Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
File:                     4SW0OnWuMTJppgY45mMXlwtQtdM.mft (raw, json)
Hash identifier:          Rb8YCH68LpQKzTW/q73Pd6nFGjHU2PPtjbeBo7596gs=
Subject key identifier:   2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
Manifest number:          0BDB
Signing time:             Thu 26 Mar 2026 03:52:12 +0000
Manifest this update:     Thu 26 Mar 2026 03:52:12 +0000
Manifest next update:     Fri 10 Apr 2026 03:52:12 +0000
Files and hashes:         1: 4SW0OnWuMTJppgY45mMXlwtQtdM.crl (hash: 1bMOhN7EiZ9pZFccOq2224S4L0Z5yeccxwxZgiZMifo=)
                          2: eJObqEUg57Htjs32brscER0ziGA.roa (hash: sAB88E47RzCiuqDhcl+IzB3GnruVtCV9pzcsXdh8J14=)
                          3: sLGgaActsaSFOUuP72d7QBmj5Bk.roa (hash: 0nszAiQf991UoL5xMmz5WyuSEX8jXh7GwnSC9AcKvFY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: Mar 15 01:30:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2A921C6775102E77A655E6C7BB0E169690FC4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:3d:a7:fc:4c:9a:03:4c:ba:89:29:80:82:
                    fe:c3:23:53:37:47:14:cc:bd:aa:81:22:b3:77:fe:
                    44:3a:fa:83:88:86:43:f6:df:43:9a:95:ad:17:64:
                    3c:a4:96:8b:ac:04:4b:4d:51:7a:d0:11:fa:85:b4:
                    35:51:69:0e:9a:ac:0b:40:25:15:68:41:18:17:56:
                    6f:9a:e4:7c:f2:47:36:dc:ff:51:cb:c1:b8:ff:5f:
                    c0:ce:a3:cc:6e:bc:56:46:99:90:1c:98:18:ce:61:
                    89:15:e7:ac:6a:08:7c:10:c0:58:cd:8d:3f:52:bd:
                    36:95:72:42:e3:dc:a5:b7:21:22:28:60:29:d0:3d:
                    ee:79:ca:18:70:9e:f4:60:fb:56:ed:1d:f4:f1:6b:
                    68:a2:00:e3:16:c6:75:f4:af:e9:1c:57:91:4e:f7:
                    a5:77:fa:34:b9:8c:1a:85:54:fc:bf:23:37:e1:75:
                    e8:1d:e0:eb:22:1e:20:cb:82:29:94:af:27:8a:6c:
                    f3:b2:6e:5d:e9:7e:fa:6b:86:78:7a:8f:1c:64:90:
                    e3:79:7b:32:85:4e:bf:0a:94:dc:4a:53:74:68:ba:
                    42:93:bd:32:6b:52:ce:0d:82:89:e1:61:07:98:56:
                    e5:ae:1c:ca:18:bc:dc:90:1f:23:fd:bd:89:d0:e9:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:6b:11:2b:ee:c6:13:bc:c5:83:f7:de:35:dc:a1:f2:0e:
         2f:62:0b:9e:19:a9:39:f9:80:1b:92:a0:96:8b:c0:84:ce:79:
         89:a7:d2:9c:63:33:26:06:15:5e:99:08:1f:9d:81:0f:ac:e9:
         50:be:dd:95:cc:eb:1d:4c:8e:84:f8:95:c5:57:5c:47:eb:4b:
         2c:23:ec:7d:5f:16:d9:da:42:bd:fb:29:4d:07:ee:1c:5c:3a:
         80:c9:f8:20:04:25:6c:36:19:f7:d0:f3:7c:dd:d6:22:cf:bd:
         c9:5e:24:cd:47:43:4c:6c:80:45:25:18:51:d3:e9:8b:bd:00:
         45:cf:73:4b:13:a5:b0:50:57:dc:45:bf:3e:9e:48:e1:46:df:
         f9:3f:8f:de:f2:88:0b:5d:a0:8a:fc:82:c1:61:c0:7a:4d:b3:
         07:17:d4:23:c9:69:a5:12:74:08:66:d5:fd:86:a2:31:7a:5d:
         ef:b1:d6:30:90:a0:d3:e2:4b:92:0f:fd:30:0a:90:ef:fc:4b:
         8d:72:a0:7e:09:18:de:36:33:35:9e:38:3c:7a:d3:ad:c5:c3:
         ca:fa:b3:59:ea:cb:10:73:3c:a3:5e:00:0e:10:c1:95:95:99:
         02:10:63:3b:98:07:cb:0f:c5:71:19:c4:e3:72:78:a7:3b:ec:
         32:49:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:41:53 2026 by rpki-client