Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
File:                     EWYArZfDsYxb9xPsgAruppKsTME.mft (raw, json)
Hash identifier:          BiXYFT6jzLC8x+CoaY5+0OPVQGrqYwnhOAaYrqGi3zc=
Subject key identifier:   2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
Manifest number:          0CBB
Signing time:             Tue 07 Apr 2026 14:08:27 +0000
Manifest this update:     Tue 07 Apr 2026 14:08:27 +0000
Manifest next update:     Wed 22 Apr 2026 14:08:27 +0000
Files and hashes:         1: EWYArZfDsYxb9xPsgAruppKsTME.crl (hash: t7mSJ5X2NYo/PPL8NP2ygOczv5D66Fmms/IacKPIvCc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Mar 31 08:14:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2E2E731F792F6A65594CF848E42D88BDF9C33FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:3e:64:02:50:2a:db:98:7f:d6:63:4c:58:
                    bd:6a:ff:16:45:65:08:ed:38:f8:aa:6a:3e:80:1b:
                    41:12:33:67:e4:81:84:84:8b:6e:f7:07:58:ae:a7:
                    66:40:e1:d5:23:97:e0:f9:cb:83:38:35:4f:b9:5a:
                    30:e7:50:70:69:52:e7:aa:2e:eb:5c:45:01:ab:1f:
                    b8:49:c3:fe:0e:2d:67:49:e4:d9:11:61:78:75:75:
                    b3:ce:a9:f8:92:f9:d8:6e:eb:cb:dd:3c:4b:1c:59:
                    7b:0d:27:f0:dd:41:9d:7c:d2:ec:6a:a8:c4:de:f3:
                    80:7d:f8:44:37:90:45:ed:47:90:51:e6:95:fb:19:
                    d6:a8:49:97:19:86:6c:d1:b1:5f:f7:6b:38:20:a0:
                    d3:9d:52:e8:ae:9d:25:35:8d:e9:51:a8:3c:b7:86:
                    86:23:5f:a4:4a:ea:5f:ca:87:bc:76:37:86:34:f9:
                    e5:c0:25:6d:de:9c:a6:5d:4b:00:62:c9:c0:10:1d:
                    54:34:1b:7a:8d:5c:a2:41:36:67:a2:29:34:f3:eb:
                    7b:62:42:aa:da:4c:d6:71:f2:93:ca:c8:9a:3f:70:
                    e8:76:8a:a5:11:30:19:61:77:e6:b1:2a:a4:5f:5f:
                    46:69:63:cc:74:88:19:e3:1d:d9:e1:93:d0:89:09:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e5:6c:ca:03:bc:78:bb:9c:5c:c1:aa:90:da:7a:ac:68:5d:
         dc:f0:bb:01:3b:53:e5:2a:40:c4:62:76:02:30:c4:da:2e:a4:
         1f:f1:dc:8c:cb:ed:2e:94:1c:54:9b:5e:d7:c1:b7:6a:b9:4d:
         08:e2:f1:f6:e3:9b:3a:01:22:25:d6:18:cf:4e:b0:be:a6:9c:
         66:a8:84:49:7b:0c:8f:ff:e1:ec:54:ac:ce:b0:0a:35:40:f9:
         42:76:f8:63:09:0a:50:5d:0e:2c:b3:bb:56:5d:3c:94:58:65:
         63:5c:11:8e:97:d6:6a:be:0a:0a:25:c4:c3:24:88:f9:09:76:
         fb:a5:24:52:6a:52:68:21:24:d4:55:2c:0f:36:9a:69:2d:c5:
         c2:56:7a:a9:3d:60:c0:5e:01:74:ce:56:6b:bd:4f:19:fa:1f:
         d1:88:89:fb:62:2c:46:4a:2c:c9:fa:4b:08:91:4e:77:56:0a:
         33:75:b0:15:1c:3f:cd:34:bf:f0:83:31:1f:fa:3b:97:32:16:
         77:d6:90:a0:97:c6:df:d2:26:11:fa:ad:6a:80:a2:8f:87:03:
         33:0f:58:2c:52:28:49:70:9f:36:62:1c:c9:d1:90:f2:7f:1d:
         88:b1:d2:01:44:c2:0f:35:cb:39:aa:dd:59:14:e3:5c:dc:71:
         23:70:ca:c8
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTE2
NjAwQUQ5N0MzQjE4QzVCRjcxM0VDODAwQUVFQTY5MkFDNENDMTAeFw0yNjAzMzEw
ODE0MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFMkU3MzFGNzkyRjZB
NjU1OTRDRjg0OEU0MkQ4OEJERjlDMzNGQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/zj5kAlAq25h/1mNMWL1q/xZFZQjtOPiqaj6AG0ESM2fkgYSE
i273B1iup2ZA4dUjl+D5y4M4NU+5WjDnUHBpUueqLutcRQGrH7hJw/4OLWdJ5NkR
YXh1dbPOqfiS+dhu68vdPEscWXsNJ/DdQZ180uxqqMTe84B9+EQ3kEXtR5BR5pX7
GdaoSZcZhmzRsV/3azggoNOdUuiunSU1jelRqDy3hoYjX6RK6l/Kh7x2N4Y0+eXA
JW3enKZdSwBiycAQHVQ0G3qNXKJBNmeiKTTz63tiQqraTNZx8pPKyJo/cOh2iqUR
MBlhd+axKqRfX0ZpY8x0iBnjHdnhk9CJCVXfAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQULi5zH3kvamVZTPhI5C2IvfnDP64wHwYDVR0jBBgwFoAUEWYArZfDsYxb9xPs
gAruppKsTMEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzMS9FV1lBclpmRHNZeGI5eFBzZ0FydXBwS3NUTUUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9FV1lBclpmRHNZeGI5eFBzZ0FydXBw
S3NUTUUuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvOTMxL0VXWUFyWmZEc1l4Yjl4UHNnQXJ1cHBLc1RNRS5tZnQwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAA5WzKA7x4u5xcwaqQ2nqsaF3c8LsB
O1PlKkDEYnYCMMTaLqQf8dyMy+0ulBxUm17XwbdquU0I4vH245s6ASIl1hjPTrC+
ppxmqIRJewyP/+HsVKzOsAo1QPlCdvhjCQpQXQ4ss7tWXTyUWGVjXBGOl9ZqvgoK
JcTDJIj5CXb7pSRSalJoISTUVSwPNpppLcXCVnqpPWDAXgF0zlZrvU8Z+h/RiIn7
YixGSizJ+ksIkU53VgozdbAVHD/NNL/wgzEf+juXMhZ31pCgl8bf0iYR+q1qgKKP
hwMzD1gsUihJcJ82YhzJ0ZDyfx2IsdIBRMIPNcs5qt1ZFONc3HEjcMrI
-----END CERTIFICATE-----
Generated at Tue Apr 7 18:12:12 2026 by rpki-client