Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
File:                     sYFtHy1JTBfkW3qZBnCESrVprCs.mft (raw, json)
Hash identifier:          lxF42uVU22DpLgvShWjjXz0fYzxxC5FFzM5ALUbwviE=
Subject key identifier:   A3:C5:DD:CC:0F:E4:83:D5:5C:F6:AD:AE:0E:7E:7F:FF:4D:12:64:C5
Authority key identifier: B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B
Certificate issuer:       /CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
Certificate serial:       0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
Manifest number:          0699
Signing time:             Sun 15 Nov 2026 09:43:52 +0000
Manifest this update:     Sun 15 Nov 2026 09:43:52 +0000
Manifest next update:     Tue 15 Dec 2026 09:43:52 +0000
Files and hashes:         1: 8d0pDPDp9jhCE7cF6aEYPGK_z2Q.roa (hash: VfDbMs2JFqAFDe5rTGOwuemwprycjrDCejSIX9LcLb4=)
                          2: sYFtHy1JTBfkW3qZBnCESrVprCs.crl (hash: udLvZ69J+tO5fGDVaWQHr3DP+Zl3s8m2XG/smL95gvk=)
                          3: yQKEvd4qwVU9R8bS5J8AgbQJ3Ew.roa (hash: 7z55gnucm4BxXkD5o9xT0ORUfi+V/fA/XchWkSeIqTc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 08:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
        Validity
            Not Before: Nov 15 01:35:21 2026 GMT
            Not After : Nov 15 01:30:02 2027 GMT
        Subject: CN=A3C5DDCC0FE483D55CF6ADAE0E7E7FFF4D1264C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:0d:16:81:65:fb:79:05:2d:42:26:a8:f4:
                    92:16:9c:a5:06:2d:db:a7:2a:52:e7:ff:ec:01:f7:
                    72:f9:99:37:c7:1b:62:47:1b:bc:5d:9e:24:8d:5c:
                    68:b0:12:0d:80:81:45:34:35:48:73:98:b7:c9:3c:
                    be:75:91:a3:df:ba:2e:5c:d1:0a:00:e5:af:43:5f:
                    55:3f:cc:3a:97:cb:8c:22:c1:59:15:6e:0a:3b:77:
                    00:24:80:55:51:23:62:2d:cf:2c:a7:e0:1c:08:79:
                    a0:64:e2:0a:20:1c:16:d9:f2:ac:b7:3e:c6:a1:41:
                    99:46:c1:5a:0c:26:4f:c2:56:35:6b:90:19:70:f8:
                    4e:8f:de:80:0a:39:f0:e2:77:5a:ee:70:f0:ce:28:
                    70:2d:41:8f:76:56:d6:2c:63:2b:64:38:38:a3:d2:
                    ac:34:4d:f1:aa:56:ed:5f:8b:b0:d7:ed:a8:19:28:
                    6b:41:3a:df:22:44:c9:ff:72:e9:bb:81:4e:60:ba:
                    cd:48:52:9a:bd:49:a5:b1:f0:e3:d7:5a:b0:04:ce:
                    65:39:de:5d:4c:52:29:d4:ab:5a:04:64:55:75:c6:
                    49:4c:59:1f:7c:42:48:74:d5:a0:87:ed:96:b1:a3:
                    cf:5e:de:b0:40:14:14:60:63:5a:32:60:a3:2c:83:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:DD:CC:0F:E4:83:D5:5C:F6:AD:AE:0E:7E:7F:FF:4D:12:64:C5
            X509v3 Authority Key Identifier:
                keyid:B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:fe:8b:74:4d:ff:af:1f:fc:f3:5d:04:98:d8:af:69:77:90:
         0a:80:81:28:bb:8f:6b:1b:97:6b:45:8d:9f:7a:3d:88:53:27:
         b7:51:27:3a:ac:20:1e:ed:9c:67:cc:ad:f3:4d:fc:21:b0:bb:
         73:32:f6:1f:22:b7:d2:8e:e1:bb:aa:a5:da:45:42:be:34:c7:
         18:ff:14:38:49:99:11:9a:ca:f4:1b:b8:f2:f1:4a:0b:30:62:
         24:d3:39:5f:c4:86:89:e6:0b:94:a3:ab:61:c1:26:e7:1e:75:
         a1:71:2b:6a:b9:33:b5:e1:d4:43:f6:30:e2:c6:16:76:13:01:
         2b:25:57:51:bf:3c:a7:6f:50:7a:b3:36:89:ee:97:10:3a:b7:
         5c:0d:c5:d4:eb:71:27:30:f3:26:f3:34:58:81:ae:fe:1c:99:
         4e:27:bf:01:20:35:ff:6b:b5:dd:64:79:3d:c1:91:d3:68:9e:
         df:f1:0c:f5:20:10:19:5d:ae:49:5e:ca:d8:4f:9a:89:e5:41:
         bc:d9:f8:2f:a1:87:26:04:66:b2:6e:cd:d8:60:55:b6:ee:23:
         37:e4:1c:07:6a:0c:4e:91:ac:c5:f9:be:96:d9:c1:6a:f6:69:
         37:c6:91:9d:d2:fc:30:a6:27:4c:fe:ce:e6:3e:21:37:a0:4e:
         5a:19:48:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:00:23 2026 by rpki-client