Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
File:                     ZxeEwss7hIfKdHJqZfS0R74BLFY.mft (raw, json)
Hash identifier:          ATY96toN7imYFHjM2BG970v9SRVuHkUAho2cde2Euh0=
Subject key identifier:   D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
Authority key identifier: 67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56
Certificate issuer:       /CN=671784C2CB3B8487CA74726A65F4B447BE012C56
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
Manifest number:          0BDB
Signing time:             Thu 26 Mar 2026 07:58:34 +0000
Manifest this update:     Thu 26 Mar 2026 07:58:34 +0000
Manifest next update:     Fri 10 Apr 2026 07:58:34 +0000
Files and hashes:         1: CFE3rJciYYY0mR_y1_iVs4eC7zM.roa (hash: NhitJe2bK1zQK5ZMdDD5f5EfKld2utd7/vXzAxT7NG8=)
                          2: ZxeEwss7hIfKdHJqZfS0R74BLFY.crl (hash: kUf/JCziaYVkKfnokjUQAUJJx634p9Ajng0yyle2M78=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671784C2CB3B8487CA74726A65F4B447BE012C56
        Validity
            Not Before: Mar 15 01:30:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D7EA3D60908126429271487E225B375F708A47CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:15:0c:31:7d:0a:00:4c:0d:72:7c:46:63:
                    bd:ab:da:f6:c6:c1:8e:d3:40:d4:e4:d9:44:60:fc:
                    21:f0:06:1f:3f:2d:61:0d:da:60:64:a7:fd:ca:aa:
                    34:89:41:a0:70:96:63:1b:f8:27:11:17:47:2f:db:
                    92:3a:57:6a:99:c4:ce:26:15:a5:ab:f7:94:b9:10:
                    b5:a6:a8:4a:4d:dd:f9:ff:43:19:40:4b:85:89:f3:
                    c3:07:16:63:88:0b:49:05:3c:1f:b1:a6:15:5b:b2:
                    8f:b1:fa:10:0d:a0:b9:db:dd:d5:45:f7:08:2a:8a:
                    6c:15:25:91:ac:38:e4:96:33:32:49:90:43:a8:64:
                    a6:dc:a8:d8:69:c9:3b:45:50:85:0a:ba:3f:db:0a:
                    34:fc:e7:7a:96:02:73:73:22:57:7a:c1:5b:96:e6:
                    11:68:3a:c8:e5:d8:e0:c6:66:16:f9:7b:c4:78:8f:
                    cd:ca:cd:63:98:78:74:ca:65:80:04:89:9c:71:c3:
                    6a:a1:79:53:f2:f1:ec:7f:ce:a8:56:14:aa:0b:22:
                    0a:8e:da:3b:93:09:db:2e:99:3a:aa:71:6f:83:98:
                    a6:76:3a:56:80:6d:fe:bc:7c:20:b5:62:af:94:65:
                    f6:48:57:38:b6:5b:a9:26:a8:bf:a6:64:68:bf:2f:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
            X509v3 Authority Key Identifier:
                keyid:67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:34:95:1f:f7:7e:2e:51:4c:32:46:36:9b:8d:85:cc:a6:6a:
         c3:27:33:c0:54:f3:87:a9:19:43:6e:e6:58:a0:b5:ca:8e:06:
         7d:12:61:ac:f3:2f:6c:00:ee:81:84:df:90:c6:7c:f5:b9:1e:
         2b:63:66:25:50:bb:44:c3:1a:3c:a5:4a:c9:18:52:8c:bc:46:
         2a:78:ae:e9:6b:9c:6b:e0:d6:ae:94:46:37:de:9d:21:d3:a8:
         9b:0c:b5:17:09:59:b9:70:1e:aa:e5:8d:d4:ab:de:e6:83:56:
         b0:a7:1c:48:81:9a:e7:2c:1b:c0:a9:c3:bd:f7:9f:c8:8b:e9:
         c3:57:2f:05:5a:c5:82:55:6b:58:01:d1:f0:a0:02:52:be:a7:
         2c:78:45:4c:d0:0c:4b:8f:05:b1:cc:ab:34:5c:33:bd:34:bb:
         55:5d:12:c6:68:8a:0c:6a:cb:0a:36:3f:3c:4f:1e:42:11:f2:
         2c:24:1a:b2:90:9a:83:3c:6c:4d:d7:3d:f9:42:76:45:28:7f:
         bc:7e:02:61:ce:fd:b1:14:e1:8d:68:8c:df:a9:28:09:59:7c:
         54:f5:6e:b7:e1:c5:12:61:58:f5:15:83:2e:8e:12:a9:87:29:
         7b:18:1f:c0:8e:a6:c2:f3:8d:98:24:ad:19:bd:6c:fd:fc:d8:
         6f:6d:c3:61
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzE3
ODRDMkNCM0I4NDg3Q0E3NDcyNkE2NUY0QjQ0N0JFMDEyQzU2MB4XDTI2MDMxNTAx
MzAyNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDdFQTNENjA5MDgxMjY0
MjkyNzE0ODdFMjI1QjM3NUY3MDhBNDdDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL1uFQwxfQoATA1yfEZjvava9sbBjtNA1OTZRGD8IfAGHz8tYQ3a
YGSn/cqqNIlBoHCWYxv4JxEXRy/bkjpXapnEziYVpav3lLkQtaaoSk3d+f9DGUBL
hYnzwwcWY4gLSQU8H7GmFVuyj7H6EA2gudvd1UX3CCqKbBUlkaw45JYzMkmQQ6hk
ptyo2GnJO0VQhQq6P9sKNPznepYCc3MiV3rBW5bmEWg6yOXY4MZmFvl7xHiPzcrN
Y5h4dMplgASJnHHDaqF5U/Lx7H/OqFYUqgsiCo7aO5MJ2y6ZOqpxb4OYpnY6VoBt
/rx8ILVir5Rl9khXOLZbqSaov6ZkaL8v1WECAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBTX6j1gkIEmQpJxSH4iWzdfcIpHzjAfBgNVHSMEGDAWgBRnF4TCyzuEh8p0cmpl
9LRHvgEsVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODcvWnhlRXdzczdoSWZLZEhKcVpmUzBSNzRCTEZZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWnhlRXdzczdoSWZLZEhKcVpmUzBS
NzRCTEZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzg3L1p4ZUV3c3M3aElmS2RISnFaZlMwUjc0QkxGWS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDTNJUf934uUUwyRjabjYXMpmrDJzPAVPOHqRlDbuZYoLXKjgZ9EmGs
8y9sAO6BhN+Qxnz1uR4rY2YlULtEwxo8pUrJGFKMvEYqeK7pa5xr4NaulEY33p0h
06ibDLUXCVm5cB6q5Y3Uq97mg1awpxxIgZrnLBvAqcO995/Ii+nDVy8FWsWCVWtY
AdHwoAJSvqcseEVM0AxLjwWxzKs0XDO9NLtVXRLGaIoMassKNj88Tx5CEfIsJBqy
kJqDPGxN1z35QnZFKH+8fgJhzv2xFOGNaIzfqSgJWXxU9W634cUSYVj1FYMujhKp
hyl7GB/AjqbC842YJK0ZvWz9/NhvbcNh
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:09 2026 by rpki-client