Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
File:                     h-45TMixZRt1jziPc6iOaL0nIi8.mft (raw, json)
Hash identifier:          NTvgHJA4dm92Xc0AX/GTK/sbClet0LEd+2SlNffdP18=
Subject key identifier:   49:83:20:27:69:C7:52:C3:51:08:7A:B4:44:6B:98:D7:F0:9C:8D:31
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       87
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
Manifest number:          129E
Signing time:             Fri 24 Jul 2026 07:11:58 +0000
Manifest this update:     Fri 24 Jul 2026 07:11:58 +0000
Manifest next update:     Sun 23 Aug 2026 07:11:58 +0000
Files and hashes:         1: 1MHeq1NzFlMtGs7huY6_oeGkuLA.roa (hash: zOQMN7+WFELku0dRX44iGN5bGsOTJuyUhsYBUMZq1cg=)
                          2: 8bn9pOJqfdlJtkVdurG5kNIdGHY.roa (hash: XFtxxHRb6zYcrj0khyUkviF0dvm7wTvE23Elk4sClO4=)
                          3: IMGmVOXBNDCw5YrIAAqSuN_bobI.roa (hash: OGR2WeJJfjyTPtMI2CiYKaiLFHHr9zF+Y8A/KXnuD0Q=)
                          4: KcmglW7Q6bMKbTlQXLkN1gSYGoI.roa (hash: kz4IrjaAGJtvdLrU4G5HkQpB+RxmfTJKrw8tu2wsckE=)
                          5: UkMVqx0koZLw_UhEqifBSFFtmFc.roa (hash: S0u+MTiN10KxRQqRCcyJC6T9b2w9h7wgNB/Xx9RK7oQ=)
                          6: WWYkCPRNakarLIxZNEU_xh-IHLY.roa (hash: pE2V8z8yW2i7WTXwqRz5mZN1k5bScoc/iQwDr6EUgYc=)
                          7: XMZgzQdMb5jGPcFMtUw2FjpuZnA.roa (hash: rsrkO4qYokJ3UaTWER9BLjPKRhuDELV00MTa3WI8/zE=)
                          8: XzePmIZ8JFWbdNQfxnAqJ4MsSc8.roa (hash: BjDCXAkFjJpj8z/8pqVkrvcjpYQBawB6ijEElaHsAUU=)
                          9: c74DN7JJBMLaV4R4Bmp9USTDBb0.roa (hash: t+ZhGPQNTB8SYrQYSxPgRXmke+H97PZD3IlZyE0/9Ds=)
                          10: fo8hN8iP2DwgBXMC9sx0eYKA_5E.roa (hash: 4hZYdpo7AuSfK/Yt1ufFm0Zw54U80oy1y7kQ2GQDwBQ=)
                          11: h-45TMixZRt1jziPc6iOaL0nIi8.crl (hash: L0Yc3yxnEGY0n+krP+Z6S54w++CaI31P8VJR4zQTU3Q=)
                          12: qQEhYSYFLtDNhsy1fDyD56itYxg.roa (hash: OXZP01WIe8ncjbk0i78ZH0awUiOfTyqEemrZdEUJZGc=)
                          13: v4KKaptOK2oKFQYwTZWM9pnt38Y.roa (hash: ab4YHtg5PTEQ18hijJnlbgSMP+9b5IUNFrUV7SrhKj0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 05:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Jul 15 01:32:40 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=4983202769C752C351087AB4446B98D7F09C8D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:06:08:4a:28:92:f5:f6:0c:a7:2a:06:92:
                    4a:62:db:71:64:45:a1:53:56:39:34:c8:ee:64:60:
                    8b:51:14:f6:84:bf:4a:67:97:62:ee:64:46:bf:a9:
                    a7:81:6e:4a:d4:78:63:78:53:69:dd:55:70:90:c5:
                    d0:52:1a:ce:f7:42:80:2e:0c:6f:fe:09:d7:db:41:
                    46:ad:5c:34:f0:85:2b:79:09:26:49:e4:47:c1:bd:
                    8a:25:50:b2:6d:39:13:11:2d:d6:bb:e8:23:1c:c6:
                    7b:42:60:76:7b:09:5f:79:f9:15:2f:34:41:bf:4e:
                    3e:3f:4b:09:da:a2:a0:6d:62:9c:ac:90:86:0d:24:
                    72:dc:fb:7f:4c:19:9f:9e:e2:1a:d8:7d:b0:45:e2:
                    3c:73:93:c0:d1:b3:48:12:0a:4d:a5:b6:4d:70:74:
                    72:65:e5:a9:13:1d:20:83:df:e5:be:1a:3a:8c:fe:
                    c3:9f:3a:c0:f3:9f:36:c2:4c:ac:fa:5b:c7:71:cc:
                    fc:9a:b8:65:ac:98:4d:37:a8:ee:0b:59:2f:13:36:
                    06:b3:84:52:c0:d8:8f:55:79:ee:b2:4d:3b:fd:21:
                    00:cc:28:e5:da:81:20:95:e6:79:71:8c:db:a9:fa:
                    e4:8a:95:15:88:36:4f:dc:59:bb:e8:aa:a2:cf:bd:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:20:27:69:C7:52:C3:51:08:7A:B4:44:6B:98:D7:F0:9C:8D:31
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:54:cd:6e:7a:03:31:f0:65:e1:92:63:93:c0:8f:8f:d0:6a:
         42:ec:cd:7a:ab:1b:1d:8a:db:1d:43:be:08:d2:0a:6f:6e:29:
         3d:72:ae:f1:6e:3e:4f:d1:b1:6d:91:33:38:08:3f:a2:3d:df:
         5f:0c:2c:01:e4:aa:43:79:63:6d:51:d4:63:36:0f:99:10:e9:
         c2:77:b3:21:c0:d6:38:0a:5d:71:28:f8:ee:9b:15:3a:d6:24:
         28:a7:ac:54:ee:09:f2:e1:a7:fc:cb:d0:d4:46:59:8c:68:a3:
         1b:93:df:e5:3d:21:75:31:02:d4:d9:d8:f0:48:05:fa:f3:68:
         ee:cf:8d:39:87:bf:7d:66:a4:a7:6a:43:fb:3c:5c:d6:ed:c1:
         ef:21:65:2a:eb:19:73:85:97:34:b5:4d:b6:74:b3:3e:3c:5a:
         ac:7d:23:55:f5:e9:94:19:19:59:df:90:e4:ec:d8:aa:47:42:
         21:9e:8c:44:db:ac:49:bf:7b:fa:75:08:a4:89:ee:a5:95:b7:
         2c:16:4e:a5:76:c1:0f:58:26:4c:b5:50:72:7e:c7:f0:8a:8b:
         a4:48:3b:ab:90:10:eb:f5:f4:12:26:2d:8b:7e:a4:00:2d:8b:
         b4:ea:09:06:2f:76:97:81:e0:dc:a6:a9:13:e7:07:84:c9:c6:
         bb:a0:d1:63
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODdF
RTM5NENDOEIxNjUxQjc1OEYzODhGNzNBODhFNjhCRDI3MjIyRjAeFw0yNjA3MTUw
MTMyNDBaFw0yNzA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5ODMyMDI3NjlDNzUy
QzM1MTA4N0FCNDQ0NkI5OEQ3RjA5QzhEMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDKQYISiiS9fYMpyoGkkpi23FkRaFTVjk0yO5kYItRFPaEv0pn
l2LuZEa/qaeBbkrUeGN4U2ndVXCQxdBSGs73QoAuDG/+CdfbQUatXDTwhSt5CSZJ
5EfBvYolULJtORMRLda76CMcxntCYHZ7CV95+RUvNEG/Tj4/SwnaoqBtYpyskIYN
JHLc+39MGZ+e4hrYfbBF4jxzk8DRs0gSCk2ltk1wdHJl5akTHSCD3+W+GjqM/sOf
OsDznzbCTKz6W8dxzPyauGWsmE03qO4LWS8TNgazhFLA2I9Vee6yTTv9IQDMKOXa
gSCV5nlxjNup+uSKlRWINk/cWbvoqqLPvd5RAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUSYMgJ2nHUsNRCHq0RGuY1/CcjTEwHwYDVR0jBBgwFoAUh+45TMixZRt1jziP
c6iOaL0nIi8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzg4My9oLTQ1VE1peFpSdDFqemlQYzZpT2FMMG5JaTguY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oLTQ1VE1peFpSdDFqemlQYzZpT2FM
MG5JaTguY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5tZnQwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUVM1uegMx8GXhkmOTwI+P0GpC7M16
qxsditsdQ74I0gpvbik9cq7xbj5P0bFtkTM4CD+iPd9fDCwB5KpDeWNtUdRjNg+Z
EOnCd7MhwNY4Cl1xKPjumxU61iQop6xU7gny4af8y9DURlmMaKMbk9/lPSF1MQLU
2djwSAX682juz405h799ZqSnakP7PFzW7cHvIWUq6xlzhZc0tU22dLM+PFqsfSNV
9emUGRlZ35Dk7NiqR0IhnoxE26xJv3v6dQikie6llbcsFk6ldsEPWCZMtVByfsfw
ioukSDurkBDr9fQSJi2LfqQALYu06gkGL3aXgeDcpqkT5weEyca7oNFj
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:10 2026 by rpki-client