Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
File:                     37zT-LypGRXEUzosCmnD01suaI0.mft (raw, json)
Hash identifier:          MpHFbUBZWrskIEOwDtPM+9Z4JG6WwXqPXqCKcWaNbr4=
Subject key identifier:   7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       5F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
Manifest number:          0EE7
Signing time:             Wed 22 Jul 2026 03:54:57 +0000
Manifest this update:     Wed 22 Jul 2026 03:54:57 +0000
Manifest next update:     Fri 21 Aug 2026 03:54:57 +0000
Files and hashes:         1: 2voAA-2sbnChvr7TT5XgiJtLaIs.roa (hash: SjezSNNuKTPF+GSf0a5yLJvWpfSafWaTjiw8YFIoIyg=)
                          2: 37zT-LypGRXEUzosCmnD01suaI0.crl (hash: XDHWb2z3tbNrVXCQpBqiUjQZpqZVVscza2tjna+FgLs=)
                          3: 3NCXj76yzS56t0ZVlcqjyIwi15A.roa (hash: Yrknuod8WFyGF7f5oaUj3mVLnpdJZwdFL131hVx1lQA=)
                          4: AIkt-_44zcozIlDjcG63tDF64zs.roa (hash: ArSXKb9yZ4oEEZXVBU9Lyj7aLJJqHvdjpOkvA5u50d0=)
                          5: BC_9E0BYCRCFfZQJHoj4toaRnV0.roa (hash: 2Kt1MBrD+4k/oQalNtF0aoiX/7Hrmpo8m+kqcWoZM2w=)
                          6: C3uPIHRI7WFvAQh_u8FOWHArHIU.roa (hash: DMjK/B4RLVF3eXCVSfezQe8M/gWkoZVAMnHPLsKKiJc=)
                          7: FsjWFoocuU26_WNJcvkA3RRoYNo.roa (hash: Tz0hzaGasyExWIx0D+kekx2dLrH/e1xnkpJzNLkCckA=)
                          8: Gj_3GK479XHWo2Wpsh6RYGBDv-A.roa (hash: RaG5LkTEc6TU25XxgOsRSoHtmeWmLLV8yxHbqlUsymI=)
                          9: QOJbJkmTOf-a6Qexfl6dZsOvNyY.roa (hash: 2VLW8aidESsaAmjv2pMSbdwb9fplkbNfZSJOXtuPGdQ=)
                          10: VSqRKmzGExDVCPG9UrTSq8lc7Cw.roa (hash: O7AHYKeWrAClpQeorBPcVPAiIsGMmKULSCMQHaLLxo4=)
                          11: g_z8Gc3w59VO82D20bAA2gd7jaI.roa (hash: MzqjIq38qETTrl5e4JeSdwY7LW8JPOdIXzfON8m31Bg=)
                          12: hB2-RwcBJycpb4-pIgxofsIazqg.roa (hash: srUc2vdsQ3xLfiCqJPRSzrzrW+qT9nZMDrqoDmWJNqA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 03:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Jul 15 01:36:07 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=7BE2E21D1CEE6637B7532027D10736DC92958DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:d8:f6:56:01:c7:a9:1a:57:d7:a4:c8:f1:
                    d8:d4:ee:ab:ce:4d:48:cb:e6:16:f1:7b:c2:8d:ac:
                    1d:2c:3c:53:f8:d4:12:ef:78:8f:f8:6f:a9:51:5e:
                    f7:39:58:46:3d:5f:f5:c0:2d:69:f7:04:30:1a:86:
                    d2:09:60:89:16:8c:15:6c:48:47:6a:96:18:70:02:
                    e5:9d:07:17:ee:40:fe:1d:38:fb:b9:7c:a4:60:7c:
                    90:61:a8:b8:4c:af:b2:b8:9d:05:1d:11:51:a0:de:
                    9f:fa:d7:5a:1a:30:b5:01:a1:37:0e:cc:bf:21:76:
                    0f:e4:7e:18:02:4d:04:ec:f1:e6:a4:70:e4:ae:da:
                    92:56:bc:c8:2c:da:de:1d:cf:91:f3:06:9d:03:dc:
                    a6:7e:6e:da:c2:7c:90:a8:51:ac:a4:64:83:24:ee:
                    5f:57:bf:c7:87:eb:75:8c:d1:92:39:f1:0a:0a:f4:
                    6d:e1:82:e4:83:06:fb:a1:6c:43:e7:cf:46:10:f0:
                    02:96:dc:99:14:3e:f5:23:43:92:5f:46:80:ac:19:
                    6e:88:1f:61:ea:c6:68:c4:af:1f:e7:98:b4:49:10:
                    93:7d:19:fe:4a:f3:f4:16:51:a1:31:f9:55:3f:e4:
                    c7:ad:04:09:8b:02:c5:c4:39:54:21:af:10:15:90:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:09:2e:05:53:0b:6c:b3:52:2d:e4:b3:33:7d:64:2f:d6:ed:
         b1:42:58:64:bc:2a:bc:9d:fc:ec:56:c4:99:89:ea:07:8a:9d:
         c0:cc:28:d1:6f:0c:8d:06:50:b1:19:04:e8:40:8c:50:00:64:
         26:77:bc:80:13:a3:ac:e3:e8:8f:74:20:68:01:db:71:a7:c5:
         87:f6:22:9c:62:f6:8c:c6:f6:51:4f:60:43:46:b4:9a:17:7b:
         f3:27:34:75:54:6f:c7:03:0a:96:4f:27:df:b2:34:99:b5:3f:
         ac:3b:36:c8:b8:aa:4f:b3:c5:ba:47:cc:85:fc:37:c5:56:3b:
         48:14:df:3d:58:de:07:19:61:36:e4:23:fb:3e:7b:4e:fd:e7:
         8e:b9:2c:43:b9:1a:8f:f7:ba:42:44:5e:ac:70:b3:06:82:5d:
         ee:85:62:31:06:a3:c0:ff:91:ca:89:1a:02:35:41:fb:c7:b6:
         18:f7:2d:42:fe:73:3c:87:26:b7:1b:db:35:4d:67:39:f5:71:
         8d:48:4e:89:c7:4f:dd:12:3c:9f:72:aa:26:2a:d6:b3:2a:d8:
         73:a0:a4:a1:94:b8:3c:1d:d3:84:7a:97:f7:06:47:b4:32:5c:
         73:97:26:a5:87:77:fe:88:f4:30:16:9b:c4:d2:eb:2b:9c:77:
         49:20:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 05:07:44 2026 by rpki-client