Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
File:                     wB0teNyrJtlM0QSRG30hUeYo4_A.mft (raw, json)
Hash identifier:          ujqbEKdhd7oXo+/xvMFIQVtY2pzg+QxnOFALuyARFFI=
Subject key identifier:   1F:55:7A:CA:06:4E:47:9C:88:E2:00:0D:CD:B9:3C:31:ED:7E:5A:B8
Authority key identifier: C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0
Certificate issuer:       /CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
Manifest number:          B7
Signing time:             Thu 26 Mar 2026 16:37:04 +0000
Manifest this update:     Thu 26 Mar 2026 16:37:04 +0000
Manifest next update:     Fri 10 Apr 2026 16:37:04 +0000
Files and hashes:         1: _bp6dKnskGFcsbZm4cdST917bCY.roa (hash: 1OWYsbOBmXpeXjOm7vb+Wf57hk2wyMbrLVy36kQM9eE=)
                          2: wB0teNyrJtlM0QSRG30hUeYo4_A.crl (hash: hK94Yoiykowq/F7JysRxr0QXSZ1AQcSvU3kn4cdo1DA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C01D2D78DCAB26D94CD104911B7D2151E628E3F0
        Validity
            Not Before: Mar 15 01:37:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F557ACA064E479C88E2000DCDB93C31ED7E5AB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5f:2b:27:79:54:76:2d:13:7f:15:cf:fc:bf:
                    8a:90:6b:6d:62:df:22:0d:ce:c3:95:28:93:b2:85:
                    e3:22:f2:ca:01:0f:bb:12:95:42:1f:f9:45:f9:58:
                    2b:99:6b:00:82:54:a2:94:e5:50:03:ca:32:64:ec:
                    bc:68:97:75:85:d4:cc:13:1d:63:8c:92:6f:ad:f9:
                    82:d0:5e:a2:cb:54:a4:50:36:43:df:9e:7d:3b:c0:
                    ff:3b:d9:88:f0:b0:69:09:bb:51:f1:86:3a:be:46:
                    86:4b:81:e3:57:3b:db:7a:df:18:85:e8:14:77:2e:
                    88:89:f7:b1:f6:89:62:7d:2b:35:ee:41:a8:a2:75:
                    3a:f4:62:02:c3:c2:cb:01:77:1c:79:5c:53:1a:6b:
                    14:e6:03:67:3c:36:7c:7d:c1:84:24:ca:9e:31:a0:
                    04:71:53:fb:5f:8d:44:b8:74:fd:35:d2:e2:f8:74:
                    65:86:dd:d5:e9:06:f3:43:f1:5c:c8:39:ea:5f:13:
                    f3:c5:82:be:cf:69:11:e4:e7:17:d2:c7:73:7c:91:
                    4c:bb:0a:4e:12:83:75:03:42:b9:e9:60:b8:4d:40:
                    ac:f3:1a:f2:20:2b:57:33:d4:39:e5:cc:a5:9f:22:
                    10:55:e3:e9:11:67:35:61:6f:d1:f4:bf:96:39:97:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:55:7A:CA:06:4E:47:9C:88:E2:00:0D:CD:B9:3C:31:ED:7E:5A:B8
            X509v3 Authority Key Identifier:
                keyid:C0:1D:2D:78:DC:AB:26:D9:4C:D1:04:91:1B:7D:21:51:E6:28:E3:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wB0teNyrJtlM0QSRG30hUeYo4_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30146/wB0teNyrJtlM0QSRG30hUeYo4_A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8c:c2:13:c8:03:93:5e:19:75:75:72:d8:33:33:72:64:27:
         62:a7:9f:18:39:5f:c4:03:8b:10:1b:9f:82:7c:45:e4:94:9c:
         80:70:2d:36:dc:be:eb:9b:92:9e:da:4d:90:39:17:9a:74:34:
         2f:21:45:f7:71:ab:97:a2:76:dc:0c:20:b5:e5:0f:80:fd:04:
         3f:a7:f1:94:dc:15:81:7d:49:06:2e:0e:d8:40:2c:c1:18:4c:
         3b:7c:85:e8:5b:0e:2b:1d:15:90:97:09:5b:4b:fa:ce:7a:1c:
         5e:fb:e5:e0:80:85:2d:c3:55:62:54:1a:12:c2:b8:cf:5a:29:
         ef:1f:c4:20:f1:42:5e:79:db:e2:18:df:03:6c:36:0f:3a:f0:
         4b:2a:4b:46:67:9f:4e:89:8f:1f:f4:44:ff:0f:84:da:8a:01:
         b9:67:09:38:f0:ce:bb:e3:41:41:72:3c:49:25:b5:3d:25:af:
         e7:6a:e8:cc:00:5e:7c:81:61:5d:ef:6b:b2:54:99:df:90:4b:
         51:f3:8b:0c:5b:ad:fa:91:8c:39:44:30:f8:c5:6c:5d:bb:1e:
         2d:19:73:9f:14:4c:f6:ca:b3:cd:cc:1b:65:3b:4b:48:d9:cd:
         2e:ba:0a:f5:92:40:39:80:0c:df:a8:d0:38:c7:f8:c4:40:0a:
         62:69:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:56:18 2026 by rpki-client