Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.mft
File:                     rh779ge9M9inzTPNeUgUkabFWBo.mft (raw, json)
Hash identifier:          JXR3NTX5NVtg+MjfgEznk+i5HgbYgx0y6uFzjXM4voM=
Subject key identifier:   74:BA:D2:C2:32:31:DC:C1:BF:7C:B0:E6:9D:DB:B3:B8:A5:28:09:B0
Authority key identifier: AE:1E:FB:F6:07:BD:33:D8:A7:CD:33:CD:79:48:14:91:A6:C5:58:1A
Certificate issuer:       /CN=AE1EFBF607BD33D8A7CD33CD79481491A6C5581A
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rh779ge9M9inzTPNeUgUkabFWBo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.mft
Manifest number:          0133
Signing time:             Wed 23 Sep 2026 08:04:01 +0000
Manifest this update:     Wed 23 Sep 2026 08:04:01 +0000
Manifest next update:     Fri 23 Oct 2026 08:04:01 +0000
Files and hashes:         1: -EW8XhXuogR17RiBQdtFB_uEY7U.roa (hash: uqUhMDO4hoBp69lbHUxhEKwdnzDSVpDgmVjRYhpDAQc=)
                          2: rh779ge9M9inzTPNeUgUkabFWBo.crl (hash: AI1lDyi0LboOKh7zlVVVH0LWkN0n1hOv76sDwyXGD3A=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rh779ge9M9inzTPNeUgUkabFWBo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE1EFBF607BD33D8A7CD33CD79481491A6C5581A
        Validity
            Not Before: Sep 15 01:40:46 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=74BAD2C23231DCC1BF7CB0E69DDBB3B8A52809B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:10:b8:ec:ce:17:47:d7:5b:3f:2c:7d:c5:d3:
                    05:b0:e3:07:31:7d:66:8b:ab:06:58:0d:c0:ec:e4:
                    7f:92:83:ac:13:43:97:f1:33:26:34:f0:1b:eb:68:
                    cd:f9:95:98:c2:c3:a2:39:9e:5f:98:84:00:65:99:
                    45:55:ff:f2:37:06:67:a1:18:f3:ea:9f:b4:d8:f8:
                    c3:a5:4a:f3:71:69:56:95:55:a7:94:b1:a8:90:8d:
                    99:d7:f1:4c:1c:88:ec:13:24:a8:53:73:2a:3f:cc:
                    fd:d2:a0:fc:ba:fe:68:f7:71:71:27:1a:84:1f:ef:
                    78:1c:0f:e4:91:21:8c:d1:f9:94:6f:32:b9:96:d8:
                    72:d6:ac:df:b6:97:92:b1:c0:58:d0:70:57:f5:22:
                    30:33:c9:a7:be:63:90:c2:e5:fc:50:69:b4:3d:3b:
                    bb:d8:60:c6:e2:bc:5b:01:21:8d:d8:74:b7:18:3e:
                    8e:88:1c:56:bd:a3:2d:b5:c1:eb:5f:3f:85:b8:d3:
                    08:ab:a6:c3:de:de:5a:9a:cd:26:eb:5c:ce:3d:8a:
                    79:8e:80:3b:21:5b:1e:ab:92:d1:d0:21:0d:c4:42:
                    83:8c:b1:d9:7b:fc:f0:09:de:94:f6:da:d3:ba:05:
                    5f:cb:58:5f:5c:e0:d4:da:7e:cb:26:37:47:ec:5c:
                    33:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BA:D2:C2:32:31:DC:C1:BF:7C:B0:E6:9D:DB:B3:B8:A5:28:09:B0
            X509v3 Authority Key Identifier:
                keyid:AE:1E:FB:F6:07:BD:33:D8:A7:CD:33:CD:79:48:14:91:A6:C5:58:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rh779ge9M9inzTPNeUgUkabFWBo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30462/rh779ge9M9inzTPNeUgUkabFWBo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:33:b8:a8:37:17:73:1f:f0:54:30:4f:b6:7d:52:e5:6b:
         05:28:06:ea:a5:1e:b9:ea:85:7c:36:0c:18:94:f4:26:bf:f3:
         a4:43:f0:f5:a0:37:a6:ca:d8:ba:9e:e9:e6:60:7a:72:d9:3b:
         5b:c0:3e:9f:3c:10:2b:5b:bf:0f:f1:81:0b:ee:a3:a6:30:19:
         59:63:84:8c:cd:e8:8a:91:d9:c3:f0:a0:3b:6d:0f:d4:e6:ce:
         c6:f6:ba:55:a5:b3:07:7f:3a:f8:fd:5c:32:a4:e3:19:16:20:
         4e:82:98:dd:6d:e4:94:46:b3:a0:91:d2:bd:a5:4f:f5:7f:2a:
         9b:73:94:75:1c:7b:a6:bb:df:9c:c7:7d:60:3c:85:07:f9:4d:
         e9:22:b5:9b:f7:51:05:6a:5d:bd:0c:f9:e8:80:2e:30:45:83:
         99:5b:db:7c:11:c6:f2:b7:be:8d:23:d5:61:8d:c1:d6:47:4b:
         30:cf:67:57:56:04:a9:04:49:0f:b2:61:89:ef:2f:5f:7e:09:
         89:97:e6:2e:30:b3:4d:de:1d:72:ea:0e:5a:1a:5a:34:0d:86:
         2f:40:1d:b4:2b:a2:47:cc:de:93:ec:05:86:01:cf:be:8e:4f:
         5d:02:10:07:67:4c:5f:0c:56:a9:22:95:e4:78:76:33:b1:28:
         de:d5:6f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:33:13 2026 by rpki-client