Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
File:                     e5r2GKThvUClCRs5VuFc2ir2ydI.mft (raw, json)
Hash identifier:          FwgYCtWr6/eOBbeUmfJTDf2zdkSx/RILhy1VqxRK00Y=
Subject key identifier:   0A:0F:60:C8:6D:F1:BC:9B:1A:5F:17:F3:3A:49:0A:3B:80:5C:CE:08
Authority key identifier: 7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2
Certificate issuer:       /CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
Manifest number:          0411
Signing time:             Tue 07 Apr 2026 14:43:46 +0000
Manifest this update:     Tue 07 Apr 2026 14:43:46 +0000
Manifest next update:     Wed 22 Apr 2026 14:43:46 +0000
Files and hashes:         1: aOGFAhc_NQxeztX3uAFMUyJY15c.roa (hash: Sp9y/b8FUr7i9Xeg8Zd/rjQBMWK/BKGWR/93gX6uPMQ=)
                          2: e5r2GKThvUClCRs5VuFc2ir2ydI.crl (hash: aBPLsmNCwWOgTmTmrYaDqbJ+6TObUH2r8gi1ewR4C0Q=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 14:50:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B9AF618A4E1BD40A5091B3956E15CDA2AF6C9D2
        Validity
            Not Before: Mar 31 08:47:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0A0F60C86DF1BC9B1A5F17F33A490A3B805CCE08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:05:2b:27:ab:96:82:99:e0:40:ae:d0:bb:5d:
                    53:1e:d4:d5:87:ca:34:bb:d2:14:77:95:18:50:fd:
                    36:7d:54:89:2b:9b:7f:b3:21:be:70:f6:ce:ad:24:
                    75:1d:b9:53:b8:ae:19:89:ca:7e:ff:f7:4c:88:22:
                    26:ed:dd:28:45:80:cb:c8:75:0e:9e:5e:8b:b8:48:
                    ce:3b:7a:be:12:3a:aa:a7:a1:1c:69:0f:30:11:8e:
                    70:d9:91:21:c7:22:b1:68:db:d7:c3:ca:13:4f:9a:
                    9f:c5:18:c9:73:82:9f:da:c2:db:b4:83:ee:d6:3a:
                    f5:c7:21:77:de:04:6f:7c:09:c6:dd:b7:3e:d9:87:
                    cd:f5:04:14:de:73:3a:8e:39:1f:33:c6:bd:b1:39:
                    cf:e8:93:0d:f5:0b:d4:56:ae:d5:5b:73:93:6d:ac:
                    9f:1b:70:de:9d:45:8e:34:d7:ce:d3:4a:01:38:fc:
                    a9:8d:d1:16:3e:48:7b:2b:fe:f3:58:c3:31:ae:4b:
                    16:24:36:29:b2:e0:43:e3:74:20:7f:10:3f:44:49:
                    14:ab:e3:d3:7a:c9:5f:f6:17:a4:b5:3f:de:19:9e:
                    bb:75:32:98:d1:e5:e6:ba:2a:9b:c9:7a:ea:41:da:
                    e7:8a:88:27:6a:3b:db:bd:a1:1d:6f:98:39:ed:21:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0F:60:C8:6D:F1:BC:9B:1A:5F:17:F3:3A:49:0A:3B:80:5C:CE:08
            X509v3 Authority Key Identifier:
                keyid:7B:9A:F6:18:A4:E1:BD:40:A5:09:1B:39:56:E1:5C:DA:2A:F6:C9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e5r2GKThvUClCRs5VuFc2ir2ydI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30449/e5r2GKThvUClCRs5VuFc2ir2ydI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:ed:77:9d:85:d8:a7:62:d0:aa:b4:08:7b:b6:c8:3d:7c:90:
         a0:9f:ba:d0:9f:8d:b2:c2:e4:58:b0:2b:fa:04:d5:c5:62:3d:
         05:5f:09:b2:29:a9:4d:b3:59:0e:62:5c:a6:17:28:32:f3:ca:
         4c:30:a5:44:56:7f:2f:f3:ce:65:20:bc:4b:a0:7e:cb:cb:74:
         fd:d4:74:b7:50:f8:d1:36:b7:8c:0f:16:70:90:81:ce:2e:43:
         ec:26:97:01:8e:4a:0d:22:26:9d:ea:95:ab:cd:b7:6a:e9:a3:
         66:65:0e:0d:7b:34:27:07:0a:8b:db:ab:db:ac:7a:62:23:7f:
         45:2b:9d:6d:d1:c9:4e:49:1e:78:67:9c:56:ee:51:b0:65:f6:
         5f:07:7e:ff:68:04:0f:fb:1e:04:e9:fb:ee:b7:63:f5:1c:39:
         93:7d:d5:67:bd:6e:e6:56:8d:8a:01:43:a6:a7:dc:36:70:8f:
         5e:5e:6d:df:2f:60:70:70:be:05:f5:22:f9:69:97:41:2f:fd:
         96:64:ff:5a:2f:ae:d4:41:0a:c0:0a:64:16:6a:02:85:ae:1c:
         c2:a8:8f:a8:6c:24:84:43:ac:e2:46:15:d4:39:aa:64:d2:c9:
         16:3b:30:34:31:21:b0:88:a0:03:7d:b1:ac:97:69:b6:7b:94:
         87:49:e2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 18:11:01 2026 by rpki-client