Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
File:                     qggJfGBgcQKAzaqk5-BsHxPNFvI.mft (raw, json)
Hash identifier:          vN2SOMtVM/nn9FHG/no0+UQ1aJvqK8l4+5cFhdSjCwg=
Subject key identifier:   DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
Manifest number:          0CFC
Signing time:             Thu 26 Mar 2026 12:19:14 +0000
Manifest this update:     Thu 26 Mar 2026 12:19:14 +0000
Manifest next update:     Fri 10 Apr 2026 12:19:14 +0000
Files and hashes:         1: A2HbR0tifjK7EU0pCY-NJriQPHE.roa (hash: +OH53Uwh6adch0mud2QP58gAk+D1/9afXq0r9C5mPe0=)
                          2: IUyLfhIPkw20z59XzKhIivWbXso.roa (hash: Iq5SYxQQBdehoAHdmMS0IumJxieG5jehySaNykurtJA=)
                          3: JZRHJVOa8hEw3bPEbJUeTkRrGSY.roa (hash: s4dDzYW1h8Irm+ZjUSlt3YrM9ewFA/yZNLYFD4L2U6w=)
                          4: YhbbQbUWmYQIVeel-VbjxAkTCyw.roa (hash: oK2HKr1pskMMHThSY1Jc5pcKl3UQ76lWFkKYj0EKCDc=)
                          5: csY5cNEBJtQRyU-Lo8UoYLgxjzk.roa (hash: VFmKuGJTJTGGMbsum/EqDWz6RxCWDE2Zr8nj+R7esfY=)
                          6: iY8wxWWqnLBTx1z3zHgGnt65Mng.roa (hash: KVI/kF1AcO+x/OMCrIV8TxyM//6qQt7UHkqr9zybipE=)
                          7: kzs2e9NIUX3AEkjFSGoClWE7-RU.roa (hash: ZIj7bKLYikXuc/Q2YNySDM67A2uRGKahApq2ndFHv0M=)
                          8: lnrKeqsKIyOTGivbgELUYqOJNy0.roa (hash: p+cw/5btMqGORlUVu+D5rpYoTWjbia2QSzMpdq0tu+A=)
                          9: oIcXxcqR4Pd9L_40aXtMY4ygCcs.roa (hash: Mf5dV9vCSo+Ayz00aEu6qXOIMKA8kGbvYMlNNym8gBs=)
                          10: qggJfGBgcQKAzaqk5-BsHxPNFvI.crl (hash: 7xkcR0tbsZuZBAhpK+AmBeyLrU4XHJVu+yBUWNk8ojk=)
                          11: vSZnC0IMMdDOrGP9BttO_QkmtFc.roa (hash: CffTQg8fxhj/TW1nhR0yLFaAYy6XcsEtzNb2ocP1np8=)
                          12: yjXljVumuFpn88V8J2PDjSR0DzM.roa (hash: +5CfFKVcgKIqXZSm6uNlLlrwPHJZGWL1QX51JCLPUmA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:28:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Mar 15 01:33:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DD9C42D45F6CD31072F318A68C97E879874FD70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:88:4f:de:4c:f8:cd:cb:b0:ef:1c:d3:99:
                    d2:2a:98:49:fc:ab:51:74:68:32:52:fa:50:e8:20:
                    e5:fb:bd:dd:ba:8b:90:2e:b6:e1:bb:9c:7f:11:15:
                    97:82:5b:87:53:6a:04:68:d0:55:03:c3:43:b3:f5:
                    ec:62:c8:65:ec:c5:65:cc:f0:9b:36:b9:2d:8b:ef:
                    8e:5d:0e:d0:19:a3:35:a7:fe:29:72:06:9a:64:a6:
                    86:63:e2:fd:e5:6d:49:f4:8f:6a:43:ad:e6:52:07:
                    c4:5f:8a:2e:ba:a5:af:81:a4:c8:5c:a3:0e:0e:d3:
                    5f:45:c2:83:46:89:89:0a:0d:da:e2:9e:c9:df:e3:
                    ec:25:ab:c9:48:56:2e:79:ef:31:f2:24:48:51:0c:
                    e9:13:de:58:b2:77:8f:fa:7d:32:dd:7d:a4:ef:60:
                    89:16:a9:19:44:f9:7c:ee:fd:08:be:e9:9a:57:52:
                    17:74:ef:73:23:1a:a3:b9:ff:9f:8c:d8:7c:73:f6:
                    5d:8d:b4:c3:b8:9c:ab:73:a0:b0:fa:0c:24:b8:ed:
                    33:e7:b4:4d:32:85:73:09:23:53:75:56:6e:9e:5f:
                    91:ea:2f:48:f6:9b:c6:c4:22:68:58:d1:31:4f:88:
                    90:87:1d:0c:15:86:9a:8d:52:f8:e2:74:30:b2:0c:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:6c:dc:70:79:34:8f:68:11:b4:17:b5:94:4a:c9:e8:19:
         c3:84:ec:a9:ab:63:37:da:ba:86:b2:86:f2:2c:4c:d0:bd:96:
         ad:94:5f:b5:3f:49:0c:40:1d:86:50:f3:07:6e:9f:85:b3:cd:
         46:41:65:b4:3c:f6:08:4a:c5:cf:25:b6:06:61:38:11:3c:25:
         7e:8c:34:47:8a:64:ad:58:52:41:89:69:26:4f:d5:2e:0d:e7:
         d0:58:9a:53:a5:80:89:9c:a0:81:8f:c4:f7:ad:d1:7c:00:c4:
         8e:d8:b9:ef:0f:e5:f6:83:d1:a5:5d:07:5d:5a:0f:e4:9d:d7:
         dc:b7:4f:97:9c:c6:90:0c:25:d7:cd:b6:7e:84:40:b5:77:1b:
         62:9d:f8:65:12:47:72:e8:d4:06:d2:49:17:40:ca:5f:09:a5:
         c3:3a:ce:8f:09:0c:6d:7b:af:57:3e:8f:c4:a4:42:bf:8f:9d:
         64:81:1a:16:f0:a5:28:62:be:91:77:80:85:a9:6f:41:f2:15:
         82:72:f1:59:f3:70:02:5c:12:36:e0:68:18:15:ab:5e:47:43:
         3a:2e:22:35:60:cc:47:99:dc:76:e9:3e:cb:0e:9e:2a:70:2d:
         97:a1:12:9b:03:2e:86:e2:15:3d:7c:a7:ab:39:be:86:19:40:
         1f:e0:95:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:02:41 2026 by rpki-client