Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft
File:                     ENGH2x2fTTa03kSL5DdnEpp512Q.mft (raw, json)
Hash identifier:          GGKWlowWdRDL8nWhU9Djmwbs4FKJbnuJvZcqgXW9o7w=
Subject key identifier:   09:0C:30:9B:19:10:0E:B9:54:43:7C:26:B6:B2:85:9C:BE:C9:7E:76
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft
Manifest number:          1AF6
Signing time:             Tue 07 Jul 2026 10:05:16 +0000
Manifest this update:     Tue 07 Jul 2026 10:05:16 +0000
Manifest next update:     Thu 06 Aug 2026 10:05:16 +0000
Files and hashes:         1: ENGH2x2fTTa03kSL5DdnEpp512Q.crl (hash: PLt2bZFHFoScM+k7/MvOUNNLuWlgVVNn6cNeDYHt3FE=)
                          2: VmA7_-Pg1s1G6qDkBg5pDi8DP6g.roa (hash: X2VHtAdeKEdxgFj5lS36NzLSQXVmNiUeRa4Sp1FxOFw=)
                          3: jsxKSAkXEBjWHU5JGgMDMIWUjUQ.roa (hash: ZovLbnpUK/aBBhBSNT1bTAb5/8M6u9HCCsv8bZgx/0A=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: Jun 15 01:37:27 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=090C309B19100EB954437C26B6B2859CBEC97E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:2d:41:b6:5e:a2:cb:30:aa:30:25:5b:06:
                    40:07:29:63:ef:eb:1e:1f:ff:b1:b4:af:f3:29:b4:
                    ff:9f:d1:9a:e7:29:f6:bf:09:a1:fb:5a:b8:2e:d6:
                    11:bc:63:41:de:aa:d7:eb:25:41:2b:18:78:ca:bd:
                    ca:99:05:45:9e:72:ad:8d:85:1d:e8:37:24:61:29:
                    92:84:a5:48:98:20:55:c6:17:3c:56:05:2b:78:0f:
                    c2:cf:64:81:9b:31:7a:a1:e7:03:63:43:cf:2c:3c:
                    e0:c5:2f:7c:3d:c8:f2:01:31:23:ca:eb:51:2f:56:
                    d0:3a:a4:12:0e:3b:ff:92:d6:69:4b:a3:8b:e4:ce:
                    ad:d8:20:75:d8:5d:38:da:5c:23:9a:ec:83:6f:95:
                    28:8d:c7:3d:c9:89:ee:42:4a:80:e8:c7:6a:f6:ca:
                    cd:aa:b1:36:7d:f0:85:6f:16:93:88:77:c4:89:4e:
                    2a:74:e1:cf:f0:60:e5:28:fd:88:a3:fb:1c:3f:a0:
                    f5:52:0b:96:40:06:3b:af:cd:78:51:99:03:ed:23:
                    a8:48:2b:ce:15:84:64:b8:4e:56:dd:2e:47:14:00:
                    79:8f:5b:7b:54:26:88:e3:31:eb:4e:c5:47:7b:ae:
                    b1:8c:f7:9a:47:a8:86:a3:dc:cd:f0:79:d3:ca:c7:
                    eb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0C:30:9B:19:10:0E:B9:54:43:7C:26:B6:B2:85:9C:BE:C9:7E:76
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:dd:6b:59:77:39:77:cf:77:47:23:09:04:01:4b:f6:75:
         87:1d:91:12:f5:74:10:a5:bf:fc:a8:8a:e8:19:a2:28:98:0c:
         31:16:d9:39:fd:5d:8c:59:d3:38:23:ec:81:a1:88:d0:6b:2e:
         ac:fb:8b:f5:08:08:56:85:9d:d0:4f:70:1a:05:0f:78:13:0b:
         7e:e7:25:b6:5e:c8:47:59:15:0b:eb:b2:b6:4c:a6:db:b9:f6:
         21:70:08:ca:98:b3:f3:7e:bb:5c:5b:49:bc:d1:b9:58:65:78:
         e2:80:db:97:5e:fb:ac:99:80:15:42:14:30:33:ab:b3:7a:7b:
         65:a4:04:04:3a:9b:eb:a6:9e:e1:81:f9:13:51:74:4f:29:8b:
         ae:d4:44:d1:42:2f:ac:7a:6e:7e:a5:f0:71:35:79:ba:79:92:
         ff:d1:33:da:5b:59:a8:46:f9:7a:03:21:4b:e4:7a:61:cc:60:
         9e:9e:4f:a7:50:8f:4d:b9:4a:20:4e:82:26:18:40:ee:33:c2:
         93:3b:cd:ab:48:21:92:b8:8f:72:03:df:fd:97:b8:3d:a8:46:
         75:06:22:0f:eb:0c:09:99:e6:5e:a9:34:18:52:fd:03:6c:c9:
         1e:51:ce:2f:75:66:4d:e8:c7:bc:14:c6:6d:2b:30:99:37:86:
         8d:4f:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:39:41 2026 by rpki-client