Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30363/SHnHEN1HjRB3nKoovGHqnJpZ34s.mft
File:                     SHnHEN1HjRB3nKoovGHqnJpZ34s.mft (raw, json)
Hash identifier:          /kPGPjFi7T+14Xrpp8cG7i8OdQf8AFLjARVx700/FTQ=
Subject key identifier:   EF:C5:31:9B:27:27:EF:8C:39:71:1E:C9:A3:D0:D2:63:26:36:F9:38
Authority key identifier: 48:79:C7:10:DD:47:8D:10:77:9C:AA:28:BC:61:EA:9C:9A:59:DF:8B
Certificate issuer:       /CN=4879C710DD478D10779CAA28BC61EA9C9A59DF8B
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SHnHEN1HjRB3nKoovGHqnJpZ34s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30363/SHnHEN1HjRB3nKoovGHqnJpZ34s.mft
Manifest number:          01A8
Signing time:             Thu 26 Mar 2026 05:24:29 +0000
Manifest this update:     Thu 26 Mar 2026 05:24:29 +0000
Manifest next update:     Fri 10 Apr 2026 05:24:29 +0000
Files and hashes:         1: BUHMK15ktQYc53Tg-tGWvAXcGBA.roa (hash: OpOOHTCr3eh22WpeOv93b9rpRbnoVrP7efF02iu7H/k=)
                          2: SHnHEN1HjRB3nKoovGHqnJpZ34s.crl (hash: uGJHvGCWFV9I7frMJonUNLUh7G0MvMQgY/tftPCT5W0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30363/SHnHEN1HjRB3nKoovGHqnJpZ34s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30363/SHnHEN1HjRB3nKoovGHqnJpZ34s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SHnHEN1HjRB3nKoovGHqnJpZ34s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4879C710DD478D10779CAA28BC61EA9C9A59DF8B
        Validity
            Not Before: Mar 15 01:37:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EFC5319B2727EF8C39711EC9A3D0D2632636F938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:c6:3f:5d:4d:17:aa:26:6c:a0:37:5b:56:
                    5a:9d:a9:56:d4:fb:7e:3d:7a:5a:6f:c2:34:44:04:
                    2d:10:2a:c6:79:c4:d1:08:73:75:c1:54:39:7e:cc:
                    a7:a2:73:b1:59:83:b3:b2:29:6b:9f:cb:d9:cd:a0:
                    69:95:d5:3b:60:ee:63:4c:57:04:3f:b1:bc:03:e4:
                    be:d7:7f:91:65:e6:e9:8e:11:00:03:98:58:18:ac:
                    9f:b6:66:ba:18:74:0e:2b:a5:39:1d:35:c9:e7:bb:
                    46:97:1c:44:b9:78:f7:a1:f4:49:60:f6:96:73:b5:
                    92:9e:77:0c:92:be:bf:4d:15:1b:6a:e3:29:ba:0a:
                    cc:89:cb:80:14:b9:3e:d6:72:8c:fd:bb:c0:e4:b2:
                    84:c1:b4:82:03:74:d6:38:67:b1:69:50:67:93:d1:
                    47:bb:c3:4a:11:04:5f:d0:d3:90:ad:b8:77:84:80:
                    9d:1a:5b:3d:3b:78:3b:03:00:42:47:1f:ac:d6:e3:
                    e6:af:18:ba:84:a2:6b:b5:9a:fc:1c:b5:5e:51:73:
                    97:fa:80:cc:46:c4:1c:da:52:42:70:40:a6:eb:99:
                    57:1d:e1:34:22:c3:70:87:3b:64:ac:48:2e:43:a2:
                    62:eb:6a:2c:89:9f:20:25:c2:a9:07:72:dd:c1:f9:
                    4d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C5:31:9B:27:27:EF:8C:39:71:1E:C9:A3:D0:D2:63:26:36:F9:38
            X509v3 Authority Key Identifier:
                keyid:48:79:C7:10:DD:47:8D:10:77:9C:AA:28:BC:61:EA:9C:9A:59:DF:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30363/SHnHEN1HjRB3nKoovGHqnJpZ34s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SHnHEN1HjRB3nKoovGHqnJpZ34s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30363/SHnHEN1HjRB3nKoovGHqnJpZ34s.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:28:61:e4:3a:c1:42:c2:a2:b0:2b:6c:38:a4:be:37:73:8c:
         b1:bf:aa:5e:91:c7:6e:71:c4:02:f4:4c:30:36:c4:9f:7f:37:
         d9:b4:c5:d5:b3:df:be:62:b5:a0:9a:c4:d9:ab:b7:e6:97:3f:
         b7:b0:98:12:23:3f:7f:25:86:37:fd:85:11:41:40:a4:df:20:
         64:2c:41:94:99:5f:38:11:94:5c:17:4e:d1:3d:69:c9:d0:e7:
         1a:31:77:ad:8f:a6:01:46:7b:50:27:8f:e9:72:3c:62:01:00:
         5b:da:e2:0e:62:d6:38:36:db:1e:37:18:f2:17:b7:98:00:69:
         16:e3:56:9f:5f:d3:e8:88:4e:a7:83:d8:27:0a:5c:61:c9:60:
         37:10:7e:25:50:bd:47:da:57:10:e5:87:a2:e5:e3:ac:61:c6:
         72:34:25:49:bb:be:df:2b:ad:f0:95:e4:d0:b5:9e:91:1e:55:
         f2:a9:b6:32:9d:60:9f:67:70:14:5d:c5:fc:82:e6:66:81:68:
         57:c7:20:03:e9:6b:92:7a:fe:f2:e2:fb:b0:9a:14:96:6a:43:
         50:7a:4e:3f:62:3e:56:51:19:3b:8c:92:f2:da:87:d9:b4:2e:
         2c:51:07:6d:d0:d4:18:bf:5f:d7:a6:d3:f2:c6:49:f3:37:6c:
         3e:27:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:03 2026 by rpki-client