Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
File:                     7k9xfADvQMIOGJGldGWWK9sj3ps.mft (raw, json)
Hash identifier:          gzywMobDCm1NsP15tnAp8juDuoK56giq3w8veKwU46w=
Subject key identifier:   9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
Authority key identifier: EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B
Certificate issuer:       /CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
Certificate serial:       11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
Manifest number:          07A7
Signing time:             Tue 07 Apr 2026 14:17:43 +0000
Manifest this update:     Tue 07 Apr 2026 14:17:43 +0000
Manifest next update:     Wed 22 Apr 2026 14:17:43 +0000
Files and hashes:         1: 7k9xfADvQMIOGJGldGWWK9sj3ps.crl (hash: 7BkJOWTgVURnvGALencJriDA/AkGP41cOK1PH9qpPL8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
        Validity
            Not Before: Mar 31 08:46:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9A2791DC454A5B0DF7FA90175562263C323B8C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:a4:71:2d:1f:ce:a0:d6:54:25:4f:2e:dc:
                    c3:2d:73:fe:81:ff:c9:26:80:76:fc:f9:49:9b:34:
                    f1:3a:a9:16:91:96:b7:be:9b:1a:7f:41:c9:9d:25:
                    7d:39:9f:c0:90:12:9f:ac:16:74:3f:e7:05:c7:94:
                    de:82:a8:d6:b8:37:c3:89:6a:51:05:15:26:e2:2e:
                    74:34:4f:da:cb:5a:dd:5e:a2:57:0f:2f:4d:1e:d1:
                    a0:d5:c0:4a:fd:e6:6a:e8:fb:de:88:12:dc:7f:39:
                    0e:85:96:59:40:52:5c:09:89:6e:41:b7:86:20:62:
                    19:a3:71:22:8a:59:55:4e:07:9d:41:6b:64:5a:61:
                    67:03:6b:64:1b:e3:54:a8:b2:6c:08:ae:79:7c:09:
                    df:6c:8b:9a:9f:44:ce:d5:05:cc:ec:ca:bb:e9:7c:
                    7b:d2:31:3c:a5:0a:8a:01:19:de:86:26:e1:e0:be:
                    01:e0:ca:42:b7:f3:d6:c7:a7:b8:a9:b8:49:f6:db:
                    82:29:74:c8:8e:58:a9:8b:ed:fb:62:9d:d4:08:c7:
                    1e:24:2b:94:e9:55:55:73:a6:9d:9b:a1:8d:ae:d3:
                    ec:d6:b9:cc:d7:72:17:8b:b9:9d:4f:b2:2b:b6:a6:
                    c3:fc:47:e1:8f:27:71:09:ab:6d:c9:20:bb:c6:e8:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
            X509v3 Authority Key Identifier:
                keyid:EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:68:d3:33:8b:da:ba:3f:30:d2:6c:68:39:5a:8f:ff:af:
         b7:ac:0d:4d:82:f0:97:7f:7e:d4:db:6d:03:9c:1f:f6:3e:22:
         96:10:99:1f:97:f5:50:a1:86:e4:44:a4:d1:e5:94:67:f7:57:
         e0:53:ee:4e:13:21:d3:f3:4e:24:77:8e:d0:74:2c:54:40:d8:
         af:0d:9a:77:14:d4:24:cb:44:83:ff:43:93:d6:42:c7:24:74:
         c8:02:18:47:86:35:b3:1c:ca:7d:bf:1f:32:be:c5:38:74:4b:
         90:eb:28:be:e8:43:66:59:a0:90:92:dc:9f:f2:00:c2:00:c7:
         87:9d:36:dd:fd:4c:c6:96:24:e5:f5:64:71:2d:2e:0a:ad:8f:
         6f:a4:b9:64:4d:d2:74:18:96:c8:48:9e:45:63:68:99:7a:ad:
         96:b7:84:a1:ab:f2:d7:79:2f:43:31:a0:cf:a2:45:27:c3:c5:
         47:ab:c4:75:f2:87:92:db:fc:49:80:94:f7:d8:60:1b:f6:49:
         70:f8:cc:90:c1:7e:76:3e:89:bd:dc:13:30:67:cb:57:16:b9:
         8b:d6:29:33:4c:61:c9:f4:6e:01:01:ab:33:dd:31:cb:8d:5c:
         fd:0e:2b:da:6f:96:8f:de:29:db:91:e4:4b:da:4d:07:dc:3f:
         58:1b:5a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:12 2026 by rpki-client