Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
File:                     Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft (raw, json)
Hash identifier:          PjD1bsNmWCAOOsqu5OsNUivqwWllkADwJcNNy3JWLy4=
Subject key identifier:   EA:31:73:E5:1D:2A:B9:7D:6B:33:3B:3E:76:E9:35:6F:61:A0:03:1B
Authority key identifier: 51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1
Certificate issuer:       /CN=51EE6ACD5E712FD9B035FBA2BDBA520E9FCA4EC1
Certificate serial:       06
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
Manifest number:          02FE
Signing time:             Thu 26 Mar 2026 12:06:45 +0000
Manifest this update:     Thu 26 Mar 2026 12:06:45 +0000
Manifest next update:     Fri 10 Apr 2026 12:06:45 +0000
Files and hashes:         1: Ue5qzV5xL9mwNfuivbpSDp_KTsE.crl (hash: qWDI3P2sgddJJrL4gcQKWP8MGfP+oIA98M6mjtVr43E=)
                          2: aQecw9lrzHqsblpDi6Y8cHis3mw.roa (hash: bfLFfSE7xIGnawtOEIGR3EbpWnNDIIF6Ay18YmKxYgY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 12:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51EE6ACD5E712FD9B035FBA2BDBA520E9FCA4EC1
        Validity
            Not Before: Mar 15 01:31:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EA3173E51D2AB97D6B333B3E76E9356F61A0031B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:e4:55:c0:96:58:de:f9:6c:7e:60:fb:3c:
                    1d:8e:06:50:fa:1f:3b:20:cf:d7:f2:4f:4b:ff:13:
                    e9:57:e0:cb:be:b4:89:b2:45:71:03:b2:b3:0a:69:
                    b1:ec:7b:bc:09:60:b3:42:df:56:55:ab:7e:0c:6a:
                    f9:4a:51:72:47:45:42:a8:58:68:fa:48:b3:4d:cc:
                    57:8f:b7:69:ab:2e:05:80:3a:0c:4e:c2:79:99:70:
                    f4:ce:76:ab:0e:6c:49:1f:f6:71:4d:f8:ae:97:9c:
                    4d:4f:60:75:94:d3:9a:65:4c:4f:aa:3c:69:4c:c3:
                    13:ef:4b:13:7f:62:95:d5:75:d1:15:ce:ee:5f:44:
                    c1:3e:0f:bc:14:ce:fa:d6:7e:39:d8:31:f6:23:13:
                    36:30:92:f6:4d:af:d5:cb:b6:54:2e:f5:8d:d1:44:
                    d6:bf:0f:40:98:1d:17:7d:ca:bc:24:b0:48:5f:4e:
                    1d:d3:59:66:64:ea:91:3e:ea:a7:22:f7:56:a6:4b:
                    8d:07:88:62:65:a9:f1:98:bc:c0:1a:fd:5d:de:a3:
                    d3:d9:4d:b8:45:b1:f7:67:61:ca:7b:74:80:76:a6:
                    6a:e4:70:08:05:33:0d:4d:86:69:b6:09:8c:0a:34:
                    fb:55:3a:fc:4f:2e:35:66:b1:ef:6d:49:dd:4b:c6:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:31:73:E5:1D:2A:B9:7D:6B:33:3B:3E:76:E9:35:6F:61:A0:03:1B
            X509v3 Authority Key Identifier:
                keyid:51:EE:6A:CD:5E:71:2F:D9:B0:35:FB:A2:BD:BA:52:0E:9F:CA:4E:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ue5qzV5xL9mwNfuivbpSDp_KTsE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30418/Ue5qzV5xL9mwNfuivbpSDp_KTsE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:13:5f:d3:95:39:3a:af:64:e9:dc:5f:9c:ea:47:91:b2:bc:
         ce:7d:70:0f:38:3d:c4:df:a1:6d:0d:9f:3b:8e:10:cf:e9:32:
         a1:c7:b3:71:b7:bc:9c:f9:4c:4c:b5:e4:16:d6:e5:97:e4:62:
         9c:d4:55:89:e5:2f:c5:7f:2f:35:85:56:b2:74:24:11:04:e6:
         f3:94:62:1b:b5:e3:f6:b9:48:da:a5:9e:01:38:07:af:48:19:
         1d:d3:a0:e9:c6:44:29:e3:7e:36:d2:78:f5:ea:bc:fe:84:2f:
         f0:fc:51:66:c9:21:aa:94:11:f6:e7:eb:2d:a4:66:dc:09:d8:
         d2:36:09:dd:4c:81:93:f1:d2:54:9e:30:22:7b:42:c5:bf:94:
         1b:0d:d7:ae:ce:c3:95:9e:75:fa:7e:17:9c:46:b1:c9:8f:fd:
         bc:82:31:e3:6e:d7:62:e5:b7:1f:61:5c:4e:6a:72:69:60:c3:
         c0:8c:e8:35:2f:d2:0d:55:68:96:04:bb:ac:ce:61:a3:68:aa:
         56:98:2b:d6:a2:41:aa:b7:a4:c0:80:84:d0:ad:bb:85:93:72:
         c6:a0:82:da:5b:6f:ac:46:4e:f6:43:6a:1f:c4:1e:2f:2e:ca:
         b2:2a:46:de:1e:7e:56:98:27:47:15:0b:aa:6f:90:b3:58:59:
         3c:bf:1f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:46 2026 by rpki-client