYPS6aC7tU1nmW9TDT5FUEkNmhZ0
Ei0w9J7YZMQCLM67MAfNmG7frDGaRzD7uXUvts155NYaTpsEZV1tZmbD1nKeGmum
E/A8lfPVYpamn3ANSwoOxqK+lp8l6RhKjS7u+c1wgj9iWy1kC2GOBW/2YyjybmId
cfU6QAJZNGDKMKSzmSfKdRqpOakW598Q6SNMlOPf0f6shDgkdCbQiEvHpjQZSl4P
UajqlyHMXYjM2TpVcYGaCNabXNvVy4XhINcCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQra9ivOifYSWIECpsxbEMXsuoGdzAfBgNVHSMEGDAWgBTQqVKgDbIVQXXCC0yI
fvovgKxvBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMzUvMEtsU29BMnlGVUYxd2d0TWlINzZMNENzYndVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMEtsU29BMnlGVUYxd2d0TWlINzZM
NENzYndVLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTM1LzBLbFNvQTJ5RlVGMXdndE1pSDc2TDRDc2J3VS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC/rKIeBKj4UanZdn/K0rP0kn14
nDaSKdnElYewwDM7BbFcpm0oKB36Ii0MePXXYqzpxq/otc9qrbedHe81sloOAvOF
FzFdDKKht7Z3J+srDa2XqE1uTL/xJlddP2vhcUoz9Pr/FRPTeo9GRdPlzOpnJEYZ
wDEgix436LBXkibRFcTsHEHUeDD+6O23ceyiqdsytp3aNSntNM2Ss4aAENUw1nZ3
zcVOcTmNNDL2jbMeCmhAlEOZg8zp0i13zIw/DQ0vO/SMwu0dbPCpErUn+zXFS996
qWT0yRQumZSAaXI0xv/3tONyI1yFJX4kZayBcjQNIuyp7mY99UoFgbSz3MMK
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:03:39 2026 by rpki-client