Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
File:                     AHMEyMeENVImB-HPrx884aIh_30.mft (raw, json)
Hash identifier:          iTXGvotlzwl7jncDeoJfk/kERD97V3gWD//JEqCdS8Y=
Subject key identifier:   CE:16:36:1F:10:C6:3D:AA:19:8E:97:F1:CF:6C:15:9F:47:D5:45:DF
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
Manifest number:          0CA1
Signing time:             Tue 07 Apr 2026 14:34:23 +0000
Manifest this update:     Tue 07 Apr 2026 14:34:23 +0000
Manifest next update:     Wed 22 Apr 2026 14:34:23 +0000
Files and hashes:         1: AHMEyMeENVImB-HPrx884aIh_30.crl (hash: x4XQOG/WTooTGfYc2Keg5UGO8VcDnxxViSg/HQ4U3u0=)
                          2: esNUmC-Lra7JPuSqcyznqZDESMY.roa (hash: 7YfkBFzT6WQ48h/BiOltr7wUmlDoUa1uZG5wLpN1+zg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: Mar 31 08:15:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE16361F10C63DAA198E97F1CF6C159F47D545DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:b9:95:c1:ba:bc:8b:59:97:10:2e:6d:71:
                    7a:8f:e9:e6:9e:db:50:bb:58:03:99:ac:cd:39:a0:
                    27:7c:aa:af:70:eb:10:21:29:0e:d9:e2:e9:5b:f6:
                    51:ad:46:19:14:f5:98:60:ae:cb:61:aa:de:ee:b7:
                    db:6b:47:f8:0c:a8:1d:59:0d:0c:bb:62:24:1a:16:
                    40:31:0e:09:ae:88:55:5a:8f:ed:f4:97:bb:28:ac:
                    6a:d8:67:c9:33:38:c4:32:74:b5:99:b3:5a:d4:50:
                    71:e9:a3:07:bb:3b:b0:92:1a:92:16:a6:fd:46:be:
                    e2:15:b1:04:af:77:09:ef:ef:54:0d:ac:5c:e8:99:
                    1e:af:73:12:93:ce:1a:af:34:97:0c:d9:1b:58:73:
                    07:b9:c5:13:65:96:de:64:7d:74:3f:e1:c4:f0:02:
                    11:c2:ca:be:fb:af:12:6c:48:f1:40:6a:42:88:aa:
                    a3:fe:f7:cf:99:df:9e:b6:37:90:6b:9b:e6:2c:e4:
                    66:05:d3:4e:98:d3:25:59:66:ae:a1:26:f7:6f:2b:
                    3d:9a:2a:83:45:f3:09:3c:36:47:62:be:b4:35:05:
                    38:51:75:9e:76:ef:21:14:0f:8c:01:f1:b6:f7:c6:
                    6e:42:d3:01:07:62:c4:e3:14:e6:ff:2c:9e:f2:f0:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:36:1F:10:C6:3D:AA:19:8E:97:F1:CF:6C:15:9F:47:D5:45:DF
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:57:25:9f:09:de:be:ed:fa:96:8c:97:21:01:41:4e:1b:7a:
         0c:c5:57:1c:a6:7e:83:78:56:18:21:84:83:72:ca:1d:af:53:
         b6:96:f0:d5:b1:dd:59:6c:2c:c2:a1:d8:33:2b:30:8d:56:bd:
         af:b6:5e:6c:71:29:02:1c:e6:bf:d5:79:38:27:0a:13:89:bd:
         21:f2:21:fe:28:e6:2a:24:70:c6:dd:1a:c6:7d:1b:40:25:1f:
         44:b2:b5:8f:50:63:21:6b:e9:c7:39:c9:f6:93:a6:a1:b5:42:
         5c:41:7e:ba:17:88:a4:9c:50:f2:16:a2:e8:5b:10:79:dc:58:
         8e:2d:18:36:41:6c:20:90:7b:9d:36:69:99:91:f3:b8:9b:52:
         d4:49:da:dd:24:38:51:ea:31:8a:64:6c:f1:bc:76:4d:16:79:
         68:02:61:0d:f4:73:d4:1a:89:d3:37:db:69:f6:a2:ee:4e:ea:
         e2:20:31:3f:e7:8d:66:5e:eb:57:9c:c6:fc:fb:07:48:c0:75:
         f6:a8:88:10:0e:29:57:10:d0:23:ff:aa:02:0c:60:f0:1f:55:
         4b:52:bb:59:e2:5f:79:0d:0c:8d:02:46:4a:1d:b1:bf:1a:2c:
         29:8b:73:b9:6c:d3:f4:c0:87:a5:4d:bc:72:0b:94:c9:13:32:
         1f:43:97:e0
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcz
MDRDOEM3ODQzNTUyMjYwN0UxQ0ZBRjFGM0NFMUEyMjFGRjdEMB4XDTI2MDMzMTA4
MTU1OFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQ0UxNjM2MUYxMEM2M0RB
QTE5OEU5N0YxQ0Y2QzE1OUY0N0Q1NDVERjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM85uZXBuryLWZcQLm1xeo/p5p7bULtYA5mszTmgJ3yqr3DrECEp
Dtni6Vv2Ua1GGRT1mGCuy2Gq3u6322tH+AyoHVkNDLtiJBoWQDEOCa6IVVqP7fSX
uyisathnyTM4xDJ0tZmzWtRQcemjB7s7sJIakham/Ua+4hWxBK93Ce/vVA2sXOiZ
Hq9zEpPOGq80lwzZG1hzB7nFE2WW3mR9dD/hxPACEcLKvvuvEmxI8UBqQoiqo/73
z5nfnrY3kGub5izkZgXTTpjTJVlmrqEm928rPZoqg0XzCTw2R2K+tDUFOFF1nnbv
IRQPjAHxtvfGbkLTAQdixOMU5v8snvLwl80CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBTOFjYfEMY9qhmOl/HPbBWfR9VF3zAfBgNVHSMEGDAWgBQAcwTIx4Q1UiYH4c+v
HzzhoiH/fTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNjIvQUhNRXlNZUVOVkltQi1IUHJ4ODg0YUloXzMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQUhNRXlNZUVOVkltQi1IUHJ4ODg0
YUloXzMwLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzM5MDYyL0FITUV5TWVFTlZJbUItSFByeDg4NGFJaF8zMC5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbVyWfCd6+7fqWjJchAUFOG3oM
xVccpn6DeFYYIYSDcsodr1O2lvDVsd1ZbCzCodgzKzCNVr2vtl5scSkCHOa/1Xk4
JwoTib0h8iH+KOYqJHDG3RrGfRtAJR9EsrWPUGMha+nHOcn2k6ahtUJcQX66F4ik
nFDyFqLoWxB53FiOLRg2QWwgkHudNmmZkfO4m1LUSdrdJDhR6jGKZGzxvHZNFnlo
AmEN9HPUGonTN9tp9qLuTuriIDE/541mXutXnMb8+wdIwHX2qIgQDilXENAj/6oC
DGDwH1VLUrtZ4l95DQyNAkZKHbG/Giwpi3O5bNP0wIelTbxyC5TJEzIfQ5fg
-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:12 2026 by rpki-client