Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
File:                     dkKgfZrJ0ifqQveebRMcsakg7c4.mft (raw, json)
Hash identifier:          1vsrmQ+kvjNVW3KG/gPB49qCOQzT8wY7MEb8hGoQchQ=
Subject key identifier:   7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       66
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
Manifest number:          0C7C
Signing time:             Tue 07 Apr 2026 14:30:51 +0000
Manifest this update:     Tue 07 Apr 2026 14:30:51 +0000
Manifest next update:     Wed 22 Apr 2026 14:30:51 +0000
Files and hashes:         1: -6UBLo0rpAkrxesx0kYo0GnagHY.roa (hash: wVY0wban57BR9CvOgVZ3y5JI8BAJI7KGtIJAQmR3AQw=)
                          2: -XXp197mnKjeUpm4KVtQWRZbtX8.roa (hash: vrLq7s4RdVScrGVmcSGR2NCi3I9JD+epeFB5PUUu9u8=)
                          3: 4s8CklSotLjAbr8GqXXaAS8rRN0.roa (hash: hEdSTckRf8HAehD91n89Bn+G/+ByS8b6nlRUQH9iw/c=)
                          4: BfP0SzwfyJTHwrAi06z-F6dcqXA.roa (hash: jBekHAaV/POIFlNkMZihrD0/sRUF+mucc94WOM7QEqY=)
                          5: CNt500udyzUVvILQ1Lz0AJeJiRs.roa (hash: EnHFv8YoywX3vm9iS60iSVk//cdwzmTfGt3Ot3QPHuA=)
                          6: EyLfunBCtzVBSRG-D2eaGv9yXS0.roa (hash: QYFT45QFtIAdEku0HMQRsf/bwPTdcApcjHi/eopsriA=)
                          7: F70_f6ZBDfr5pHJyCnDgozZWHfw.roa (hash: 4QOY1ueMQuePcVTKn2jbwRGJxJIPJz8m8F+57KaAf8Y=)
                          8: S1uN57ZtpapAjQX7LwyXF2mQNiI.roa (hash: oA2pj5Jo74kR6fwz+lWlmeGLX2/n26+RjDu27FedcRo=)
                          9: XLQeoq5yL98yk34_u_lCJcAMRys.roa (hash: 5ynTAD3jLUYyNF6TFuizT3tUJ8vtgQ7yLqcX2jeAXnE=)
                          10: aN4CfmQ4jYsqB6XML8kIPW6hr9Q.roa (hash: O+DpT8x8E87lbcDyvoY0ran/OSB4EyfLdYfKqiSow9M=)
                          11: bK4GdTXG5skR1zVcaDrlDKsNNQw.roa (hash: tz4A0ZDPVL+McqAUFe0bg8V4irUAU/6+YQiuYz3hAg8=)
                          12: dkKgfZrJ0ifqQveebRMcsakg7c4.crl (hash: pvlEjNq5JhbVSzl8cn6IduTyPMIhccPni2ID9HABCbo=)
                          13: oS7rqjWjpfgGo3Hdu9f_2-8r8LE.roa (hash: Vk1/vlkCmXdl4FkJHDFvxV8goLQOETmiKxtAL/+kY1Q=)
                          14: snc0kUGNOtUOfuegObLCGHqxRwc.roa (hash: J34zP1T53503zwNrfW0BmqDvYPk2KF4RIDlnTldIfqc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Mar 31 08:29:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7BC313071AC5BD3648402A224AB2CE090A43B020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:70:28:2c:62:28:d9:7e:49:7d:82:25:65:
                    6f:2e:ed:ba:cc:77:8f:a8:f1:62:a0:1a:d5:19:36:
                    0d:6b:d2:2d:8c:4f:35:7c:3f:32:bf:0a:15:bd:77:
                    8e:d2:9e:2d:17:6d:4d:80:b8:4f:57:33:6e:8e:45:
                    a8:92:f7:af:ca:8e:20:4e:c6:90:51:13:d4:07:05:
                    44:43:74:bd:5a:c9:a0:51:20:3d:77:33:dc:32:55:
                    bc:85:10:03:4e:0f:57:54:74:44:23:d6:27:86:8c:
                    e0:c0:9c:81:9d:b5:a8:56:2c:30:07:96:5a:81:86:
                    9f:d3:84:ee:1d:1f:c7:23:d9:a4:f2:09:f9:e9:f5:
                    1a:77:dd:a1:c0:f2:40:65:87:62:99:7d:87:6b:08:
                    53:b6:95:6b:c8:e7:59:e3:32:1e:62:90:aa:41:a6:
                    30:79:56:fe:43:da:33:ec:c3:e5:c2:84:5d:4f:fe:
                    05:5d:58:fa:db:1a:7a:d0:33:8b:7e:cc:f4:10:66:
                    1a:35:6a:d3:f6:d7:35:b1:68:df:cc:af:ac:26:87:
                    10:e2:c8:c2:f9:1e:84:eb:f0:a7:4f:37:a8:7e:5d:
                    15:38:cd:bd:93:c1:82:55:56:ab:94:11:5f:2c:92:
                    5c:d4:d7:00:15:0b:86:02:54:76:91:05:0a:a7:01:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:94:c2:ee:28:39:c7:10:32:63:ab:1a:47:58:13:43:b1:0c:
         b4:26:d5:4c:7c:13:dd:e3:bc:81:2a:dc:4c:3d:80:20:36:b3:
         2d:cb:c0:8c:9b:ed:f7:48:e9:03:05:ff:22:95:d2:5c:aa:2c:
         0c:c3:01:40:59:0b:4c:b5:58:91:58:fa:65:3b:c5:68:74:fd:
         72:2e:a6:f6:ed:d1:b8:b0:da:4b:b0:a4:a1:43:54:ed:92:53:
         bc:d0:d6:56:f4:5c:49:6b:15:30:47:61:91:9a:79:b0:6c:6b:
         55:15:28:e8:ca:7a:9b:68:19:91:e9:68:8f:62:ae:a5:d0:0a:
         98:0a:db:2e:96:bc:3d:ce:9f:4e:03:11:ef:d6:36:8c:73:10:
         09:44:59:41:a2:95:da:70:6b:b3:ee:61:c3:2f:7d:7c:cc:1e:
         18:22:24:43:0d:18:ab:34:24:61:3e:d2:fc:f4:16:9a:5e:d7:
         1c:5e:f8:69:fe:6f:b0:a2:c6:1b:bd:db:a9:4b:41:b7:5f:1c:
         73:52:80:28:72:1e:8d:6d:37:49:b5:0a:d3:ec:b4:d8:b2:7a:
         f6:b7:3c:20:72:0c:40:b4:0c:a3:49:1e:c3:55:ca:5e:ea:b9:
         9c:87:40:f6:11:ea:fe:61:ca:ef:45:9d:55:e6:f8:b8:33:63:
         6d:39:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:20 2026 by rpki-client