Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft
File:                     FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft (raw, json)
Hash identifier:          dHWzkhR0Sd8Chk+pF+682+5Zm/bH+ly9k+66NY4KMhs=
Subject key identifier:   47:6C:C0:72:CB:BB:6D:0D:6C:CB:61:6B:E2:BD:FD:23:AC:C9:6E:4D
Authority key identifier: 15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA
Certificate issuer:       /CN=157E088BE15A585F688D86A671D88F0150C3EDBA
Certificate serial:       48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft
Manifest number:          11C4
Signing time:             Sun 15 Nov 2026 13:39:55 +0000
Manifest this update:     Sun 15 Nov 2026 13:39:55 +0000
Manifest next update:     Tue 15 Dec 2026 13:39:55 +0000
Files and hashes:         1: FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl (hash: IptIlJ9K0sKaGHZpd1CykjpS/Zq46BmAdUgcyoFHizc=)
                          2: TgzBv3lM-fcPhpyEW31Z-IMahSA.roa (hash: AzkEBwiwXNavN02mVR1kF8Q1JYG8IVjhzDsfyD7XZ2Q=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 14:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157E088BE15A585F688D86A671D88F0150C3EDBA
        Validity
            Not Before: Nov 15 01:33:20 2026 GMT
            Not After : Nov 15 01:30:02 2027 GMT
        Subject: CN=476CC072CBBB6D0D6CCB616BE2BDFD23ACC96E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:b7:06:3e:98:a8:27:aa:74:e5:a6:12:09:
                    51:88:c7:c6:9a:71:c9:d3:8f:56:71:49:d6:fa:73:
                    ff:52:ef:94:03:4e:ef:b8:3f:99:84:67:91:19:37:
                    8d:de:b0:aa:72:f8:9d:c8:4b:5d:56:02:aa:8d:f5:
                    08:9f:b1:aa:1c:3d:7f:13:cd:09:58:06:d3:8a:90:
                    b8:0a:88:d3:98:88:4c:8c:bf:34:d5:90:84:c2:c5:
                    0e:d8:83:b8:09:47:5f:7d:c8:f6:d4:9f:19:5a:90:
                    5f:c4:5f:05:c8:3f:6a:2f:2b:67:9e:ea:3a:2c:38:
                    22:42:d8:03:13:40:ec:7c:12:e4:da:44:05:98:d3:
                    b0:af:bb:b2:b9:a5:fa:64:20:a7:6b:8d:e9:be:53:
                    c2:5c:c5:55:db:6c:43:c7:d2:e6:18:cb:a8:fd:96:
                    a3:0e:b2:28:ac:ca:f0:8f:c8:2b:a7:ef:41:0c:4a:
                    0f:45:eb:4e:28:8e:6c:20:90:1e:f0:95:7f:b1:81:
                    4b:29:8e:e3:b2:75:da:71:d8:50:1c:a4:29:1a:5e:
                    5e:d9:e6:bd:4b:00:0f:b3:53:00:66:3e:75:b7:40:
                    69:b8:9a:b3:f4:d4:08:ca:3f:ac:9c:a1:4a:56:62:
                    87:54:dc:1d:ff:56:28:d3:98:38:fc:46:b2:bc:c5:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6C:C0:72:CB:BB:6D:0D:6C:CB:61:6B:E2:BD:FD:23:AC:C9:6E:4D
            X509v3 Authority Key Identifier:
                keyid:15:7E:08:8B:E1:5A:58:5F:68:8D:86:A6:71:D8:8F:01:50:C3:ED:BA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FX4Ii-FaWF9ojYamcdiPAVDD7bo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30188/FX4Ii-FaWF9ojYamcdiPAVDD7bo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:11:7b:b1:42:f1:98:f9:ef:d4:85:61:2c:cf:25:d1:43:f7:
         03:35:fc:8d:fd:fe:1b:9a:c2:ef:e2:91:96:68:20:96:66:e1:
         a6:42:5c:38:c9:15:d4:28:6a:c0:22:4d:74:16:dd:92:15:39:
         f3:0f:94:57:ab:11:d8:f0:b4:2e:2c:da:b6:10:3a:dc:4c:19:
         5b:46:26:5d:81:15:42:80:f6:04:55:23:2a:c5:76:02:9e:40:
         36:61:f5:f3:2b:56:01:df:11:1e:dd:da:a2:a0:cd:6a:84:32:
         fd:93:d5:81:be:7d:c8:c6:45:bd:e5:99:ad:83:c1:62:de:60:
         0e:e9:a2:b6:27:24:f2:65:23:c8:28:61:53:1a:f2:32:a7:49:
         98:9f:b9:bd:1f:4f:57:9f:52:74:70:55:63:9f:11:db:b8:61:
         a1:53:37:48:ae:e8:8c:5d:c1:ea:44:5a:da:ec:e7:98:bc:e5:
         7e:af:0b:d7:da:4d:8d:90:2a:3c:29:49:41:08:a7:f3:78:18:
         20:1a:a5:c1:ae:ec:ab:60:d4:4b:20:d1:de:c5:3d:49:26:42:
         94:0f:ac:21:50:43:c1:2d:c1:ea:e3:b9:39:a9:68:8b:fd:b7:
         85:3a:5f:95:ae:17:9c:13:7e:16:7e:87:79:be:24:d9:6e:4d:
         a0:fe:1f:24
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTdF
MDg4QkUxNUE1ODVGNjg4RDg2QTY3MUQ4OEYwMTUwQzNFREJBMB4XDTI2MTExNTAx
MzMyMFoXDTI3MTExNTAxMzAwMlowMzExMC8GA1UEAxMoNDc2Q0MwNzJDQkJCNkQw
RDZDQ0I2MTZCRTJCREZEMjNBQ0M5NkU0RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANXytwY+mKgnqnTlphIJUYjHxppxydOPVnFJ1vpz/1LvlANO77g/
mYRnkRk3jd6wqnL4nchLXVYCqo31CJ+xqhw9fxPNCVgG04qQuAqI05iITIy/NNWQ
hMLFDtiDuAlHX33I9tSfGVqQX8RfBcg/ai8rZ57qOiw4IkLYAxNA7HwS5NpEBZjT
sK+7srml+mQgp2uN6b5TwlzFVdtsQ8fS5hjLqP2Wow6yKKzK8I/IK6fvQQxKD0Xr
TiiObCCQHvCVf7GBSymO47J12nHYUBykKRpeXtnmvUsAD7NTAGY+dbdAabias/TU
CMo/rJyhSlZih1TcHf9WKNOYOPxGsrzFUqECAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRHbMByy7ttDWzLYWvivf0jrMluTTAfBgNVHSMEGDAWgBQVfgiL4VpYX2iNhqZx
2I8BUMPtujAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxODgvRlg0SWktRmFXRjlvallhbWNkaVBBVkREN2JvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlg0SWktRmFXRjlvallhbWNkaVBB
VkREN2JvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTg4L0ZYNElpLUZhV0Y5b2pZYW1jZGlQQVZERDdiby5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkEXuxQvGY+e/UhWEszyXRQ/cD
NfyN/f4bmsLv4pGWaCCWZuGmQlw4yRXUKGrAIk10Ft2SFTnzD5RXqxHY8LQuLNq2
EDrcTBlbRiZdgRVCgPYEVSMqxXYCnkA2YfXzK1YB3xEe3dqioM1qhDL9k9WBvn3I
xkW95Zmtg8Fi3mAO6aK2JyTyZSPIKGFTGvIyp0mYn7m9H09Xn1J0cFVjnxHbuGGh
UzdIruiMXcHqRFra7OeYvOV+rwvX2k2NkCo8KUlBCKfzeBggGqXBruyrYNRLINHe
xT1JJkKUD6whUEPBLcHq47k5qWiL/beFOl+VrhecE34Wfod5viTZbk2g/h8k
-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:46 2026 by rpki-client