Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
File:                     YfPRqhn0nmyLi94rN7WO-1SQRQA.mft (raw, json)
Hash identifier:          0cARBkF1PPUM4QU4tqm/I6r1VTFtFwFMRdaEMIn1bvs=
Subject key identifier:   98:63:86:DE:B5:F0:80:CD:C5:88:3A:75:57:08:95:B1:16:35:D0:C8
Authority key identifier: 61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00
Certificate issuer:       /CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
Manifest number:          55
Signing time:             Thu 26 Mar 2026 05:24:39 +0000
Manifest this update:     Thu 26 Mar 2026 05:24:39 +0000
Manifest next update:     Fri 10 Apr 2026 05:24:39 +0000
Files and hashes:         1: -9MM0cMKBi47QuzAEh-im6uRpD0.roa (hash: bJZgyKnPrzk7wZ4G0ICtjxHowOpFFvuupwChGwV5XDw=)
                          2: YfPRqhn0nmyLi94rN7WO-1SQRQA.crl (hash: xActm7zpE5acTODMPfGCBalPI3uk/KyTxKvvm/5Qpfw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61F3D1AA19F49E6C8B8BDE2B37B58EFB54904500
        Validity
            Not Before: Mar 15 01:37:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=986386DEB5F080CDC5883A75570895B11635D0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:f5:7a:c0:a8:f8:bc:af:09:0c:c0:bf:78:
                    6b:f9:c7:24:3e:cd:be:69:32:28:d8:03:04:b7:aa:
                    4d:26:bf:8b:b3:c6:a7:de:24:b3:03:57:b1:d6:0a:
                    d2:36:16:ca:94:2c:57:06:82:07:11:98:97:e9:98:
                    ed:97:98:8f:57:cb:62:f2:fa:bc:ac:0c:a8:1d:b7:
                    53:56:2e:78:6b:34:9d:9f:b2:9e:11:3a:39:5d:2d:
                    be:1d:f6:3a:f3:85:13:61:95:92:9c:dd:7c:02:df:
                    46:d9:a3:57:db:4c:08:32:96:a6:d6:df:3f:82:cc:
                    1c:8f:b8:00:4b:62:ec:c3:4d:ce:34:29:bd:8f:4c:
                    b7:00:a8:d0:c1:73:8e:3c:fc:fe:69:ba:2e:49:43:
                    dc:d3:01:c2:dc:95:e7:79:32:11:03:80:ca:ff:c4:
                    b8:66:95:80:b9:d9:90:23:32:0d:60:ed:a6:6c:80:
                    df:4f:84:e2:df:47:d2:01:94:ee:e8:c6:cd:84:0b:
                    0b:63:bd:21:73:0b:ea:52:21:65:1b:f7:7e:64:a5:
                    44:6f:42:22:09:dd:16:7a:72:6e:42:f7:b3:6f:3b:
                    4f:59:d9:db:0f:bc:0d:30:68:30:c1:57:3d:fe:ab:
                    e4:d5:fe:b9:d5:17:59:19:74:9f:d3:1d:d3:42:08:
                    34:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:63:86:DE:B5:F0:80:CD:C5:88:3A:75:57:08:95:B1:16:35:D0:C8
            X509v3 Authority Key Identifier:
                keyid:61:F3:D1:AA:19:F4:9E:6C:8B:8B:DE:2B:37:B5:8E:FB:54:90:45:00

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YfPRqhn0nmyLi94rN7WO-1SQRQA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30454/YfPRqhn0nmyLi94rN7WO-1SQRQA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1f:f5:1f:89:25:e3:67:ed:93:f4:2f:1c:4a:8a:c3:a1:49:
         29:84:d5:07:a6:c9:4d:38:20:62:66:e9:6f:75:f1:7f:90:40:
         e2:84:71:46:f9:7c:22:97:f5:e9:8e:25:31:81:86:d4:5d:bb:
         28:1d:43:05:93:a9:a8:df:a7:99:2c:b3:06:6d:2a:0b:52:ea:
         95:e0:3b:3a:2c:e3:8e:f9:66:d9:83:92:3c:f7:fb:e2:f0:34:
         a2:84:52:0d:ff:80:29:eb:b6:9f:92:05:4e:19:bd:1d:a1:30:
         88:13:f4:a7:e3:69:41:d9:45:13:a7:9e:13:cd:74:cd:fa:af:
         43:ec:ee:74:04:bb:2d:29:88:31:7d:06:fd:21:5d:78:5e:b4:
         e8:9d:f1:d2:97:b3:d0:b3:d6:99:09:c7:fd:3e:65:40:4b:ab:
         91:f9:bd:78:89:9c:5d:4e:a8:7b:d5:82:06:bb:18:a3:df:1b:
         b0:4a:d9:81:f8:ae:dd:22:d5:d4:ec:cc:05:b6:51:2c:e5:73:
         11:45:18:41:3c:cb:28:e3:f3:bb:e4:53:2c:82:9c:29:5d:a4:
         1b:a0:93:3e:87:4b:16:75:13:b4:2a:63:26:90:d8:3f:89:05:
         d2:4d:9b:51:cf:a4:67:59:0c:38:25:fe:aa:47:6c:93:39:88:
         58:43:79:05
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MUYz
RDFBQTE5RjQ5RTZDOEI4QkRFMkIzN0I1OEVGQjU0OTA0NTAwMB4XDTI2MDMxNTAx
Mzc0NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTg2Mzg2REVCNUYwODBD
REM1ODgzQTc1NTcwODk1QjExNjM1RDBDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ/C9XrAqPi8rwkMwL94a/nHJD7NvmkyKNgDBLeqTSa/i7PGp94k
swNXsdYK0jYWypQsVwaCBxGYl+mY7ZeYj1fLYvL6vKwMqB23U1YueGs0nZ+ynhE6
OV0tvh32OvOFE2GVkpzdfALfRtmjV9tMCDKWptbfP4LMHI+4AEti7MNNzjQpvY9M
twCo0MFzjjz8/mm6LklD3NMBwtyV53kyEQOAyv/EuGaVgLnZkCMyDWDtpmyA30+E
4t9H0gGU7ujGzYQLC2O9IXML6lIhZRv3fmSlRG9CIgndFnpybkL3s287T1nZ2w+8
DTBoMMFXPf6r5NX+udUXWRl0n9Md00IINEUCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBSYY4betfCAzcWIOnVXCJWxFjXQyDAfBgNVHSMEGDAWgBRh89GqGfSebIuL3is3
tY77VJBFADAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NTQvWWZQUnFobjBubXlMaTk0ck43V08tMVNRUlFBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWWZQUnFobjBubXlMaTk0ck43V08t
MVNRUlFBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDU0L1lmUFJxaG4wbm15TGk5NHJON1dPLTFTUVJRQS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSH/UfiSXjZ+2T9C8cSorDoUkphNUHpslNOCBiZulvdfF/kEDihHFG
+Xwil/XpjiUxgYbUXbsoHUMFk6mo36eZLLMGbSoLUuqV4Ds6LOOO+WbZg5I89/vi
8DSihFIN/4Ap67afkgVOGb0doTCIE/Sn42lB2UUTp54TzXTN+q9D7O50BLstKYgx
fQb9IV14XrTonfHSl7PQs9aZCcf9PmVAS6uR+b14iZxdTqh71YIGuxij3xuwStmB
+K7dItXU7MwFtlEs5XMRRRhBPMso4/O75FMsgpwpXaQboJM+h0sWdRO0KmMmkNg/
iQXSTZtRz6RnWQw4Jf6qR2yTOYhYQ3kF
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:15 2026 by rpki-client