Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft
File:                     kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft (raw, json)
Hash identifier:          5xleIDCijKKiWWJge6of28MITgEjNKxFRqypT8IEOqg=
Subject key identifier:   63:FD:40:29:2C:28:79:78:BB:95:72:2D:EB:32:E8:08:FE:92:5F:8B
Authority key identifier: 90:05:EF:0B:3D:BE:FD:95:6A:31:66:34:67:95:CD:B5:3D:5D:9B:62
Certificate issuer:       /CN=9005EF0B3DBEFD956A3166346795CDB53D5D9B62
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft
Manifest number:          0C2A
Signing time:             Tue 07 Apr 2026 14:19:30 +0000
Manifest this update:     Tue 07 Apr 2026 14:19:30 +0000
Manifest next update:     Wed 22 Apr 2026 14:19:30 +0000
Files and hashes:         1: kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.crl (hash: soNs81cMtGg29NG296gi22b/puq7pv/uHUlTAwTq6Zc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9005EF0B3DBEFD956A3166346795CDB53D5D9B62
        Validity
            Not Before: Mar 31 08:40:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=63FD40292C287978BB95722DEB32E808FE925F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:97:6f:2c:a4:fb:a9:ff:68:90:6e:c2:1a:
                    93:7f:9d:f5:11:f1:07:3b:2b:4c:ff:5f:06:67:7f:
                    ef:16:a1:58:49:60:5d:10:88:57:03:94:b9:bc:ff:
                    6a:54:1a:dc:e4:f8:c8:33:ee:4e:2f:f1:96:af:40:
                    a8:7e:ab:06:18:0e:75:37:7a:1c:af:93:4a:99:48:
                    b2:4c:93:2e:33:a6:1c:df:cd:0d:d9:85:5c:36:b7:
                    28:16:b5:4f:6e:9e:45:2b:8c:e1:76:0a:8c:59:93:
                    32:ca:95:f9:7b:b7:25:79:eb:b1:5b:91:37:f3:a2:
                    d9:c1:20:50:ee:51:2f:c0:e8:c3:05:56:a2:08:49:
                    31:fe:df:f7:a1:70:a3:26:9e:cd:b6:6b:eb:30:ea:
                    42:04:46:58:83:39:ae:2c:42:a4:fd:ab:f0:9a:76:
                    a4:1d:76:30:4b:a0:2b:0c:a0:e3:ba:17:98:ab:6d:
                    81:f1:ce:5f:4f:09:1e:e2:fb:07:da:38:36:61:2f:
                    a0:27:aa:5a:21:ff:b4:dc:bf:81:c5:6d:7a:37:9f:
                    83:f4:c9:5d:4c:a0:37:b0:74:78:97:e9:c1:0b:51:
                    db:c2:97:4c:8f:a4:ad:74:fc:d7:3f:91:34:b3:88:
                    0b:cc:c1:91:21:b8:68:54:11:7f:18:80:cc:66:44:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FD:40:29:2C:28:79:78:BB:95:72:2D:EB:32:E8:08:FE:92:5F:8B
            X509v3 Authority Key Identifier:
                keyid:90:05:EF:0B:3D:BE:FD:95:6A:31:66:34:67:95:CD:B5:3D:5D:9B:62

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20125/kAXvCz2-_ZVqMWY0Z5XNtT1dm2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:7b:cb:fd:50:19:4b:1a:4a:60:e7:68:3f:bd:32:1e:13:
         7d:87:75:ce:bf:cc:54:64:62:27:2b:d1:2f:52:8d:92:fc:1a:
         ca:16:12:8e:c1:73:aa:d3:bd:7e:9b:a0:07:dd:51:58:a3:56:
         43:d3:40:6f:6a:93:ae:04:5d:b3:4a:5a:22:d8:e0:3a:34:73:
         39:52:61:54:d8:6c:8d:52:91:be:26:f7:51:96:63:b9:05:61:
         91:e3:7f:19:3e:0b:3f:f0:65:a6:33:a4:8f:b8:0b:6e:f5:cb:
         06:90:25:bf:d1:71:b4:37:80:8f:2d:8f:9e:9e:5c:34:5d:07:
         1e:1c:39:5a:1a:31:f9:b3:c5:45:bb:6a:dd:3a:1f:9f:79:d0:
         d7:72:e9:7f:80:e5:52:97:09:86:2b:e7:af:81:70:f3:d9:76:
         d2:ae:29:7e:08:87:3e:f8:ec:9e:36:9f:88:06:67:0a:95:8c:
         bb:01:2b:9d:77:d4:db:c2:a3:86:be:29:17:53:3e:db:ea:5a:
         de:0a:3e:44:c0:35:44:a6:6f:ca:16:b9:2c:66:cd:00:80:16:
         dd:59:39:a2:58:0f:3b:71:87:de:c9:ff:94:c6:73:67:04:00:
         fb:d4:e5:d4:f0:d3:72:8b:85:97:43:0a:05:ba:df:89:bd:54:
         1b:f0:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:13:06 2026 by rpki-client