Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
File:                     U5vfL-GP84f9A4QsUIGhRe7rHPc.mft (raw, json)
Hash identifier:          ydvJZIi5Ji1fiJfZWnhGTDeuUVJKJquOdc/dqN0YBYw=
Subject key identifier:   23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
Manifest number:          0C0D
Signing time:             Thu 26 Mar 2026 05:03:35 +0000
Manifest this update:     Thu 26 Mar 2026 05:03:35 +0000
Manifest next update:     Fri 10 Apr 2026 05:03:35 +0000
Files and hashes:         1: 0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa (hash: brxXRnxehaTeJPUvvAv2aJPjGavcr32h8KRoz9Bm7Gw=)
                          2: 25n0k1GgZh2ksd47dcWAD9oCe3I.roa (hash: S/TZPxJ+L9ZqihZWiA88yicTJh2PCbxBitBAPBC1HDo=)
                          3: 4xxexCfn1Ig97FaSHhhuGoBQobs.roa (hash: C/cCSHbpsS911VRFq6M/lo1MeMeK6i3erqKEhBRFfew=)
                          4: 9SDBBu7dJRVHkMbct_RYsMuJOPw.roa (hash: ka7qAiKZpcHEflgg9CKwwESmSFjL4Ac1Ce7/F1rUGnM=)
                          5: BoEAeyRkcZS_QFStonRbyOsKqIY.roa (hash: HVh+hGl1fpkAWkSLA3yxCdikcc1cEJeXrKJCPMwE21Y=)
                          6: U5vfL-GP84f9A4QsUIGhRe7rHPc.crl (hash: noiP18meP4BcBwMsPS2ZuGjsmvu73TMrV0APwZKxYkw=)
                          7: Y3rUQEevYw_edDBgVpD-bjNVHF4.roa (hash: zV7J/nP2DCikY9zTp0upJvJK9SIVxMCBvvS9CEPrg8U=)
                          8: ab18vAWCCiRQ0bei0-s0GDomD_I.roa (hash: UhpA28rPMETDzIUktf97td9keRGqG7FXmLLuw7baDN8=)
                          9: apOFNH78vG0gTf900P5kAmHoNsk.roa (hash: dBqz9Fcc/gKitPEJCAcIIwof0yyBuO9DZ0/RSe/IhKY=)
                          10: hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa (hash: Y9ECUrETmTg7gcgYSfQn7KuDPoVmdxNRsPZR5PqcwTE=)
                          11: pSkGf5BEtL5V4Zc_sxR_VGsx7yI.roa (hash: WKdnDBbjK5F/bCNADBD533qf+yFHSEXW+/DjO6cl6qQ=)
                          12: rLBquink9VsRT-uwa7QWwjPvPls.roa (hash: plzJf/NOqQwLejq3UcQGiy72dV58pWHI/vyDhiAWDSw=)
                          13: u8Es1L1Qe3MCtDUpGSxSq5PjAEw.roa (hash: 22pWaa0D+vQjqZPAYHk+noJy9/zeBdhmPZHD2YqmvCI=)
                          14: z4hzQp2TWWjkLDbdgpW07hfU5bM.roa (hash: kLX/wF6QM+YLFZDpFMn8J1n5NJEhuMSpTF6LqwFMUTw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 04:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Mar 15 01:40:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2306FD64C5010CE033EC76139542E8EF87B26AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:9c:9b:7b:d4:00:2b:07:28:3d:78:8f:d4:
                    90:eb:4c:7e:a9:9d:48:33:6e:3f:73:8a:30:d8:eb:
                    45:23:88:af:47:9e:a1:fa:c8:03:74:ea:ac:bb:8c:
                    59:bc:9c:aa:b7:fb:65:d6:f4:81:ca:05:45:75:2b:
                    92:66:ba:4e:7d:61:a3:68:11:96:07:cb:38:9a:88:
                    8f:9b:d5:c6:90:78:a6:54:71:ad:9e:a2:70:3c:eb:
                    c7:a6:f9:41:a5:4c:98:44:1c:19:40:85:cd:8f:7d:
                    a9:74:8c:1e:c0:04:27:3f:f2:45:0c:d8:60:82:0f:
                    4f:f3:96:28:b8:ac:f6:dd:8e:7a:5e:bc:30:0c:12:
                    b1:b9:5c:2e:95:a9:68:ef:05:2c:17:92:8b:9f:9c:
                    98:80:b6:a6:f6:2b:26:a0:58:b4:da:c0:a8:9f:a0:
                    c3:6d:f2:07:6e:0d:1b:24:52:32:46:73:86:df:91:
                    25:0c:d1:b9:f0:8a:db:95:25:49:28:ee:f0:f3:1a:
                    4d:d1:29:1b:95:d0:7b:45:9c:b4:81:3a:99:d6:7b:
                    47:51:a1:2f:51:16:5f:2e:54:e0:97:f1:74:79:cb:
                    7e:d1:12:26:5b:01:2b:3b:d5:76:9c:5c:46:09:94:
                    88:7b:c7:1f:74:72:f8:6d:4e:31:56:e8:a7:5c:a7:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:66:38:ed:80:ea:8b:7c:32:6c:c0:77:17:24:86:6f:65:d9:
         19:a4:19:ee:6d:9e:e7:17:07:90:86:7f:03:6c:30:6f:0d:fc:
         d8:cf:aa:d0:ee:da:df:15:6f:f9:81:cc:03:69:62:69:11:9a:
         e4:1c:26:20:aa:20:24:8b:55:63:70:5a:8f:7f:79:5d:a2:53:
         0d:00:29:58:95:de:35:06:49:4f:13:57:5c:e2:9f:a9:8d:39:
         b1:a0:0c:9b:10:53:7a:04:0b:ad:81:23:49:e4:69:ba:d6:76:
         39:64:4a:f3:21:89:e3:45:b9:36:e1:b6:38:bc:24:81:b7:12:
         ce:0a:bb:d4:e7:8d:5f:7a:65:95:56:a8:cd:c5:2a:12:50:d4:
         7d:89:df:8f:31:8d:c5:4d:9f:1f:94:b6:16:7b:db:88:22:91:
         5a:b2:d5:47:7a:fe:b3:96:33:2e:91:29:9d:fd:ce:ca:b6:74:
         e2:75:d2:48:68:bb:bf:ef:47:80:0a:c5:8a:27:6b:75:ff:cb:
         e0:d0:85:00:11:27:aa:85:77:e7:65:21:7d:8a:4e:a9:fd:31:
         5b:7f:92:35:77:2e:7c:fc:08:66:cf:cf:95:aa:4f:41:eb:71:
         67:a4:f6:b7:88:c6:0a:4c:cf:fa:2b:b7:fc:b8:64:16:a5:c2:
         d6:cb:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:20:41 2026 by rpki-client