Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
File:                     0Q2IZYK930iwQYUcOMC2MhFfXCE.mft (raw, json)
Hash identifier:          Gcu4y0S+FEp6SCOF3POSqdH5drEh/DrtgIZatX/pNnQ=
Subject key identifier:   BD:87:74:10:B4:06:61:01:93:94:A4:6B:F6:E8:F3:A8:95:7C:1A:31
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
Manifest number:          1E5B
Signing time:             Thu 26 Mar 2026 03:29:44 +0000
Manifest this update:     Thu 26 Mar 2026 03:29:44 +0000
Manifest next update:     Fri 10 Apr 2026 03:29:44 +0000
Files and hashes:         1: -7_uC50ndkKFAeT2I9ZPTH4RfsY.roa (hash: oa+w66lEowiYcW3CHIdww+CYWPQjKYvSJvOb9ZHtNrU=)
                          2: 0Q2IZYK930iwQYUcOMC2MhFfXCE.crl (hash: LZ63nZG1Rav0Ny+27HQ7JaIXEFkSGw3dRFgf5Sv0+nM=)
                          3: V_qaF5aoqSpx7BJquLYpQA-LlMk.roa (hash: YzKQ0WbLASEWIcuCCUb83UhE9oFpP3W+eS6R8wMijH0=)
                          4: W72b37WOXXy8Xi4E7meUIArKkmE.roa (hash: XU1jAB6AorAx6ZG/65dv8Huwy4cQb7AZcgpOi9BAXY8=)
                          5: jCEnHcDqdCVsvU6kdgP8hjdwGjg.roa (hash: qxH88wY6k5WFRvqbOCDttPMgHEafH7SCgUzCMc0Tnus=)
                          6: nWFk6SD1kbHTs3BahSB29KdZOKo.roa (hash: Z9N8nbQ7Z2r2p9nd3POwyA3Wmw5s3Y2AZ2a81z3eGnI=)
                          7: tYWmUjb9BIBV060uRZKrRRW1jeo.roa (hash: obL6fj6ECwTHuAQ23hJfkFGZ7PROhyFdXAbZrKix8Nw=)
                          8: yI9mu7VYcLxUJjczZhPMLRcVuV4.roa (hash: jP/iMut7wAssQP5QOw6Zg/aHwdmpOVDSWU742IBwe18=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 04:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Mar 15 01:38:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BD877410B40661019394A46BF6E8F3A8957C1A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:0a:a2:f2:7d:9e:d1:76:bd:5f:2c:8e:3f:
                    20:4b:56:10:4c:34:4b:ef:bf:23:e9:0e:ac:4b:fc:
                    f0:6c:f2:37:c4:e1:6e:86:ad:f8:12:5d:36:16:c3:
                    50:31:0c:fa:8e:fa:3c:f8:9b:bd:a1:73:ba:fe:2e:
                    90:8d:c8:c6:9b:bf:e4:87:6a:b3:53:58:78:62:ac:
                    a3:21:1c:1b:1f:8a:21:45:f9:34:b5:7a:04:e6:95:
                    95:2e:1e:b2:0f:b6:e9:07:8c:a8:df:c2:db:b9:ed:
                    d8:3d:86:fc:4f:7e:f6:90:3c:71:58:0a:88:11:d7:
                    57:1d:96:d9:db:9a:0b:43:e5:32:96:f4:59:25:35:
                    e7:89:1f:60:37:b4:86:5a:56:79:ee:96:73:22:f8:
                    79:82:67:69:13:45:5e:ea:75:2b:f0:d2:5e:62:e8:
                    eb:23:29:0a:c4:5b:bb:fb:e9:71:54:ee:b8:56:b2:
                    7c:cb:2e:f0:95:10:38:ca:58:60:9b:ec:a0:a8:bd:
                    6f:6a:59:9f:19:e5:10:e2:2c:31:15:84:2f:a3:4c:
                    e9:c6:b6:1a:63:ab:99:9b:53:22:90:69:c7:a1:d5:
                    2f:4a:c5:f4:09:eb:96:09:8c:b1:51:91:b1:02:b7:
                    af:ab:ad:4a:a7:d4:ee:62:26:bf:78:64:e0:1d:40:
                    3d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:74:10:B4:06:61:01:93:94:A4:6B:F6:E8:F3:A8:95:7C:1A:31
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6e:c6:8b:aa:63:5f:3f:a5:41:d0:bb:77:15:f4:8f:45:fd:
         e9:71:8b:b0:1e:aa:81:ab:c2:28:63:90:08:62:24:fe:0c:be:
         4a:2c:3b:97:7e:28:8f:19:9d:27:23:fe:1b:10:1e:ec:03:46:
         16:69:8b:33:02:b0:aa:13:c2:a9:9e:11:1f:b2:4f:17:5d:99:
         b3:af:83:6f:e9:ce:39:bd:f2:08:0e:b6:63:67:ea:85:b4:ab:
         33:10:7e:3f:f3:85:82:89:46:50:ba:25:bd:81:ea:77:4c:dc:
         ae:22:a9:91:35:58:ee:f6:99:25:38:55:01:57:b9:09:04:1c:
         84:b1:12:37:1f:5d:2a:e7:a9:68:8d:1e:b7:ba:d9:c3:f4:96:
         ca:26:20:cf:19:df:94:6a:10:00:30:d2:6a:a2:fe:c6:58:d0:
         94:b3:92:7a:51:78:ec:5b:b2:07:c2:b9:8f:42:96:5c:e2:93:
         d8:b0:77:da:eb:9b:7a:04:1d:e6:af:7e:1a:cf:f4:ca:f9:b7:
         e4:31:1b:85:2b:26:7b:b0:3f:74:91:7c:54:13:90:c4:fb:4c:
         de:05:d1:fc:92:bf:c2:73:bc:0c:26:6f:b9:95:a1:58:50:04:
         1b:ff:5f:38:cd:62:16:be:13:e4:5c:1f:1d:74:87:c0:32:07:
         df:34:18:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:24:02 2026 by rpki-client