Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
File:                     Gy5-YtqPEvO7M-C1484AL9oozyU.mft (raw, json)
Hash identifier:          lwLX+3u/ZBE3sB8DaYg1rYGVor7FpoP+sl9iA+dLSRM=
Subject key identifier:   DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       2E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
Manifest number:          0BE7
Signing time:             Thu 26 Mar 2026 12:04:11 +0000
Manifest this update:     Thu 26 Mar 2026 12:04:11 +0000
Manifest next update:     Fri 10 Apr 2026 12:04:11 +0000
Files and hashes:         1: 3U6V_dON3hvJs8wH4zjvRP1ZL0o.roa (hash: 2z3DDTejfkMZMxlCaai8jNOqf3jE1ETZmwr0hqlsaOM=)
                          2: 43_fV0lyNKDL6Y3zBbdXYMTtlp4.roa (hash: 66M33Dt3zJSZK95IT0wlJ0IooeZMgGk1f6Yd0B6qP3c=)
                          3: DCIa9g447TDKUuQObtX4jh9Knlo.roa (hash: aqbu+7zMQMn7YCO6Ptl5HaToQ+L+uJO3bF8fiqDyTqo=)
                          4: Gy5-YtqPEvO7M-C1484AL9oozyU.crl (hash: Tu4LgWShhKH2aHJPJXJFVzJA0KhMEcf7iW7Zw6lQsqo=)
                          5: MBJ2k7vaS4emdBhuKKBvyBUWx50.roa (hash: 53FuTSKp9z4+l94TtFnmKIlUP7Eh2kE6pJq87lQfigU=)
                          6: sCQtjKbZQxnVlB-lYOekiFpDGZ8.roa (hash: NZuCQIr+Kqa+1tdX1fRF4uT3jpkqMMkqPGTUVdITMRE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 12:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Mar 15 01:36:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE0BE4249741260310D50AC989FAE4A9FED7AD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:19:42:3f:26:6c:fe:85:d4:e4:e3:b7:33:
                    ba:63:49:7a:ce:04:ac:03:0d:39:b4:98:da:67:42:
                    1d:04:24:24:99:e9:27:bc:65:64:3d:dc:39:69:c0:
                    c3:72:5a:df:89:a5:90:6f:63:60:3a:75:10:7f:d5:
                    bf:03:0c:1b:c2:f9:cd:83:e5:54:f4:51:de:18:e9:
                    30:55:a7:83:cd:27:27:a8:8b:39:49:70:c5:62:b6:
                    de:aa:84:45:f6:ea:2a:15:a6:a3:4e:19:35:be:be:
                    09:c9:50:4a:4c:ab:93:ee:e8:00:cb:fb:dc:01:e4:
                    43:70:ab:97:b6:9c:ef:dc:bf:81:3e:57:40:58:31:
                    f4:7e:6f:9f:f1:29:4a:44:66:5b:4a:fd:b3:dd:a3:
                    c7:94:78:81:28:53:a4:03:fa:c7:51:5d:7d:fd:81:
                    ed:49:b7:cb:d1:c1:f6:14:f8:b8:da:b7:16:1b:1b:
                    97:11:68:05:7c:60:29:9c:0a:db:78:04:96:42:cd:
                    a8:ed:e7:35:18:72:80:b3:ed:56:30:06:f9:61:47:
                    15:43:50:a1:f2:57:9a:a4:be:9c:c8:e6:40:36:e7:
                    58:fd:3a:8a:32:b5:e8:42:cd:2a:58:a2:a8:71:3c:
                    2a:7d:9c:46:84:8c:84:a8:a3:c8:e6:e3:25:a2:60:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:9f:b5:27:cf:e5:40:2d:34:75:24:f0:57:b4:10:3c:9f:
         3c:5a:e0:c5:43:fa:f0:49:e3:71:9d:ea:d5:4a:df:b1:62:b9:
         27:2e:ee:3b:e7:72:ff:bc:3b:13:aa:c1:58:83:d9:40:3d:fd:
         41:1f:dc:7c:87:93:6e:d9:95:b7:b1:56:08:12:9f:29:64:a9:
         de:ce:90:df:f5:1f:3a:ad:eb:5a:41:a6:59:da:5d:1c:6a:f1:
         7e:a5:e5:86:a9:66:31:fc:dc:b9:b6:97:d4:b9:0e:65:0e:80:
         27:68:f0:ba:3c:db:5b:1b:0e:b8:67:2e:9b:b5:c6:32:b0:69:
         de:73:cc:66:39:75:24:58:14:83:f5:cf:20:45:9f:4a:8f:d0:
         04:fa:df:40:73:17:ff:e0:0a:55:a6:34:0b:b6:0c:e0:ea:74:
         70:45:fb:a3:fe:e6:5f:73:ed:0b:9a:cf:66:d0:45:39:c6:1a:
         e5:36:95:61:81:d0:e6:5a:f7:7a:ae:07:2c:ac:9f:ab:43:2b:
         51:6f:ea:52:ff:7d:98:22:0e:02:42:64:b5:2e:3c:7c:f9:60:
         95:61:a1:6e:9f:41:09:69:4e:f3:ba:89:20:e6:eb:04:a5:6d:
         cb:d7:a8:bf:52:70:31:ea:95:9f:b9:a1:85:22:eb:48:e3:7a:
         d8:58:7b:db
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjJF
N0U2MkRBOEYxMkYzQkIzM0UwQjVFM0NFMDAyRkRBMjhDRjI1MB4XDTI2MDMxNTAx
MzY0OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoREUwQkU0MjQ5NzQxMjYw
MzEwRDUwQUM5ODlGQUU0QTlGRUQ3QUQyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOn7GUI/Jmz+hdTk47czumNJes4ErAMNObSY2mdCHQQkJJnpJ7xl
ZD3cOWnAw3Ja34mlkG9jYDp1EH/VvwMMG8L5zYPlVPRR3hjpMFWng80nJ6iLOUlw
xWK23qqERfbqKhWmo04ZNb6+CclQSkyrk+7oAMv73AHkQ3Crl7ac79y/gT5XQFgx
9H5vn/EpSkRmW0r9s92jx5R4gShTpAP6x1Fdff2B7Um3y9HB9hT4uNq3FhsblxFo
BXxgKZwK23gElkLNqO3nNRhygLPtVjAG+WFHFUNQofJXmqS+nMjmQDbnWP06ijK1
6ELNKliiqHE8Kn2cRoSMhKijyObjJaJgYf0CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBTeC+Qkl0EmAxDVCsmJ+uSp/tetLDAfBgNVHSMEGDAWgBQbLn5i2o8S87sz4LXj
zgAv2ijPJTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODE4L0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlvb3p5VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5NS1ZdHFQRXZPN00tQzE0ODRBTDlv
b3p5VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MTgvR3k1LVl0cVBFdk83TS1DMTQ4NEFMOW9venlVLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBADk/n7Unz+VALTR1JPBXtBA8nzxa4MVD+vBJ43Gd6tVK37FiuScu7jvncv+8
OxOqwViD2UA9/UEf3HyHk27ZlbexVggSnylkqd7OkN/1Hzqt61pBplnaXRxq8X6l
5YapZjH83Lm2l9S5DmUOgCdo8Lo821sbDrhnLpu1xjKwad5zzGY5dSRYFIP1zyBF
n0qP0AT630BzF//gClWmNAu2DODqdHBF+6P+5l9z7Quaz2bQRTnGGuU2lWGB0OZa
93quByysn6tDK1Fv6lL/fZgiDgJCZLUuPHz5YJVhoW6fQQlpTvO6iSDm6wSlbcvX
qL9ScDHqlZ+5oYUi60jjethYe9s=
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:56 2026 by rpki-client