Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
File:                     ycrrDhoGe5-iYkk_qDahm97roDA.mft (raw, json)
Hash identifier:          9cykDY7XIIgRpXaNQplTyLhCkeLkZVNaejkSbtirXP4=
Subject key identifier:   D2:39:5A:97:9F:8F:37:12:73:A6:74:9F:90:A6:32:2B:A3:A2:F9:CC
Authority key identifier: C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30
Certificate issuer:       /CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
Manifest number:          0170
Signing time:             Tue 07 Jul 2026 15:17:04 +0000
Manifest this update:     Tue 07 Jul 2026 15:17:04 +0000
Manifest next update:     Thu 06 Aug 2026 15:17:04 +0000
Files and hashes:         1: QC2DaM-poQRaQVpOz82yoI4fajY.roa (hash: DYJenDvVprxtUhqXTTM9Pz18VmrnFxCe2qZfINqisDI=)
                          2: gY1M9WbGJ2qHD0BciqH9gPsyrxo.roa (hash: vmByOm0oTcOXSbVbkNMz7t3HMKwfeSznbQ2FDKNNE7o=)
                          3: ycrrDhoGe5-iYkk_qDahm97roDA.crl (hash: tTKMNISRBBQ/yzaRBKElgEEIszaTd95uutl6pbuZfcg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
        Validity
            Not Before: Jun 15 01:36:09 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=D2395A979F8F371273A6749F90A6322BA3A2F9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:4f:c3:de:7c:da:8c:f0:56:58:15:fd:7e:
                    99:74:b1:ef:a6:e8:72:6a:54:1e:44:03:67:76:5a:
                    6f:15:ec:bb:28:2a:9b:a4:ce:03:fd:e4:09:a7:5d:
                    4f:59:26:e5:54:33:6d:80:4b:05:c9:e9:52:8c:67:
                    85:f6:3c:87:71:c6:b4:8e:85:ad:bb:32:90:62:51:
                    e0:34:db:4b:e1:5f:4a:06:93:1a:4c:1e:52:3e:93:
                    1e:37:be:38:dc:81:be:db:47:4c:f6:12:ff:66:8b:
                    78:f5:6e:99:07:7d:c7:f8:a0:65:fb:0c:e9:ae:3b:
                    ab:f9:de:ef:c2:2c:8a:ab:1b:a9:ba:cd:e1:17:fa:
                    ba:fa:7f:9b:6b:f5:89:a0:a1:6b:76:85:62:10:e2:
                    c9:cf:23:2f:8b:be:d3:f6:45:1d:73:8e:b6:de:34:
                    7a:0e:13:bb:db:b7:ea:31:e8:12:07:bc:8a:42:19:
                    5e:af:b0:ed:57:63:8a:ce:48:ba:dd:d0:c3:05:60:
                    28:8b:30:e2:94:94:fc:cd:99:f7:a2:46:19:8d:07:
                    f0:a6:c0:14:91:4d:e2:f3:9f:b8:10:31:1a:66:6e:
                    f1:ac:8d:04:72:ba:fc:f6:5f:01:d4:f7:99:68:43:
                    88:e3:1c:4e:18:5b:ca:d0:d4:d9:77:db:8c:7f:92:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:5A:97:9F:8F:37:12:73:A6:74:9F:90:A6:32:2B:A3:A2:F9:CC
            X509v3 Authority Key Identifier:
                keyid:C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:49:a3:9c:d3:6a:be:52:74:35:e5:6d:d1:bf:5c:28:f5:be:
         c6:f4:1e:db:e7:c6:68:e8:74:de:53:c7:11:f6:02:56:2b:32:
         26:ae:17:b6:62:cd:95:08:a3:ad:bf:42:89:5f:31:67:6a:07:
         42:67:de:2e:e1:93:59:70:2e:7c:9a:c4:bc:c3:73:79:ff:e5:
         07:ad:63:4a:8b:66:ee:24:57:ef:0f:77:da:26:4a:44:33:85:
         43:96:e2:84:8d:a7:16:78:01:96:1c:2b:ad:12:bd:86:d5:b3:
         a9:18:60:c7:64:78:f2:2b:09:57:96:8a:64:ca:86:3c:00:d1:
         df:b7:2c:29:24:02:8b:48:7f:7a:00:ff:34:e9:14:a7:2b:f7:
         30:1d:fa:c1:01:73:f8:10:6b:b1:3a:73:b6:54:56:14:43:cf:
         e3:fa:b5:3e:d0:28:89:2f:39:a6:eb:14:fb:4c:d2:5f:52:11:
         14:d2:dd:cc:7b:59:ed:51:1f:f2:1b:ef:0e:c1:c0:18:c6:75:
         32:be:33:bc:0c:9a:71:fc:bd:ac:a2:99:1a:1c:86:6f:01:1f:
         d3:9a:10:30:08:74:68:ca:e4:1f:87:36:be:34:09:ff:3c:9e:
         d2:34:1d:0a:89:89:23:35:82:3d:3e:2b:ba:88:9e:c6:34:8f:
         df:25:e4:ed
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDOUNB
RUIwRTFBMDY3QjlGQTI2MjQ5M0ZBODM2QTE5QkRFRUJBMDMwMB4XDTI2MDYxNTAx
MzYwOVoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRDIzOTVBOTc5RjhGMzcx
MjczQTY3NDlGOTBBNjMyMkJBM0EyRjlDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALosT8PefNqM8FZYFf1+mXSx76bocmpUHkQDZ3ZabxXsuygqm6TO
A/3kCaddT1km5VQzbYBLBcnpUoxnhfY8h3HGtI6FrbsykGJR4DTbS+FfSgaTGkwe
Uj6THje+ONyBvttHTPYS/2aLePVumQd9x/igZfsM6a47q/ne78IsiqsbqbrN4Rf6
uvp/m2v1iaCha3aFYhDiyc8jL4u+0/ZFHXOOtt40eg4Tu9u36jHoEge8ikIZXq+w
7Vdjis5Iut3QwwVgKIsw4pSU/M2Z96JGGY0H8KbAFJFN4vOfuBAxGmZu8ayNBHK6
/PZfAdT3mWhDiOMcThhbytDU2XfbjH+SGDkCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBTSOVqXn483EnOmdJ+QpjIro6L5zDAfBgNVHSMEGDAWgBTJyusOGgZ7n6JiST+o
NqGb3uugMDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzIveWNyckRob0dlNS1pWWtrX3FEYWhtOTdyb0RBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWNyckRob0dlNS1pWWtrX3FEYWht
OTdyb0RBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDcyL3ljcnJEaG9HZTUtaVlra19xRGFobTk3cm9EQS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDGSaOc02q+UnQ15W3Rv1wo9b7G
9B7b58Zo6HTeU8cR9gJWKzImrhe2Ys2VCKOtv0KJXzFnagdCZ94u4ZNZcC58msS8
w3N5/+UHrWNKi2buJFfvD3faJkpEM4VDluKEjacWeAGWHCutEr2G1bOpGGDHZHjy
KwlXlopkyoY8ANHftywpJAKLSH96AP806RSnK/cwHfrBAXP4EGuxOnO2VFYUQ8/j
+rU+0CiJLzmm6xT7TNJfUhEU0t3Me1ntUR/yG+8OwcAYxnUyvjO8DJpx/L2sopka
HIZvAR/TmhAwCHRoyuQfhza+NAn/PJ7SNB0KiYkjNYI9Piu6iJ7GNI/fJeTt
-----END CERTIFICATE-----
Generated at Tue Jul 7 16:51:43 2026 by rpki-client