Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
File:                     xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft (raw, json)
Hash identifier:          h8iyKlmzAXwbZ99Op07g4tUXvwyTF5gw8HRwBtWQ00M=
Subject key identifier:   18:C0:8A:2A:FD:F1:25:C8:2F:77:85:A6:24:21:EB:DE:E0:AF:E9:B6
Authority key identifier: C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1
Certificate issuer:       /CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
Certificate serial:       07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
Manifest number:          0118
Signing time:             Tue 07 Apr 2026 14:51:47 +0000
Manifest this update:     Tue 07 Apr 2026 14:51:47 +0000
Manifest next update:     Wed 22 Apr 2026 14:51:47 +0000
Files and hashes:         1: LlBoCIlYtkrYritkK-jznZtHbso.roa (hash: +Oeav81FGI+mXo9vHxxUtsXQ+WtZE4pVQMKklaeDRQw=)
                          2: Oto9ifCRx_bJgrWZqCTmy_JgCJE.roa (hash: U4WFY04rpQRTYh8NaMUyuaRjRV4Q2X1JTKkcdY4LYrI=)
                          3: xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl (hash: u7HIEVfZw9fVjcbJ2qt6MX7rAS3ZDid5c/xaQjHZkeE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C556EE5CED033BC6A1D1D2EFCCF98216208C7DD1
        Validity
            Not Before: Mar 31 08:48:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=18C08A2AFDF125C82F7785A62421EBDEE0AFE9B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:90:da:49:64:42:f1:c2:b6:de:37:8a:c7:
                    d3:f4:1a:16:16:55:4c:35:fb:d5:4e:8f:c3:56:73:
                    89:34:e4:56:e4:7f:4f:9f:ae:4a:f7:ec:24:af:50:
                    76:bc:a6:4d:8b:c3:c5:a8:bd:bb:6f:a8:fe:c8:b3:
                    6c:97:0a:e4:40:84:f8:b9:58:69:fc:ec:61:14:fb:
                    e2:85:45:59:b7:54:66:3a:c9:92:7e:a7:25:f5:c2:
                    24:5f:cb:0f:50:0a:b1:ea:11:88:6f:b5:f5:94:e7:
                    a7:04:2d:1b:5a:d0:cf:50:8e:7c:4a:cf:6d:00:a1:
                    49:67:3f:c0:36:32:40:c4:a5:c6:16:a5:27:43:a0:
                    49:c0:78:d0:04:a3:a1:d2:0f:c9:a6:ad:65:4d:1e:
                    f5:5b:62:1d:ee:ae:a6:87:46:f7:18:7b:91:a6:13:
                    05:5f:ae:10:12:e5:62:25:3a:f7:e9:6d:6a:4c:fa:
                    5c:87:c9:55:7c:22:e8:0f:da:d3:3f:e2:ec:23:d9:
                    f9:48:da:29:ae:8a:6a:33:95:a0:1a:ca:7e:81:ef:
                    b4:68:df:36:c1:c6:71:28:4a:88:cf:e8:44:fc:db:
                    9c:b5:2c:ba:ea:1b:e4:16:ac:de:b1:62:00:ed:10:
                    5e:a0:29:2a:06:b9:c6:ea:d8:b1:b8:9c:a0:6c:53:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C0:8A:2A:FD:F1:25:C8:2F:77:85:A6:24:21:EB:DE:E0:AF:E9:B6
            X509v3 Authority Key Identifier:
                keyid:C5:56:EE:5C:ED:03:3B:C6:A1:D1:D2:EF:CC:F9:82:16:20:8C:7D:D1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xVbuXO0DO8ah0dLvzPmCFiCMfdE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20010/xVbuXO0DO8ah0dLvzPmCFiCMfdE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:11:5b:62:8b:8c:6b:a5:22:55:80:aa:16:67:1a:f1:97:15:
         18:c5:89:bb:e1:53:3b:c4:0c:d6:71:00:06:a3:87:13:10:25:
         1e:0e:a3:1c:53:3e:27:cb:60:d5:50:63:46:36:0a:96:05:94:
         77:17:ad:37:1a:8b:ee:93:c8:ff:23:8c:ed:58:97:cd:05:b3:
         bf:21:c7:89:10:0b:ed:8f:b5:ba:4c:2d:d9:d2:71:9d:1d:94:
         79:44:7c:ef:1a:1e:6c:2c:3c:21:cf:94:23:81:4e:5b:c1:f8:
         9f:91:7b:44:89:36:55:48:97:0a:75:34:d7:b3:71:99:a7:21:
         65:1a:ea:a9:15:c3:d7:9d:4e:6a:4f:9c:cf:2f:44:e4:bd:86:
         90:d2:07:77:cc:08:b3:c3:ce:e4:97:4c:88:75:82:be:bb:1f:
         42:7f:a0:69:f0:55:3d:4a:1a:fe:87:4f:64:43:d3:ef:a4:59:
         82:37:b4:56:f2:29:c7:82:b8:21:8c:af:af:36:60:bf:f2:97:
         86:45:2c:a2:4e:90:20:82:d6:2f:c2:87:5c:06:54:ea:94:b8:
         21:4b:eb:af:f9:78:47:b7:b8:f4:a4:94:1c:04:8a:8c:44:3d:
         a7:71:4c:9c:4a:0c:2f:65:02:69:05:b4:e7:f6:67:28:98:be:
         97:85:e9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:12 2026 by rpki-client