Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
File:                     cRknFYbSjHciG34Ukuh1GxH0cYw.mft (raw, json)
Hash identifier:          Cs6Ij4P55nkaG40SFXRTygrfPq8rNknrzjUFgR8b/Xs=
Subject key identifier:   35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
Authority key identifier: 71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C
Certificate issuer:       /CN=7119271586D28C77221B7E1492E8751B11F4718C
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
Manifest number:          02B9
Signing time:             Tue 07 Apr 2026 14:20:10 +0000
Manifest this update:     Tue 07 Apr 2026 14:20:10 +0000
Manifest next update:     Wed 22 Apr 2026 14:20:10 +0000
Files and hashes:         1: ISfwIZdAM1dOPnbjyM1PGeTPeSg.roa (hash: x5O63edKZKMkkB881JvjRVJFZAPzMjTHvLKECIiAsNA=)
                          2: cRknFYbSjHciG34Ukuh1GxH0cYw.crl (hash: MA8fsO62O5VrbszUs82GDrfYQmwjChhmXT79mCpV8xk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7119271586D28C77221B7E1492E8751B11F4718C
        Validity
            Not Before: Mar 31 08:48:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=358AC196AF95610D3A69086826507C24CB3FAD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:c5:2b:4d:c6:6c:bb:12:e0:bf:5a:1f:5f:
                    e5:30:7c:4f:ed:35:c6:e8:f4:86:82:54:ce:30:f3:
                    46:df:67:c3:0c:d8:bf:98:f3:2d:f6:0f:38:88:3d:
                    96:05:60:40:1d:12:7a:d4:8b:f4:cc:b5:a7:a3:d9:
                    40:76:7d:19:5e:4c:f7:5a:1c:02:13:cc:4a:db:4f:
                    82:d5:48:f3:a3:b3:20:78:12:99:8a:7c:0e:fd:a3:
                    e9:57:ed:3b:f7:09:e0:ce:14:97:19:58:9a:49:ce:
                    3b:64:4b:fe:49:44:9f:c0:e8:b7:75:d1:94:d2:68:
                    7b:a6:c7:53:b4:c9:75:f6:70:9d:29:f8:80:f4:22:
                    58:82:3a:87:9b:de:f5:87:4e:c0:26:93:33:b4:7d:
                    f5:b6:cf:0e:2e:32:2e:8a:bc:0a:00:88:13:1e:48:
                    76:97:61:b4:31:c5:b7:1b:b6:88:30:8d:d3:ae:07:
                    4e:19:53:28:07:74:0d:5e:26:e7:bd:92:a7:49:d2:
                    ab:3a:31:bf:a0:11:5d:e0:50:0f:c9:1c:d4:3e:35:
                    86:f2:e4:8b:07:4a:5c:b6:fe:bf:ac:46:d7:93:a0:
                    41:43:f6:17:d9:de:75:58:7e:52:62:13:0d:97:26:
                    5b:a6:65:d9:61:76:17:85:95:48:94:45:0a:06:5c:
                    66:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8A:C1:96:AF:95:61:0D:3A:69:08:68:26:50:7C:24:CB:3F:AD:61
            X509v3 Authority Key Identifier:
                keyid:71:19:27:15:86:D2:8C:77:22:1B:7E:14:92:E8:75:1B:11:F4:71:8C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cRknFYbSjHciG34Ukuh1GxH0cYw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30202/cRknFYbSjHciG34Ukuh1GxH0cYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:03:aa:e2:77:8c:3e:a7:cf:af:79:4e:f8:c6:bb:82:0a:69:
         be:80:08:6d:c6:ae:cf:5e:8f:43:9a:61:22:f0:46:c4:04:77:
         e8:ed:67:4f:a9:c4:ca:08:59:fa:04:b0:1e:0e:69:4b:3c:08:
         f2:87:2e:f8:aa:8d:e9:39:0d:c0:2f:5b:e3:24:b3:ae:c2:7c:
         3a:ca:e2:b9:ac:d6:54:a8:d5:8e:d2:fc:16:e8:24:37:60:e2:
         2b:68:3f:31:ba:3c:6c:32:00:e5:c1:5d:7e:03:83:92:f0:6f:
         d8:66:a9:8f:f4:8f:b2:a7:92:e8:8f:e5:4b:ca:c6:8f:f5:b3:
         82:ee:e4:18:9d:e2:bd:c9:7e:1b:e1:25:bb:21:c5:49:75:80:
         63:ba:58:38:5c:b1:8c:2d:2c:0c:66:f0:f8:a5:e4:03:13:a6:
         bb:56:09:c9:01:bd:36:30:fa:28:c1:00:05:12:72:91:f9:81:
         bb:db:af:f0:6b:11:62:1d:af:bd:d7:b0:78:38:2f:cd:85:3f:
         dd:84:dc:98:3a:cd:d8:fb:86:97:d3:af:e8:55:15:84:d5:f0:
         f9:01:9b:fb:f6:0a:9a:66:17:c2:57:e5:1c:0b:cb:c9:3f:21:
         b6:b4:dd:e7:5a:49:a0:81:db:fb:ae:72:00:21:76:d5:a9:31:
         55:64:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:57 2026 by rpki-client