Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
File:                     1IEUv0koVysekvJxADxuDy3IfkY.mft (raw, json)
Hash identifier:          Ib95GGg6e+5teTXKUQ+Ds2Z1RH+mbv3224bihq5eCZ4=
Subject key identifier:   BB:33:0B:C5:76:E3:A8:2A:88:1B:CF:40:73:61:7E:0E:9A:1E:FC:BD
Authority key identifier: D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46
Certificate issuer:       /CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
Manifest number:          62
Signing time:             Thu 26 Mar 2026 05:18:33 +0000
Manifest this update:     Thu 26 Mar 2026 05:18:33 +0000
Manifest next update:     Fri 10 Apr 2026 05:18:33 +0000
Files and hashes:         1: 1IEUv0koVysekvJxADxuDy3IfkY.crl (hash: IKQy8s6N0mwmRyvzlN7ZNa9GHL4Ry/A/Fbnw4qU+kZk=)
                          2: YINK4MGdnaO5wOvzKknn2uQDEbc.roa (hash: xGk718hkRHf8+l8190eSnC/VynFwY4xkSpXGgYxnZW0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D48114BF4928572B1E92F271003C6E0F2DC87E46
        Validity
            Not Before: Mar 15 01:37:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BB330BC576E3A82A881BCF4073617E0E9A1EFCBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:2d:55:8b:78:ed:b7:37:69:9c:e7:54:65:
                    e5:3b:c4:6e:d7:b0:74:be:02:20:8d:96:59:cb:13:
                    43:42:c1:d2:04:97:2f:2f:1a:33:d1:51:4c:ec:62:
                    0d:cc:0b:d4:2c:cc:41:50:19:48:f0:45:49:75:57:
                    a4:a8:12:ef:5e:79:17:28:c5:3e:94:f9:1d:b8:79:
                    c8:22:6d:f2:35:de:b1:d9:75:ca:9d:59:27:b4:8d:
                    9e:35:f4:e2:33:5c:f7:bd:a9:60:ec:ef:68:d6:cf:
                    9c:65:4b:5d:aa:2b:69:89:bc:d0:85:07:fd:27:20:
                    71:bb:f2:9c:16:b4:b1:b3:a4:4d:f7:80:49:6b:65:
                    15:4e:43:64:32:f4:14:04:25:cd:d4:62:e2:a2:d9:
                    36:3a:d5:0e:fa:6d:88:73:14:52:29:72:46:3c:16:
                    cd:56:ee:64:94:4b:ef:8c:ef:14:17:56:be:f8:ca:
                    1a:4a:1c:e0:ee:fb:c4:5c:50:b6:d2:82:b6:48:7a:
                    9f:78:fa:39:13:58:88:16:d3:c6:3d:e9:ff:f6:35:
                    06:c3:5c:e0:49:3e:e5:9a:3f:c9:a1:41:b6:53:c8:
                    55:4c:b0:d4:c7:2d:8b:e0:ad:54:77:0c:58:44:c1:
                    db:ff:18:b0:2a:a7:78:3b:7d:0c:0c:bf:ca:09:72:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:33:0B:C5:76:E3:A8:2A:88:1B:CF:40:73:61:7E:0E:9A:1E:FC:BD
            X509v3 Authority Key Identifier:
                keyid:D4:81:14:BF:49:28:57:2B:1E:92:F2:71:00:3C:6E:0F:2D:C8:7E:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1IEUv0koVysekvJxADxuDy3IfkY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30274/1IEUv0koVysekvJxADxuDy3IfkY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:98:5e:0f:f9:f1:7c:2a:e0:4f:e3:35:fe:55:f0:3a:fd:c0:
         e9:6e:c7:6c:fb:99:78:7c:bc:6e:92:62:d2:52:d2:f2:ce:2a:
         5d:e4:2e:22:45:20:59:f8:4d:21:00:04:4c:6b:45:1e:8d:28:
         f7:34:70:96:28:79:b2:91:b3:8b:ef:11:39:7c:19:4d:cf:b8:
         cf:29:05:b0:4b:b3:8f:0b:4a:30:26:1d:99:4c:36:c4:62:4b:
         fe:33:e5:cc:1b:54:d6:b8:8c:f1:b5:a3:65:c1:61:83:ea:fc:
         f1:c4:9a:f6:f1:0e:0e:d9:30:c8:79:8b:d7:ac:7f:9e:cc:a7:
         ed:08:88:98:0b:cf:37:db:7c:f5:93:d0:96:05:fe:a1:a5:f2:
         c0:b1:d7:b5:3f:05:9c:09:74:58:a7:49:d8:c2:73:c0:d9:9a:
         75:ab:4a:01:e1:45:c3:e9:b3:cc:4d:ea:90:24:f7:9c:48:80:
         b4:45:78:e0:e1:86:d3:a5:64:45:76:29:a9:2b:ee:e0:c4:fb:
         b2:9d:4d:1c:38:bc:3c:3c:32:88:63:0f:d2:46:99:58:cc:d3:
         5d:ca:1e:9f:c3:73:de:76:91:6c:4c:20:65:06:2e:23:4d:7d:
         f5:f6:e4:9a:77:9f:f8:8a:70:6f:de:a7:1f:77:99:59:5c:cb:
         fd:87:54:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:27:04 2026 by rpki-client