Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
File:                     rUdB8DSfvBWnCOKKLOMHkGysXeA.mft (raw, json)
Hash identifier:          r1zKHeYYV4jS2wD7ur3kl+foCBf3PbXGPOZo+hl7hCk=
Subject key identifier:   34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       7E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
Manifest number:          0C44
Signing time:             Thu 26 Mar 2026 12:57:43 +0000
Manifest this update:     Thu 26 Mar 2026 12:57:43 +0000
Manifest next update:     Fri 10 Apr 2026 12:57:43 +0000
Files and hashes:         1: -44w3H7mHC3P6MEkJ64gddWl05o.roa (hash: ekAEa04AtpxTpm27NgIehyLMgTqp2cJO/JqEpvVq0mY=)
                          2: 6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa (hash: pGOiUwrcijbOh7s/fIQGYME7OWobKUFgc6nuexCXFrU=)
                          3: AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa (hash: nFhNzeC3riYqXxDTlr4VOWOGbXhA2ZXFzEX0CCoaAl0=)
                          4: FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa (hash: 9xIQ1aoYhLmNaKV0qTMShB6r+L42mmz0vEe1O2sJ6Yc=)
                          5: Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa (hash: iOGPOuYPj5r/cN0YDKN/ZOwI7ZDH9ZX/pSQ7K6nAdxU=)
                          6: HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa (hash: BPNwftNmWWMNHfVTqGf57CYHqCpkli1hpywyFPnsEOM=)
                          7: HoTVVuBmQz7w-_GK8A50XT-oITg.roa (hash: 2IqaLQ+EiS3PzlA9vQ01E0p37akz/m/L2FmPX9wHjo8=)
                          8: Opx5wg0WF-5E6zDseE1mZXHqzBU.roa (hash: U40LmeWNqAR/wEt5u9K0EWxKlPvgBANbRIla5GeCxNg=)
                          9: P92WSbxjaWhAzQHERNuRMhQ5dbU.roa (hash: Cpn/uQhJUzWt9TwbxpwuvPnjzxAIsEpveTtjNmwoBAs=)
                          10: bF80adSQ8vY_hSjb1MNA62WrLok.roa (hash: iSV4EUZj9O+MXJL2MLaL8et/J11m8cLRSw0AlK5YehE=)
                          11: bNZiILBQZCfv4rafHeI4ItJUj0M.roa (hash: jdkVKrogZ1Uyh/9oUzhqOvxxE7mJ5gJwFU2JiVNkTOc=)
                          12: fC50YiCiaZH3Owk7bRKOueaq30U.roa (hash: 0gp4Fc9J1EouRt/DpBNacd4J8HJztuVvZzbhlIw/M44=)
                          13: nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa (hash: IpSd49Zb/DkneMD3+fLGaMDLvRJU6gGByNvNvmvbaLE=)
                          14: plrrw1zZJMDvs5vsLiu3LSmU9So.roa (hash: En+hNR2/MWIF7+CfXeorjfU098aLo4gYHrkrOQgBa3g=)
                          15: q55W-jiXYj9pipYZ55OKoZuHUZg.roa (hash: WtoMlfuIzZFoWwxTN7NyWp1cOZIDnRLFMYfYdHslePg=)
                          16: rUdB8DSfvBWnCOKKLOMHkGysXeA.crl (hash: bW+EpE7QMdmr6vbQkXqc5tm9HK6EkFhcGj1GIjfG2Qo=)
                          17: tRLeb59T51PVsvVpprenQhiMVWo.roa (hash: i4d2pqwxG4pMmE33R5zS3XsYKlS18ktc/FzQlP11Osc=)
                          18: u__x-QVW8DyyMjVXY1TmAcTdlSU.roa (hash: t7NDLgL+ywoFLnF08mgweWatFG1WCx3pBLwNDwVnD08=)
                          19: vzIlY2MXuGgxt481RgiujD6ikAQ.roa (hash: 2IiYTq1jGJTrWoyXNq4MN8AK2fBJJoSK2RkRY3pCVRU=)
                          20: x7NjzK66HD4p3HS04nvM5LzUTm0.roa (hash: vLDP5mFxGvPZahQmcUzuQcsAlkSEULfmKV5sObv+xQg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Mar 15 01:34:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=34B5FD0C2C7BE812B69D0B55F71081FA7DC44DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:8f:f3:8c:63:be:ff:53:17:98:39:6c:37:
                    c8:0b:65:f7:b3:52:21:ef:d1:45:fa:0e:70:d3:33:
                    42:cd:bd:2c:9a:e6:02:54:82:4f:3c:f2:ec:0b:c3:
                    79:b0:a1:89:e4:6d:97:00:85:20:65:d6:bf:01:f5:
                    69:ef:9f:f0:e6:b7:7c:b8:ea:e1:ee:01:f2:87:0c:
                    66:f7:af:f1:6c:fd:f3:54:0f:68:47:35:fa:8f:65:
                    5f:31:69:1a:e7:53:6e:80:a5:68:d7:78:3f:ef:4f:
                    08:47:b7:94:37:d1:48:88:ef:14:b8:c3:b6:f2:39:
                    b0:b5:5d:a7:43:7e:8a:84:83:32:20:ba:02:58:1f:
                    22:0b:48:a1:d5:26:d5:a7:73:9a:53:98:5d:f7:50:
                    20:ac:4a:de:bd:48:66:ce:37:42:3b:2f:80:bf:44:
                    a6:af:9c:6a:2d:97:0c:6a:6e:84:e7:70:1b:55:57:
                    bf:eb:76:a7:06:fa:ac:54:e5:42:0b:4a:1e:81:0b:
                    f6:32:99:be:f4:38:be:07:61:11:1e:1c:6d:8e:61:
                    47:c3:f6:e1:f5:16:9b:ff:a3:3c:e1:47:18:68:93:
                    a6:fd:d2:11:84:24:c3:bb:6c:b7:71:63:dc:c5:34:
                    be:31:90:24:99:85:26:cd:87:d6:f3:fb:a6:18:e7:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:01:04:c5:9e:fc:c1:6b:56:85:fc:43:f6:71:85:85:80:dc:
         d8:da:bc:1c:ab:71:18:84:d6:cb:65:3e:7f:ae:d9:f9:d8:27:
         67:d6:52:d0:cf:91:f7:8c:6b:2a:a4:de:cf:8f:9f:cf:dd:16:
         7b:b8:ed:01:ce:44:5b:68:9f:e9:e0:b7:85:f3:81:ec:f1:00:
         c6:36:5c:e0:39:9d:af:34:4d:fc:3e:04:55:57:ac:1e:a8:ea:
         67:23:39:d4:c0:36:72:a9:fb:e2:19:41:55:d5:48:b6:97:bb:
         2b:1a:a8:99:34:bd:3a:2b:32:99:38:e7:ac:1f:1f:5c:cc:10:
         87:51:f9:17:b2:d5:f4:b6:d4:c7:d2:81:ed:84:7b:79:72:68:
         7e:a6:e9:d8:3c:0c:9f:8d:23:ab:96:59:ec:42:50:45:52:3a:
         2f:b8:ff:ea:09:4f:3d:5c:fa:b6:bc:19:63:50:2c:1e:28:0c:
         36:f4:e6:74:6a:fa:b4:50:09:54:19:6b:4d:55:d5:fb:8e:13:
         06:d3:fe:c2:9b:e6:42:05:ad:e3:15:18:27:8e:ec:79:d3:0a:
         3e:db:aa:3e:43:c5:48:d6:a0:1e:f8:f4:a0:82:6c:cf:16:17:
         87:67:3e:2f:0d:b2:ef:fa:0d:6c:b3:bf:65:91:b5:36:03:70:
         ec:75:36:30
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBfjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI2MDMxNTAx
MzQ1OVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRCNUZEMEMyQzdCRTgx
MkI2OUQwQjU1RjcxMDgxRkE3REM0NERGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALS1j/OMY77/UxeYOWw3yAtl97NSIe/RRfoOcNMzQs29LJrmAlSC
Tzzy7AvDebChieRtlwCFIGXWvwH1ae+f8Oa3fLjq4e4B8ocMZvev8Wz981QPaEc1
+o9lXzFpGudTboClaNd4P+9PCEe3lDfRSIjvFLjDtvI5sLVdp0N+ioSDMiC6Algf
IgtIodUm1adzmlOYXfdQIKxK3r1IZs43QjsvgL9Epq+cai2XDGpuhOdwG1VXv+t2
pwb6rFTlQgtKHoEL9jKZvvQ4vgdhER4cbY5hR8P24fUWm/+jPOFHGGiTpv3SEYQk
w7tst3Fj3MU0vjGQJJmFJs2H1vP7phjnptcCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ0tf0MLHvoEradC1X3EIH6fcRN9zAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvclVkQjhEU2Z2QlduQ09LS0xPTUhrR3lzWGVBLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAIBBMWe/MFrVoX8Q/ZxhYWA3NjavByrcRiE1stlPn+u2fnYJ2fWUtDPkfeM
ayqk3s+Pn8/dFnu47QHORFton+ngt4XzgezxAMY2XOA5na80Tfw+BFVXrB6o6mcj
OdTANnKp++IZQVXVSLaXuysaqJk0vTorMpk456wfH1zMEIdR+Rey1fS21MfSge2E
e3lyaH6m6dg8DJ+NI6uWWexCUEVSOi+4/+oJTz1c+ra8GWNQLB4oDDb05nRq+rRQ
CVQZa01V1fuOEwbT/sKb5kIFreMVGCeO7HnTCj7bqj5DxUjWoB749KCCbM8WF4dn
Pi8Nsu/6DWyzv2WRtTYDcOx1NjA=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:56 2026 by rpki-client