Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft
File:                     KPOWmDwzKEL92rYXWVowqDwzNGQ.mft (raw, json)
Hash identifier:          kqUkNxVAUshLRnUUIBYCAuObbipLlfEnbTWW7Ur3knc=
Subject key identifier:   91:F4:93:F7:95:91:1E:C8:86:12:BE:AE:0C:64:2B:63:98:16:0F:9F
Authority key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64
Certificate issuer:       /CN=28F396983C332842FDDAB617595A30A83C333464
Certificate serial:       16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft
Manifest number:          09D5
Signing time:             Sat 21 Feb 2026 03:36:10 +0000
Manifest this update:     Sat 21 Feb 2026 03:36:10 +0000
Manifest next update:     Sun 08 Mar 2026 03:36:10 +0000
Files and hashes:         1: KPOWmDwzKEL92rYXWVowqDwzNGQ.crl (hash: IormVObsaylwju0NXp1aMdfx6f+nTInFqAEdNNGehB4=)
                          2: KRFHlIw0Omg98zCh4-y61tNaRxg.roa (hash: +DE6F+MP5xpiNopsxhmVpOCqYk1/7pXMMKsQ7QDIUzc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28F396983C332842FDDAB617595A30A83C333464
        Validity
            Not Before: Feb 15 01:40:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=91F493F795911EC88612BEAE0C642B6398160F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1f:5d:0d:fb:69:9b:3a:01:3c:ac:0b:a6:67:
                    0b:5d:73:4c:44:d5:f9:e2:76:35:d0:b9:26:5a:80:
                    38:13:4b:0d:c7:07:a3:0a:85:1c:dd:7a:a9:a3:21:
                    19:19:ca:9a:eb:66:e3:e9:dc:7d:6d:c6:77:fe:fa:
                    0b:66:22:39:21:70:95:94:19:ba:1c:f8:06:ba:de:
                    15:ec:11:d5:fd:c9:15:82:c5:12:fe:10:8f:06:93:
                    28:14:1a:be:73:1b:bb:87:ff:20:eb:1f:84:0b:98:
                    07:ca:da:de:d2:6c:78:bd:49:33:a9:f4:4b:7c:1c:
                    e8:58:5e:54:48:95:90:e1:24:5a:74:2b:8a:34:1a:
                    40:34:99:b6:2c:8f:af:09:5b:d5:22:17:43:6d:e1:
                    73:88:05:9c:a3:eb:35:c7:d0:9e:c6:bd:d8:f1:de:
                    a8:1e:ef:32:58:20:e1:58:59:02:a5:9f:ba:a5:64:
                    6f:4f:4c:1b:86:87:fd:1e:06:f9:4a:49:79:a9:e1:
                    19:4b:33:18:aa:4a:e5:45:32:b4:42:0a:be:e4:03:
                    5f:76:2b:52:6e:45:57:6f:c2:d0:f9:25:f1:f3:c5:
                    26:e4:ce:d5:a5:de:6b:98:99:6c:5a:f6:2d:57:e0:
                    8a:5a:0d:bb:62:79:2d:e4:cc:c5:d7:d5:72:f8:a2:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:93:F7:95:91:1E:C8:86:12:BE:AE:0C:64:2B:63:98:16:0F:9F
            X509v3 Authority Key Identifier:
                keyid:28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:e4:2e:b6:4d:61:77:b0:02:54:b9:f5:b5:b9:b8:10:f8:7c:
         92:9e:a5:33:52:a1:3a:ae:cd:e1:67:54:38:45:a2:73:fa:4e:
         52:36:72:ed:7d:80:61:25:d5:bc:68:98:d1:2c:52:e5:47:d0:
         2c:13:28:46:5f:b5:fe:5e:d5:20:04:a9:41:23:07:dc:25:ee:
         2d:14:5e:74:77:23:e9:8b:69:70:18:00:91:62:e4:bd:d0:02:
         73:0b:22:9f:7f:e7:5e:9a:71:d0:71:98:e3:9d:57:88:77:51:
         e3:b2:59:5c:aa:12:a9:c5:2c:24:e5:65:d9:a8:45:81:3b:30:
         45:2a:8e:94:fb:fd:11:b9:de:2f:48:ef:74:38:a3:12:fa:34:
         f4:87:b4:0b:cb:db:3d:16:02:19:30:31:44:21:5b:f6:ae:e0:
         37:d8:0b:bb:d2:81:e9:96:5f:2f:6b:2a:dc:da:a4:2c:c8:c9:
         33:97:ad:3c:f0:b7:83:6a:8a:f0:6b:42:d9:cf:66:96:2e:a8:
         d6:08:26:87:2e:92:71:05:b4:5b:64:eb:ea:6a:3c:15:e1:94:
         ef:b2:10:51:85:d1:35:c1:6b:cb:a0:46:aa:99:1b:66:c4:57:
         30:d1:9f:de:dd:10:45:4b:e9:36:89:4d:88:36:84:6c:2f:ca:
         6c:36:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:59:29 2026 by rpki-client