Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.mft
File:                     P43tV9JChXvSDWYiCA2TjIaNz1o.mft (raw, json)
Hash identifier:          mqZo1rFvN0GH1bThnrK4xiVfgnyW7fnyngGlx+Xqtpc=
Subject key identifier:   1F:86:63:03:BC:04:7B:FB:59:69:29:36:3C:ED:58:BC:7E:E3:74:FC
Authority key identifier: 3F:8D:ED:57:D2:42:85:7B:D2:0D:66:22:08:0D:93:8C:86:8D:CF:5A
Certificate issuer:       /CN=3F8DED57D242857BD20D6622080D938C868DCF5A
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.mft
Manifest number:          5D
Signing time:             Fri 24 Jul 2026 16:44:36 +0000
Manifest this update:     Fri 24 Jul 2026 16:44:36 +0000
Manifest next update:     Sun 23 Aug 2026 16:44:36 +0000
Files and hashes:         1: P43tV9JChXvSDWYiCA2TjIaNz1o.crl (hash: 1z/F5STiTcN5fONT+4iMWyaqXFYk6isKilGzAaaf9Tg=)
                          2: exXrQbpwiy8qE3qy26YdczAWc6U.roa (hash: qTH6hJdy0jycsTVnpl3p/XPf6EHU7sdy/BHDyOB0Wno=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 18:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F8DED57D242857BD20D6622080D938C868DCF5A
        Validity
            Not Before: Jul 15 01:37:36 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=1F866303BC047BFB596929363CED58BC7EE374FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0c:f6:ce:41:f9:02:8e:ec:f8:dd:73:b8:0d:
                    6e:26:a0:40:ab:41:5f:7b:47:44:41:db:85:58:7f:
                    d4:f0:c5:6a:42:30:7c:68:a7:fb:33:e1:05:dd:d7:
                    50:3b:ea:9e:69:3e:b2:94:4a:64:c5:84:b9:ec:7b:
                    b0:76:21:d1:fd:a3:7f:f8:f6:ce:5e:62:51:e3:e5:
                    cc:f6:1b:99:71:33:e1:2d:e1:9f:13:68:55:91:a0:
                    cd:19:c1:c8:e9:62:ee:c8:0f:49:0c:6c:23:5c:34:
                    ca:34:04:ce:37:ec:7a:3e:de:e1:5a:f4:23:41:a0:
                    a3:69:00:ca:f1:3c:7c:df:10:4e:23:2b:6b:11:40:
                    a7:61:2d:30:38:61:bc:2d:f8:f5:59:83:4e:ff:46:
                    bf:21:a4:06:60:d9:3b:88:cb:ed:e9:c8:b3:eb:c4:
                    ff:27:47:1d:1e:12:04:78:4f:74:12:83:44:fb:9e:
                    31:b5:03:57:e3:8f:ae:82:54:a5:e5:cf:ab:c9:13:
                    47:c6:2f:d7:99:69:2a:38:d3:fb:1d:dc:50:db:b2:
                    2a:24:25:b3:68:5f:9d:01:87:f4:95:ed:af:3f:ce:
                    f2:0f:36:3c:0d:e9:ed:34:97:ea:94:d0:76:77:1f:
                    4b:cd:99:b9:1e:48:c4:bf:c0:cb:c6:53:8c:dc:e5:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:86:63:03:BC:04:7B:FB:59:69:29:36:3C:ED:58:BC:7E:E3:74:FC
            X509v3 Authority Key Identifier:
                keyid:3F:8D:ED:57:D2:42:85:7B:D2:0D:66:22:08:0D:93:8C:86:8D:CF:5A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P43tV9JChXvSDWYiCA2TjIaNz1o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30457/P43tV9JChXvSDWYiCA2TjIaNz1o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f9:5b:3b:8b:45:14:08:1b:50:dd:9d:bf:3b:f4:5b:bc:35:
         93:2a:c7:7b:fe:3d:2a:45:7b:b6:ac:21:a1:be:68:0c:0a:f3:
         ed:2d:16:fd:0d:dc:e8:13:b8:d5:dc:ad:63:fe:f2:f9:b4:24:
         05:a9:0d:51:9d:be:8a:af:d2:36:d6:66:59:8a:b5:f1:23:7e:
         d9:fb:39:e1:e4:c1:1f:dc:5b:08:3b:e3:3e:3c:32:ae:9d:83:
         df:9a:ed:00:d7:bb:25:9f:d9:74:12:ac:14:4d:27:0e:1c:e3:
         2d:85:49:c9:ba:0f:83:4c:b6:d6:b2:13:de:26:81:c2:0c:79:
         8d:93:07:2d:41:29:b3:3e:f2:3c:82:35:3c:e4:12:e5:0e:04:
         b9:90:e5:fc:f0:b6:b2:db:f1:ed:dc:0b:95:bf:13:0c:35:04:
         ad:47:48:6f:7e:6e:df:51:ac:cc:9c:76:40:68:e2:2b:19:6d:
         55:85:1f:34:55:33:6d:00:5c:91:99:a4:0a:ae:a2:ff:cd:f0:
         c8:ec:a6:22:78:f3:2c:12:e0:58:2b:4c:5c:5b:52:f8:ac:bb:
         86:f3:6c:c6:b3:4b:f5:a8:78:6a:3b:05:19:8c:f4:8a:fb:cf:
         d1:12:42:dc:07:45:64:81:dd:f9:10:e3:31:c8:09:ad:09:bf:
         88:eb:6d:3b
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRjhE
RUQ1N0QyNDI4NTdCRDIwRDY2MjIwODBEOTM4Qzg2OERDRjVBMB4XDTI2MDcxNTAx
MzczNloXDTI3MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMUY4NjYzMDNCQzA0N0JG
QjU5NjkyOTM2M0NFRDU4QkM3RUUzNzRGQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOwM9s5B+QKO7Pjdc7gNbiagQKtBX3tHREHbhVh/1PDFakIwfGin
+zPhBd3XUDvqnmk+spRKZMWEuex7sHYh0f2jf/j2zl5iUePlzPYbmXEz4S3hnxNo
VZGgzRnByOli7sgPSQxsI1w0yjQEzjfsej7e4Vr0I0Ggo2kAyvE8fN8QTiMraxFA
p2EtMDhhvC349VmDTv9GvyGkBmDZO4jL7enIs+vE/ydHHR4SBHhPdBKDRPueMbUD
V+OProJUpeXPq8kTR8Yv15lpKjjT+x3cUNuyKiQls2hfnQGH9JXtrz/O8g82PA3p
7TSX6pTQdncfS82ZuR5IxL/Ay8ZTjNzllokCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQfhmMDvAR7+1lpKTY87Vi8fuN0/DAfBgNVHSMEGDAWgBQ/je1X0kKFe9INZiII
DZOMho3PWjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NTcvUDQzdFY5SkNoWHZTRFdZaUNBMlRqSWFOejFvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUDQzdFY5SkNoWHZTRFdZaUNBMlRq
SWFOejFvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwNDU3L1A0M3RWOUpDaFh2U0RXWWlDQTJUaklhTnoxby5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1+Vs7i0UUCBtQ3Z2/O/RbvDWT
Ksd7/j0qRXu2rCGhvmgMCvPtLRb9DdzoE7jV3K1j/vL5tCQFqQ1Rnb6Kr9I21mZZ
irXxI37Z+znh5MEf3FsIO+M+PDKunYPfmu0A17sln9l0EqwUTScOHOMthUnJug+D
TLbWshPeJoHCDHmNkwctQSmzPvI8gjU85BLlDgS5kOX88Lay2/Ht3AuVvxMMNQSt
R0hvfm7fUazMnHZAaOIrGW1VhR80VTNtAFyRmaQKrqL/zfDI7KYiePMsEuBYK0xc
W1L4rLuG82zGs0v1qHhqOwUZjPSK+8/REkLcB0Vkgd35EOMxyAmtCb+I6207
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:05 2026 by rpki-client