Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
File:                     cRknFYbSjHciG34Ukuh1GxH0cYw.mft (raw, json)
Hash identifier:          KkzimNWeXGPJI0s9OxWV9EBVwK0L4adFixmursr9VKk=
Subject key identifier:   35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
Authority key identifier: 71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C
Certificate issuer:       /CN=7119271586D28C77221B7E1492E8751B11F4718C
Certificate serial:       10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
Manifest number:          07E0
Signing time:             Sun 15 Nov 2026 05:34:49 +0000
Manifest this update:     Sun 15 Nov 2026 05:34:49 +0000
Manifest next update:     Tue 15 Dec 2026 05:34:49 +0000
Files and hashes:         1: ISfwIZdAM1dOPnbjyM1PGeTPeSg.roa (hash: x5O63edKZKMkkB881JvjRVJFZAPzMjTHvLKECIiAsNA=)
                          2: cRknFYbSjHciG34Ukuh1GxH0cYw.crl (hash: AmWtDwYYyQOPu0OAjADfTkKYs2KGbBi3cpoX8jiuiic=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 06:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7119271586D28C77221B7E1492E8751B11F4718C
        Validity
            Not Before: Nov 15 01:31:11 2026 GMT
            Not After : Nov 15 01:30:02 2027 GMT
        Subject: CN=358AC196AF95610D3A69086826507C24CB3FAD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:c5:2b:4d:c6:6c:bb:12:e0:bf:5a:1f:5f:
                    e5:30:7c:4f:ed:35:c6:e8:f4:86:82:54:ce:30:f3:
                    46:df:67:c3:0c:d8:bf:98:f3:2d:f6:0f:38:88:3d:
                    96:05:60:40:1d:12:7a:d4:8b:f4:cc:b5:a7:a3:d9:
                    40:76:7d:19:5e:4c:f7:5a:1c:02:13:cc:4a:db:4f:
                    82:d5:48:f3:a3:b3:20:78:12:99:8a:7c:0e:fd:a3:
                    e9:57:ed:3b:f7:09:e0:ce:14:97:19:58:9a:49:ce:
                    3b:64:4b:fe:49:44:9f:c0:e8:b7:75:d1:94:d2:68:
                    7b:a6:c7:53:b4:c9:75:f6:70:9d:29:f8:80:f4:22:
                    58:82:3a:87:9b:de:f5:87:4e:c0:26:93:33:b4:7d:
                    f5:b6:cf:0e:2e:32:2e:8a:bc:0a:00:88:13:1e:48:
                    76:97:61:b4:31:c5:b7:1b:b6:88:30:8d:d3:ae:07:
                    4e:19:53:28:07:74:0d:5e:26:e7:bd:92:a7:49:d2:
                    ab:3a:31:bf:a0:11:5d:e0:50:0f:c9:1c:d4:3e:35:
                    86:f2:e4:8b:07:4a:5c:b6:fe:bf:ac:46:d7:93:a0:
                    41:43:f6:17:d9:de:75:58:7e:52:62:13:0d:97:26:
                    5b:a6:65:d9:61:76:17:85:95:48:94:45:0a:06:5c:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
            X509v3 Authority Key Identifier:
                keyid:71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ae:1e:c0:97:99:f6:38:bb:30:b9:f7:f6:e1:ac:c3:81:1a:
         48:50:01:29:81:c6:77:38:fc:62:e8:18:ad:9b:13:15:19:a2:
         f4:d5:a5:8b:60:be:79:c3:de:31:02:b2:d9:a9:a4:57:8e:7b:
         4f:f3:da:74:cf:a3:6a:c8:81:a1:56:f9:e1:ca:76:6e:53:26:
         65:3b:1e:c7:8e:af:eb:ba:1e:ee:c9:22:31:a1:db:de:ef:33:
         fe:d6:94:ed:3f:6f:9d:89:c3:48:00:51:f8:b8:0d:24:1f:a0:
         1c:8f:aa:39:e0:4b:04:f7:01:b9:6d:71:f0:ee:c9:5d:b7:64:
         ed:32:e9:0d:63:b1:65:6c:37:39:63:77:2e:fb:df:82:aa:82:
         62:e7:05:02:7f:86:d2:87:9c:9b:a9:a4:06:64:0c:96:cd:91:
         d0:a8:cf:af:87:86:a5:d0:a9:3f:14:19:34:28:2d:07:2c:58:
         96:1b:04:42:e5:b7:2e:55:c8:b7:47:46:11:03:d1:8e:ef:59:
         4f:49:d1:8d:a1:50:8b:79:6f:16:1a:67:14:8c:2f:d5:08:d2:
         09:c7:24:a2:4d:1e:c7:25:d9:8d:39:b9:7d:ac:df:a6:1e:12:
         6c:4a:8b:0b:d1:7a:df:95:d0:79:14:37:33:de:cd:4c:5c:20:
         9c:1e:e1:67
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTE5
MjcxNTg2RDI4Qzc3MjIxQjdFMTQ5MkU4NzUxQjExRjQ3MThDMB4XDTI2MTExNTAx
MzExMVoXDTI3MTExNTAxMzAwMlowMzExMC8GA1UEAxMoMzU4QUMxOTZBRjk1NjEw
RDNBNjkwODY4MjY1MDdDMjRDQjNGQUQ2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMU8xStNxmy7EuC/Wh9f5TB8T+01xuj0hoJUzjDzRt9nwwzYv5jz
LfYPOIg9lgVgQB0SetSL9My1p6PZQHZ9GV5M91ocAhPMSttPgtVI86OzIHgSmYp8
Dv2j6VftO/cJ4M4UlxlYmknOO2RL/klEn8Dot3XRlNJoe6bHU7TJdfZwnSn4gPQi
WII6h5ve9YdOwCaTM7R99bbPDi4yLoq8CgCIEx5IdpdhtDHFtxu2iDCN064HThlT
KAd0DV4m572Sp0nSqzoxv6ARXeBQD8kc1D41hvLkiwdKXLb+v6xG15OgQUP2F9ne
dVh+UmITDZcmW6Zl2WF2F4WVSJRFCgZcZj0CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQ1isGWr5VhDTppCGgmUHwkyz+tYTAfBgNVHSMEGDAWgBRxGScVhtKMdyIbfhSS
6HUbEfRxjDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyMDIvY1JrbkZZYlNqSGNpRzM0VWt1aDFHeEgwY1l3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY1JrbkZZYlNqSGNpRzM0VWt1aDFH
eEgwY1l3LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMjAyL2NSa25GWWJTakhjaUczNFVrdWgxR3hIMGNZdy5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyrh7Al5n2OLswuff24azDgRpI
UAEpgcZ3OPxi6BitmxMVGaL01aWLYL55w94xArLZqaRXjntP89p0z6NqyIGhVvnh
ynZuUyZlOx7Hjq/ruh7uySIxodve7zP+1pTtP2+dicNIAFH4uA0kH6Acj6o54EsE
9wG5bXHw7sldt2TtMukNY7FlbDc5Y3cu+9+CqoJi5wUCf4bSh5ybqaQGZAyWzZHQ
qM+vh4al0Kk/FBk0KC0HLFiWGwRC5bcuVci3R0YRA9GO71lPSdGNoVCLeW8WGmcU
jC/VCNIJxySiTR7HJdmNObl9rN+mHhJsSosL0XrfldB5FDcz3s1MXCCcHuFn
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:59:14 2026 by rpki-client