Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
File:                     Tyg3I2nkguSUJO054kQzDjTrQLA.mft (raw, json)
Hash identifier:          NtSkNwnsC4Zj/6XE48tgoTMqMd3aG8K9UfV85AwRD+8=
Subject key identifier:   57:91:F2:6F:17:B1:D9:81:94:5A:11:38:DE:8C:68:37:6C:94:21:B1
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Certificate issuer:       /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial:       66
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
Manifest number:          1876
Signing time:             Wed 23 Sep 2026 18:38:34 +0000
Manifest this update:     Wed 23 Sep 2026 18:38:34 +0000
Manifest next update:     Fri 23 Oct 2026 18:38:34 +0000
Files and hashes:         1: AWKHACfcEZPHE5Ce5UJuuhysS5U.roa (hash: GtIJnHRH8uxCoccGpkVu9RTEjHYPr3PabmKKTmOgpWY=)
                          2: Tyg3I2nkguSUJO054kQzDjTrQLA.crl (hash: NKl7VykgXS3XY3HCWXd6k/zjg/bGURLCJxBjxb69CWk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 19:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
        Validity
            Not Before: Sep 15 01:30:54 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=5791F26F17B1D981945A1138DE8C68376C9421B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:55:2e:95:bf:12:b9:30:11:44:2f:2c:b3:
                    16:0b:77:ba:1b:76:f3:00:f5:32:52:97:03:7a:3e:
                    7c:89:e6:5c:3a:f1:ba:dd:56:c7:89:14:29:ae:12:
                    9b:f3:64:bd:78:2d:b9:ac:ca:af:5d:e2:73:43:de:
                    33:9e:99:e1:08:de:59:03:ca:a5:0e:20:1d:42:44:
                    9e:bc:0d:fb:5f:96:16:da:3e:7c:c1:a4:63:f9:c7:
                    a9:f0:e7:3f:94:b4:9e:0d:91:31:93:ca:bd:06:3e:
                    d5:18:b4:00:d8:da:55:fc:75:a4:61:3f:51:00:5c:
                    f2:77:ba:4c:b7:aa:af:cc:b6:34:61:df:90:c9:22:
                    e3:c7:a7:f4:f5:4f:39:8a:47:76:38:be:3a:46:13:
                    22:82:3b:a3:12:d9:48:ed:13:e2:e1:53:02:eb:30:
                    78:e2:e3:63:d4:4c:01:71:9c:50:e0:47:02:6b:07:
                    3b:d0:66:44:59:e6:27:ba:e4:77:c3:6c:8a:13:12:
                    ab:99:b7:c5:9b:73:84:9f:4d:c5:e4:20:9d:d7:82:
                    7c:f3:9a:ba:fd:a0:f5:61:4c:70:57:e8:da:3a:c8:
                    3b:88:9c:85:cf:0d:ca:55:30:ad:f4:b2:cf:5d:ef:
                    bc:b8:0c:ce:a1:89:c5:be:85:0e:ec:6b:05:d2:41:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:F2:6F:17:B1:D9:81:94:5A:11:38:DE:8C:68:37:6C:94:21:B1
            X509v3 Authority Key Identifier:
                keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a3:2d:7b:d9:29:ca:a9:08:33:68:89:cb:81:70:9e:b1:89:
         cc:35:c4:8f:02:33:fa:eb:7f:61:06:32:5c:00:ab:79:25:27:
         ef:04:ae:cd:17:c6:a0:49:d7:db:1c:42:e9:1e:81:79:d0:6c:
         63:c5:fd:ed:49:57:62:ca:ba:6c:59:fe:4b:5e:a7:35:3f:7c:
         ab:0e:f3:cd:27:e3:72:04:e6:8c:7b:36:8c:09:1c:51:35:78:
         1b:fb:2a:58:1a:d0:81:7b:17:99:f4:55:ef:c8:f5:bc:20:b2:
         a9:44:d0:fb:b3:e8:95:1e:5e:f6:cd:a1:e5:c7:9d:7d:6d:5f:
         e3:ac:16:87:6b:65:d1:e1:f0:98:3c:55:1f:06:5d:91:c2:b4:
         0b:b0:be:db:d8:f8:a5:0a:a6:30:60:08:c9:61:de:f1:61:42:
         0a:81:a1:e5:ec:6a:d5:41:7c:70:c7:15:89:e4:f8:d2:19:f7:
         9f:f9:06:7e:60:42:85:11:d1:88:de:70:b5:c5:9b:cf:f6:37:
         a5:80:48:85:4c:5b:70:75:38:27:b9:d0:aa:25:f9:0f:32:b3:
         78:f2:b9:cc:e4:72:75:4d:99:c9:a3:08:36:0a:35:e2:50:1d:
         3e:d9:83:16:28:90:f0:e4:0c:5a:b6:d5:f2:4a:98:6e:38:c0:
         33:72:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:42:53 2026 by rpki-client