Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
File:                     piJKoaybMP-6N30uvrl5ocN-0gI.mft (raw, json)
Hash identifier:          c7tWI+rCT34q7w80V/LZ67UtWh6E0UL7/Bfa3xxyIlc=
Subject key identifier:   6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
Manifest number:          08FC
Signing time:             Tue 07 Apr 2026 14:17:33 +0000
Manifest this update:     Tue 07 Apr 2026 14:17:33 +0000
Manifest next update:     Wed 22 Apr 2026 14:17:33 +0000
Files and hashes:         1: RonudiWL46NyB-h58DM-Q8Q93l0.roa (hash: Fh6Z2fhIcNsQOylgYPChHxMErP4h04TV9n9xOI4wGOg=)
                          2: piJKoaybMP-6N30uvrl5ocN-0gI.crl (hash: FLtPhUBxoAvRzbPdnekuFMTpgBiWvJRwA1JoB16r+7Y=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Mar 31 08:45:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6AD98EBBEF0D0366E1134D5010C37168DBA0EC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:11:91:b3:d8:d1:dc:2e:fc:1c:58:ae:12:
                    01:58:b6:17:88:68:3b:1f:29:42:12:66:9f:cf:ff:
                    21:44:9a:84:bf:89:6b:62:6b:ed:f3:4c:d2:93:79:
                    fc:2b:12:73:9e:d1:b2:23:ec:87:bb:b5:27:7b:d7:
                    79:de:f8:51:f3:e5:3a:f3:e1:56:07:5e:9f:35:c7:
                    88:64:95:96:fe:a9:3f:05:13:6b:a4:5e:54:d6:53:
                    49:5c:30:94:a9:3c:fe:eb:a2:d8:d4:34:6a:7a:fc:
                    54:6b:68:c4:65:bc:9d:b6:af:1d:71:b0:76:36:98:
                    42:f0:00:d9:34:75:33:b0:e2:3c:ad:55:ec:eb:5e:
                    3f:d0:ca:a5:76:76:19:8a:bd:4b:53:b1:3b:c2:47:
                    a5:cc:01:75:e2:fe:71:10:72:36:b3:51:58:78:69:
                    54:0a:b0:0d:cf:46:f3:65:a7:3d:93:51:40:7e:23:
                    e8:15:59:fa:5c:07:cd:d2:ce:03:e7:76:35:01:1f:
                    f2:95:75:ac:02:14:af:86:f9:d8:76:f2:10:2b:59:
                    17:6e:71:8a:b1:cb:25:94:df:54:b1:64:85:67:38:
                    eb:3a:b2:4f:c1:a4:17:16:73:4b:f2:dc:a6:d2:24:
                    fe:ec:a7:5e:2a:b5:f1:24:41:96:21:03:3b:83:6a:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:61:97:f9:0a:4e:20:eb:31:d5:13:cd:61:17:31:95:53:
         9a:72:d9:fe:57:52:ec:6e:06:98:05:de:70:ff:1d:81:24:8d:
         2d:21:4c:7a:74:cf:d7:2e:61:0d:86:70:e6:7e:21:9f:8d:fc:
         21:67:0e:82:cb:cf:09:47:55:4b:c6:73:f7:99:7d:84:55:e7:
         71:d1:92:dd:dd:e7:20:e4:6f:0a:69:71:4e:02:d6:78:c0:c2:
         58:48:53:5a:ec:c2:d8:93:bd:56:c1:a0:9b:6b:cc:3b:d1:1a:
         da:dc:7e:3c:c1:31:ec:c9:a2:7a:bd:db:fa:c0:13:c3:99:63:
         fc:3b:9b:1e:c3:7e:37:04:32:04:78:67:9b:77:f3:6c:a4:72:
         db:8a:00:4a:9f:80:0f:61:9c:14:40:f6:9b:8b:04:80:b4:bd:
         33:15:23:c8:34:2f:06:a1:de:ca:d8:2d:d1:9b:a3:77:94:fc:
         be:ca:89:e5:7b:64:bf:39:29:92:48:a5:a1:95:73:38:37:72:
         7d:71:a0:4a:f5:ba:72:ec:ab:c4:8f:07:de:11:33:ea:fa:08:
         02:46:6c:75:22:f6:79:a3:4e:b7:80:8c:02:f0:e0:c2:a5:9f:
         f6:23:4b:a2:37:84:b6:44:b4:80:94:41:d8:70:2c:81:68:89:
         6d:69:f1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:13 2026 by rpki-client