Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
File:                     ycrrDhoGe5-iYkk_qDahm97roDA.mft (raw, json)
Hash identifier:          /ieUbn/l2pVzVR+Zv9MgDFCQZ/JpYPE+CSnWa3PzQw4=
Subject key identifier:   D2:39:5A:97:9F:8F:37:12:73:A6:74:9F:90:A6:32:2B:A3:A2:F9:CC
Authority key identifier: C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30
Certificate issuer:       /CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
Certificate serial:       07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
Manifest number:          027F
Signing time:             Sat 22 Aug 2026 03:49:01 +0000
Manifest this update:     Sat 22 Aug 2026 03:49:01 +0000
Manifest next update:     Mon 21 Sep 2026 03:49:01 +0000
Files and hashes:         1: QC2DaM-poQRaQVpOz82yoI4fajY.roa (hash: DYJenDvVprxtUhqXTTM9Pz18VmrnFxCe2qZfINqisDI=)
                          2: gY1M9WbGJ2qHD0BciqH9gPsyrxo.roa (hash: vmByOm0oTcOXSbVbkNMz7t3HMKwfeSznbQ2FDKNNE7o=)
                          3: ycrrDhoGe5-iYkk_qDahm97roDA.crl (hash: wPn/i7sBO2wNSCvdr+AAvsHuOBztRemPfvy5rK7ocuU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Aug 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9CAEB0E1A067B9FA262493FA836A19BDEEBA030
        Validity
            Not Before: Aug 15 01:34:42 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=D2395A979F8F371273A6749F90A6322BA3A2F9CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:4f:c3:de:7c:da:8c:f0:56:58:15:fd:7e:
                    99:74:b1:ef:a6:e8:72:6a:54:1e:44:03:67:76:5a:
                    6f:15:ec:bb:28:2a:9b:a4:ce:03:fd:e4:09:a7:5d:
                    4f:59:26:e5:54:33:6d:80:4b:05:c9:e9:52:8c:67:
                    85:f6:3c:87:71:c6:b4:8e:85:ad:bb:32:90:62:51:
                    e0:34:db:4b:e1:5f:4a:06:93:1a:4c:1e:52:3e:93:
                    1e:37:be:38:dc:81:be:db:47:4c:f6:12:ff:66:8b:
                    78:f5:6e:99:07:7d:c7:f8:a0:65:fb:0c:e9:ae:3b:
                    ab:f9:de:ef:c2:2c:8a:ab:1b:a9:ba:cd:e1:17:fa:
                    ba:fa:7f:9b:6b:f5:89:a0:a1:6b:76:85:62:10:e2:
                    c9:cf:23:2f:8b:be:d3:f6:45:1d:73:8e:b6:de:34:
                    7a:0e:13:bb:db:b7:ea:31:e8:12:07:bc:8a:42:19:
                    5e:af:b0:ed:57:63:8a:ce:48:ba:dd:d0:c3:05:60:
                    28:8b:30:e2:94:94:fc:cd:99:f7:a2:46:19:8d:07:
                    f0:a6:c0:14:91:4d:e2:f3:9f:b8:10:31:1a:66:6e:
                    f1:ac:8d:04:72:ba:fc:f6:5f:01:d4:f7:99:68:43:
                    88:e3:1c:4e:18:5b:ca:d0:d4:d9:77:db:8c:7f:92:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:39:5A:97:9F:8F:37:12:73:A6:74:9F:90:A6:32:2B:A3:A2:F9:CC
            X509v3 Authority Key Identifier:
                keyid:C9:CA:EB:0E:1A:06:7B:9F:A2:62:49:3F:A8:36:A1:9B:DE:EB:A0:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ycrrDhoGe5-iYkk_qDahm97roDA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20072/ycrrDhoGe5-iYkk_qDahm97roDA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:18:a0:94:de:62:9b:ab:14:e0:52:45:f7:3a:3a:94:ea:c3:
         df:9c:42:4c:eb:96:08:82:17:48:3f:b0:80:08:b4:81:36:df:
         25:96:02:f7:0f:45:ea:9c:d9:69:9f:3a:1b:a6:cd:0c:d5:73:
         22:e2:12:7c:2f:90:27:5e:27:a2:14:d2:3b:da:8e:41:17:5d:
         9b:a5:27:f8:39:8c:4c:3d:26:02:5e:91:5a:44:78:56:e4:c0:
         e5:b2:5e:1e:7e:5f:2c:26:ed:77:9c:e9:e1:4a:13:de:2a:26:
         c2:49:d9:92:f4:ae:76:9c:fe:64:60:89:df:6a:98:8f:71:ce:
         d2:5f:d8:e4:d8:35:8f:09:10:5a:d0:f7:fe:55:fa:05:a8:80:
         51:6c:7a:e5:89:6a:e8:86:a7:20:7d:2b:d7:89:5e:24:13:2a:
         83:f4:bf:99:b7:96:02:65:a2:7b:c4:3f:bf:2c:d7:27:aa:93:
         b4:af:f4:72:22:b3:01:78:39:0e:11:e1:f6:ca:31:f5:9b:ce:
         42:86:8f:76:46:de:54:79:36:1e:1b:24:0d:ea:cf:23:21:56:
         f0:db:f2:ed:35:36:5b:32:c1:9c:b3:0b:60:fb:d2:70:0a:7f:
         13:2d:49:35:02:44:a4:64:fe:f6:53:12:bb:bd:85:d5:80:6a:
         c3:6e:44:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:53:22 2026 by rpki-client