Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft
File:                     ahkLoshIbchJHYaNdzjT9N0PKjw.mft (raw, json)
Hash identifier:          asvCfz+onjOleZWFHjz56Rc9jjTrZyb69qqpT1PSXTI=
Subject key identifier:   8B:58:E5:08:9A:54:27:7F:BA:72:EF:94:03:FC:0A:81:FD:E9:3E:B7
Authority key identifier: 6A:19:0B:A2:C8:48:6D:C8:49:1D:86:8D:77:38:D3:F4:DD:0F:2A:3C
Certificate issuer:       /CN=6A190BA2C8486DC8491D868D7738D3F4DD0F2A3C
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft
Manifest number:          E4
Signing time:             Fri 24 Jul 2026 08:09:44 +0000
Manifest this update:     Fri 24 Jul 2026 08:09:44 +0000
Manifest next update:     Sun 23 Aug 2026 08:09:44 +0000
Files and hashes:         1: ZYwObDiOp-aU2qEZ7sPc7sw_Q9g.roa (hash: xon+nkH7Fem6hHSx50fpVLMixV5JmRVM8NpO1ZEmKmg=)
                          2: ahkLoshIbchJHYaNdzjT9N0PKjw.crl (hash: 4aIgjGjgeqFNTBw8gvTuBBn290zh5GZsk1rRw3dX53Q=)
                          3: iCrYkOtvGr3pBcQEGxTn4gvdZag.roa (hash: EM3dDau+ZiGrAKvOJ59gYJQguj9iSqbEGXPwH3mQCLg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 08:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A190BA2C8486DC8491D868D7738D3F4DD0F2A3C
        Validity
            Not Before: Jul 15 01:31:23 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=8B58E5089A54277FBA72EF9403FC0A81FDE93EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:a5:58:73:96:b1:ca:59:d0:9f:05:bc:e1:
                    00:ec:7b:c4:0b:22:9e:76:10:b6:b8:e4:78:00:48:
                    79:b0:7a:23:3b:19:c3:98:40:8b:59:a0:7e:ea:7d:
                    f0:a0:15:e3:19:d4:a9:5f:5b:5a:cc:28:a1:3a:08:
                    8e:26:4d:77:4b:31:9e:12:94:b3:ac:63:4f:78:c3:
                    d5:13:7b:85:9b:fe:30:a0:d3:b9:9e:e4:e7:39:93:
                    93:b2:a1:6e:4e:97:57:62:2f:31:29:44:33:e5:17:
                    33:8f:a3:d5:4e:9e:f3:99:cb:04:df:08:ef:19:58:
                    72:10:04:91:90:f3:24:de:5a:fb:06:ed:cf:0d:36:
                    77:a1:40:13:7c:0a:a7:86:a5:ad:97:28:e1:c4:85:
                    1d:e8:db:60:5b:42:36:be:66:5f:05:5d:ea:1a:41:
                    80:1e:53:64:eb:f9:87:78:52:8b:89:d7:e0:07:d7:
                    26:26:c0:de:f3:13:e7:c0:4d:2e:7d:6a:50:e2:a6:
                    76:54:c4:2e:17:e6:4c:ff:8d:27:04:10:e8:5e:7d:
                    4e:24:e3:fd:14:e3:3a:04:f8:67:f0:b9:af:63:78:
                    e1:24:dc:11:d3:58:62:bc:77:5a:c6:28:22:38:a4:
                    32:e2:dc:01:bc:2f:49:0a:be:c8:55:c5:a6:2d:84:
                    5c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:58:E5:08:9A:54:27:7F:BA:72:EF:94:03:FC:0A:81:FD:E9:3E:B7
            X509v3 Authority Key Identifier:
                keyid:6A:19:0B:A2:C8:48:6D:C8:49:1D:86:8D:77:38:D3:F4:DD:0F:2A:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahkLoshIbchJHYaNdzjT9N0PKjw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/849/ahkLoshIbchJHYaNdzjT9N0PKjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8e:8e:b1:79:aa:5f:94:35:52:5f:1b:89:67:b2:39:6e:9f:
         c0:5f:65:51:f9:2e:a0:60:68:fb:6b:07:a2:7b:97:b5:eb:66:
         f4:fd:a8:46:ce:88:35:a7:41:21:d4:b8:3a:30:7e:bf:bf:d0:
         02:ef:d6:27:2e:2f:18:45:00:86:84:80:61:0e:3d:a2:ca:fa:
         28:e0:f8:83:78:7c:25:61:eb:38:cc:0a:1d:e8:30:46:73:15:
         93:dd:b1:c5:39:64:75:ff:5b:18:52:5f:ac:4c:3c:84:74:94:
         e0:36:85:49:40:b2:ab:f9:a3:cd:8f:0c:25:50:6d:8b:fd:20:
         ff:6e:a7:cf:8f:d3:14:53:4d:fa:d3:14:f8:9c:90:32:2c:61:
         ec:ea:d6:25:fb:0b:b8:1d:2f:80:73:9e:d1:9d:33:44:70:3b:
         62:40:b9:63:1c:f3:2e:23:7f:53:f7:4a:92:c4:a6:da:b2:51:
         a8:28:ab:71:3a:72:a2:9a:ca:5b:77:ae:d8:63:de:c7:9b:41:
         76:f5:79:90:67:e1:58:3b:72:88:af:eb:17:fc:10:be:36:ea:
         4a:09:80:7b:6f:91:02:ce:c5:67:25:55:ba:51:1d:3c:ea:8e:
         9f:0d:a5:99:cd:b3:f7:d5:23:e6:2c:40:85:0c:08:f2:c9:e9:
         2d:8d:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:36 2026 by rpki-client