Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
File:                     Q5F7IwdFJOnm6o5A-koGcsliAxg.mft (raw, json)
Hash identifier:          nfNHh7sNWah3J8DHGGYhZjkABQh5DRF/oWBB9TRj3O8=
Subject key identifier:   6D:23:2A:2F:D4:A4:48:03:09:CF:0D:2E:30:AA:C2:91:67:42:CA:6F
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       8F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
Manifest number:          0CC6
Signing time:             Thu 26 Mar 2026 20:13:46 +0000
Manifest this update:     Thu 26 Mar 2026 20:13:46 +0000
Manifest next update:     Fri 10 Apr 2026 20:13:46 +0000
Files and hashes:         1: FxIG5MBFRWMqXQZx2eYb311_n_I.roa (hash: mMOhJsWgLlV6r9IWbpswNUHEoeSUgXGT/RxZ6Nt1WNg=)
                          2: P-OHnRdyLTnV-EQMGnpzsUyMWSc.roa (hash: I5cJ5KWF6s15EtU9O4HXn3Biqy30RURD5XNdfO+ft+E=)
                          3: Q5F7IwdFJOnm6o5A-koGcsliAxg.crl (hash: jtbJo4xLr9dKmucaF93pBshbu6KRuAxHAl/LjQ4aXv0=)
                          4: RNYejr3_eVdGUc0CNQJx9Us-s9Y.roa (hash: XBDzrc/nqNjIHUy2G57c5Mz0REQkwmGhzu7qq3Kv+Bg=)
                          5: RfSpE91eBK8yrziJ6-KY9s-Gwdk.roa (hash: JcJRVjBmDrqQkXbwYwYqZy/xjLAsqQLtMYTTq1DGZFQ=)
                          6: _-BDU5JHDaNEph4EOJBY5gjh9fA.roa (hash: bZqN756LE73nKqm8bFnmQQfBITA0qxWmbsucma3fEy0=)
                          7: cBu2M_sn23WXFoWZJRYkk1DvWKY.roa (hash: owrQCOPslS/9U8ZsWu3PvxF+lj0CEyhxfP1459RHqPg=)
                          8: eYBeEYnQ4Cd1rmaBhSbZBPsUGKE.roa (hash: fmzClar6laZHJ5FulBuAtQMn8XRRNhe4xXjEqpbqJ6k=)
                          9: jk5rP9RHw7czhgnFbhZ1Gdo1mNA.roa (hash: 7uGX7eadlNNcBK4EZuEa/0b58ad0P5vdKxO69DdLHNM=)
                          10: m2CTtTf8a97zsh5ysmc1KOdajJ4.roa (hash: RSjTghs80d3kwtoISmChxki7sgjvedbUmI+6/5jzJNg=)
                          11: p4qryPinJeIHF9a70dFQb8YKe6U.roa (hash: 6vEx8G91eWntO69eZTVDHvXulRKRiBU9Xx1L1m0RN5Q=)
                          12: sOSvCl-AYgkYydPJdINGLSAUAeI.roa (hash: 0Nm+SGAuSh2s734XE8vjM2NDxxCzAA75xEDITj9GrxE=)
                          13: uo6G4ZAE55eDyfzbIxpDvkrcW-Y.roa (hash: a8OmaZ8y3/f+FKBzElbySJTp2uTcPtRkL2/FUHOiyvg=)
                          14: v_uMY-HxrHpPJRTyng9tJkcb-3s.roa (hash: 8x6y/Xrcc1yAz/zP3FkVP220itZ2ja9HV3bkMtRvRtc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 15 01:33:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6D232A2FD4A4480309CF0D2E30AAC2916742CA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:82:6b:51:f5:20:ee:b7:f8:0a:32:09:f9:
                    9a:26:58:fb:3f:0e:75:02:39:db:19:59:ca:dd:15:
                    e9:cf:8a:f5:df:a4:48:25:00:ed:a8:89:a2:c6:36:
                    88:cf:61:b2:ff:d6:97:aa:43:67:24:7d:4d:e7:b9:
                    88:4f:cb:83:cb:92:7e:fa:b4:fc:dd:b0:40:e5:b1:
                    4d:3a:b2:7a:ea:08:4d:86:b6:3c:4f:e7:51:f3:90:
                    f1:bd:a2:fb:52:e5:9a:65:ba:98:ff:3d:d5:61:4f:
                    09:e4:7b:4b:8e:4d:84:ef:96:de:97:3b:92:e3:e0:
                    a9:da:13:63:0c:08:de:f5:b5:9d:f6:ad:f9:eb:23:
                    0c:6d:01:94:12:dc:b7:9f:9a:4f:76:53:bb:ca:45:
                    69:70:71:09:e2:41:78:63:1f:d9:23:16:67:54:01:
                    f4:41:52:86:05:26:76:b6:a9:f8:7e:66:1a:c9:5b:
                    7e:ce:57:e0:8a:d9:72:22:fa:20:56:18:4b:af:b0:
                    65:5c:23:f5:e0:c3:9f:04:f5:51:ca:df:d6:bb:e6:
                    a8:0c:6a:69:28:4b:a1:58:6f:b5:81:3b:a4:43:11:
                    ce:00:9d:58:d1:e8:34:3d:6e:3b:c5:55:df:d6:bd:
                    3e:e8:1b:fd:ba:04:46:25:6b:a4:84:b8:86:70:65:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:23:2A:2F:D4:A4:48:03:09:CF:0D:2E:30:AA:C2:91:67:42:CA:6F
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:00:88:89:ba:96:39:45:39:b3:d6:7e:14:69:18:dc:a9:65:
         55:24:0d:1f:39:f8:bb:a2:a2:f4:bc:cb:50:cd:fb:f6:1c:4b:
         0a:82:12:3d:74:96:98:48:bd:fd:36:c7:7f:00:62:a9:b1:19:
         3d:39:05:8f:ed:7c:82:ee:41:68:41:49:cb:ff:8e:75:6e:1f:
         36:de:63:e8:20:fe:89:35:03:44:81:f8:91:87:c9:21:fe:b7:
         29:f3:19:bf:ab:1e:ac:4f:87:b7:b0:b6:71:fb:43:9a:60:0e:
         ed:ba:c5:22:f9:7e:0f:69:c4:1b:a7:96:76:df:12:8f:7f:61:
         81:c5:1c:6b:26:88:0a:bb:2c:f9:3a:35:1f:0b:22:e2:02:2a:
         d0:9f:0f:eb:de:6f:1f:b8:c9:44:b2:91:b8:54:a4:3d:a2:8d:
         79:0d:8c:50:79:1a:f3:ea:30:44:e1:04:c0:5f:7b:85:31:9e:
         a5:21:98:ac:25:59:2f:6a:1d:6d:6e:6f:7f:e9:09:64:9b:4e:
         5c:5a:fc:35:bd:18:05:f4:fd:af:1c:ed:ea:e6:cd:27:f1:b8:
         37:af:5f:3a:da:36:65:1d:65:08:bb:c5:26:8a:91:bc:16:49:
         39:04:dc:2d:97:f0:1c:23:88:07:f4:60:a6:0f:7c:0e:c3:e3:
         8c:c7:a7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:22:29 2026 by rpki-client