Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
File:                     xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json)
Hash identifier:          c2u9QcfpGZlC+cqt7PD4Xx4wn38ggUT/QTIiYkJyCkU=
Subject key identifier:   70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
Manifest number:          0CA4
Signing time:             Tue 07 Apr 2026 13:40:38 +0000
Manifest this update:     Tue 07 Apr 2026 13:40:38 +0000
Manifest next update:     Wed 22 Apr 2026 13:40:38 +0000
Files and hashes:         1: nZYiGSL4CpoQ73LIz2CWszwcVWc.roa (hash: bB2dQxAai+xnEi/IU5mDLRiueT8CYeI7md5CLX7jeJw=)
                          2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: 5Kem16I2hFpTNwPQ/WiZBaQpWyKzm+iYDPEGEqGHYgQ=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Mar 31 08:15:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=70F776851E8F32323433068C6155794963FDEA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb:
                    7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf:
                    b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76:
                    06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01:
                    8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59:
                    8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72:
                    a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80:
                    96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be:
                    30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07:
                    c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6:
                    9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2:
                    9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24:
                    8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79:
                    4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb:
                    1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7:
                    38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5:
                    92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:a9:03:92:8e:a2:e4:61:d1:8c:24:fa:2c:1d:74:30:3d:
         42:fe:6e:f6:1a:2a:35:5b:e9:c7:e5:5f:56:9e:af:53:0f:21:
         54:23:92:c4:1b:c3:59:cb:86:e8:06:87:86:83:45:ac:80:fe:
         a1:51:6b:ff:65:84:5d:b4:ab:cb:d5:f6:9f:f4:bf:d2:2d:42:
         66:94:56:d0:be:c5:ac:f1:45:35:54:bc:98:d6:d0:07:fe:12:
         db:1b:05:be:e6:6b:73:16:94:6c:98:89:de:67:45:17:08:69:
         0e:d1:23:f8:45:3b:c7:fb:4a:0a:79:81:44:08:d7:66:f9:fb:
         3c:f1:60:ec:d7:cd:16:6b:97:92:aa:80:f4:41:e4:80:0f:98:
         45:c9:29:ea:c3:90:97:b7:dd:a4:12:d8:ed:9f:d5:02:9e:b8:
         ca:60:16:f9:3d:b0:bb:9a:91:33:62:72:12:ec:86:08:93:27:
         39:53:09:2e:a0:d7:09:4f:65:51:7f:a5:0b:34:64:4b:55:95:
         1c:91:c6:91:47:6f:f2:fa:0f:be:31:af:0e:c3:68:b8:10:85:
         5b:00:ec:50:d9:11:13:e8:27:e7:1f:1f:b4:b7:14:ea:04:1f:
         1e:30:0f:72:89:d4:a8:b3:56:77:b1:1c:10:64:0e:15:f7:82:
         aa:a2:8b:ab
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNUND
OTU5MjkxMDk3OTIzQTZGNDJEOEY2NTdCOTBCQTAzMkU1RjZGMB4XDTI2MDMzMTA4
MTUyNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzBGNzc2ODUxRThGMzIz
MjM0MzMwNjhDNjE1NTc5NDk2M0ZERUE3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfMmx3uu2nGO92crtTreuLrjXADWMZzdEUINii/t0te3iG3h+bj
/Hht8NB2BhtYbiK6iOPUs86cF6wBjmxcRbWgJj/WbdRCiLFZjYLDFGtiFhlHsqlO
5oRyoM6HnxORKEv7ppAc0rKAlmC+nRkfJ8HNNDQ949C+MJKqngzUlhAjDbqMVNEH
yOxgBkERO6s9hv75iXrGnNKvw2ArMm3v4IoqJiXSm1fq2Qjh7qaoxblGzMckjZFj
OuulffBNxkS4ho95S86Kf2HbfAVfLnx3K3zrG/PFJb2kql97NLZg6ae3OCQbMVEi
gIQ7lOdfsLPVkoDmiCq4+oQVZG5r4ySz+JMCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRw93aFHo8yMjQzBoxhVXlJY/3qcDAfBgNVHSMEGDAWgBTFzJWSkQl5I6b0LY9l
e5C6Ay5fbzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjAveGN5VmtwRUplU09tOUMyUFpYdVF1Z011WDI4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveGN5VmtwRUplU09tOUMyUFpYdVF1
Z011WDI4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMDYwL3hjeVZrcEVKZVNPbTlDMlBaWHVRdWdNdVgyOC5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBC/KkDko6i5GHRjCT6LB10MD1C
/m72Gio1W+nH5V9Wnq9TDyFUI5LEG8NZy4boBoeGg0WsgP6hUWv/ZYRdtKvL1faf
9L/SLUJmlFbQvsWs8UU1VLyY1tAH/hLbGwW+5mtzFpRsmIneZ0UXCGkO0SP4RTvH
+0oKeYFECNdm+fs88WDs180Wa5eSqoD0QeSAD5hFySnqw5CXt92kEtjtn9UCnrjK
YBb5PbC7mpEzYnIS7IYIkyc5UwkuoNcJT2VRf6ULNGRLVZUckcaRR2/y+g++Ma8O
w2i4EIVbAOxQ2RET6CfnHx+0txTqBB8eMA9yidSos1Z3sRwQZA4V94Kqoour
-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:14 2026 by rpki-client