Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
File:                     EwgiqaPTOrq2FTetw3QoZxC6DHc.mft (raw, json)
Hash identifier:          oXNWe9AdVQECyfEFl8tfRraics8P5dWoGogmqC/V9Fo=
Subject key identifier:   14:30:F9:91:C3:7A:43:09:C5:69:43:29:50:BF:A6:DE:97:52:4F:49
Authority key identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77
Certificate issuer:       /CN=130822A9A3D33ABAB61537ADC374286710BA0C77
Certificate serial:       2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
Manifest number:          10DC
Signing time:             Mon 26 Oct 2026 20:53:18 +0000
Manifest this update:     Mon 26 Oct 2026 20:53:18 +0000
Manifest next update:     Wed 25 Nov 2026 20:53:18 +0000
Files and hashes:         1: 24PBRHrSw2odfoVWNHYeECVQnxc.roa (hash: ynXb/P/XIhHbofM+yM/p7fbAv4tO3LgPR2JPAoNkjy4=)
                          2: AflsB81rivbLDn9ElHOHGET8M0w.roa (hash: 4eCDNhpSmFJllaAQ/t1FdLlnzAp33xXqVrlszSX4GEc=)
                          3: EwgiqaPTOrq2FTetw3QoZxC6DHc.crl (hash: PFUCMB7RfTYEAwcWtkeBnjZjO0DfxCPQtfFkeWsJDjg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130822A9A3D33ABAB61537ADC374286710BA0C77
        Validity
            Not Before: Oct 15 01:39:38 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=1430F991C37A4309C569432950BFA6DE97524F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:80:a9:73:2c:31:f1:60:5b:ce:d4:55:6e:
                    e2:e8:c5:13:ed:09:25:df:0d:bc:3e:4d:68:bd:be:
                    c3:46:a7:a0:cb:39:f2:1e:bc:ff:6e:59:29:be:a4:
                    fe:f5:9c:fb:62:de:f8:a9:f9:ce:1a:6e:3e:fb:29:
                    c2:3f:0a:e8:ee:7d:81:79:1c:d4:b9:5f:45:9b:00:
                    48:73:e3:55:9e:cc:27:d2:d0:57:7e:9e:7f:12:1f:
                    4a:c9:f8:f0:35:5d:69:0a:9c:6e:68:1f:4a:40:a1:
                    7e:94:3f:14:ce:53:1a:f2:33:9b:55:a1:31:97:c8:
                    94:f4:d0:0a:b9:66:c1:a0:43:df:b3:fe:9b:3c:5f:
                    ec:45:f9:79:da:82:32:39:03:81:a8:84:d1:5f:be:
                    c2:16:d0:eb:da:61:6a:55:a2:87:35:80:66:a5:39:
                    10:c6:ee:e0:1e:3a:a0:23:be:72:73:ba:06:6f:df:
                    65:ab:d7:71:c9:4d:f6:ac:fc:01:fe:dc:3a:ce:bf:
                    3d:24:71:7a:8b:24:3a:b5:1c:f8:cc:5d:bc:b2:d3:
                    d6:ea:ff:ad:43:52:20:2d:cf:67:fc:76:c9:de:b5:
                    44:6f:55:90:29:fd:8e:b3:50:b2:0c:e7:5b:9a:27:
                    53:a7:f2:da:47:23:21:a8:b6:db:49:91:93:af:66:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:30:F9:91:C3:7A:43:09:C5:69:43:29:50:BF:A6:DE:97:52:4F:49
            X509v3 Authority Key Identifier:
                keyid:13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:4c:24:22:a8:93:3d:5e:79:a9:b4:91:3b:13:be:35:1a:
         3b:2f:e7:5f:f3:6f:fa:92:3f:5c:f4:84:9b:47:f5:ef:cd:15:
         36:49:59:2d:bd:ef:32:44:4e:66:0d:57:b6:52:25:02:f3:8b:
         d5:02:91:82:48:b7:c7:ca:e9:f8:24:b4:24:27:93:ee:3d:d7:
         2e:ad:42:48:89:31:ae:8b:f4:ec:3d:2b:be:91:e5:75:71:e1:
         de:04:ce:15:0c:b8:36:dc:10:bb:2d:81:b4:cd:ae:09:f2:c2:
         cb:3c:e7:75:e2:1c:ef:60:df:ff:95:5d:37:1f:23:0d:40:df:
         2c:4f:ed:27:c1:8f:87:0f:ab:2d:2f:7b:b4:7f:32:97:c3:0e:
         2c:eb:bb:48:ad:d5:1e:11:fd:dc:db:d0:00:ea:4e:58:f2:fd:
         4a:89:87:a4:17:c0:f5:ac:e1:8f:cd:9d:75:cd:bd:6c:5d:e4:
         99:c6:d6:47:9a:da:48:de:1c:ac:9e:1b:42:ca:0e:b3:86:8a:
         94:ca:17:e1:da:50:9f:84:9c:c4:f3:70:2e:de:75:37:bc:99:
         7d:c4:e3:ce:a6:34:b9:e8:28:7c:d5:66:11:66:5a:46:b9:96:
         63:e1:a4:85:e7:c9:0f:fb:25:f0:fe:c5:a4:4c:17:dd:20:b8:
         e3:4e:17:94
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMzA4
MjJBOUEzRDMzQUJBQjYxNTM3QURDMzc0Mjg2NzEwQkEwQzc3MB4XDTI2MTAxNTAx
MzkzOFoXDTI3MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTQzMEY5OTFDMzdBNDMw
OUM1Njk0MzI5NTBCRkE2REU5NzUyNEY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALV1gKlzLDHxYFvO1FVu4ujFE+0JJd8NvD5NaL2+w0anoMs58h68
/25ZKb6k/vWc+2Le+Kn5zhpuPvspwj8K6O59gXkc1LlfRZsASHPjVZ7MJ9LQV36e
fxIfSsn48DVdaQqcbmgfSkChfpQ/FM5TGvIzm1WhMZfIlPTQCrlmwaBD37P+mzxf
7EX5edqCMjkDgaiE0V++whbQ69phalWihzWAZqU5EMbu4B46oCO+cnO6Bm/fZavX
cclN9qz8Af7cOs6/PSRxeoskOrUc+MxdvLLT1ur/rUNSIC3PZ/x2yd61RG9VkCn9
jrNQsgznW5onU6fy2kcjIai220mRk69my6MCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQUMPmRw3pDCcVpQylQv6bel1JPSTAfBgNVHSMEGDAWgBQTCCKpo9M6urYVN63D
dChnELoMdzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMDIvRXdnaXFhUFRPcnEyRlRldHczUW9aeEM2REhjLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRXdnaXFhUFRPcnEyRlRldHczUW9a
eEM2REhjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMTAyL0V3Z2lxYVBUT3JxMkZUZXR3M1FvWnhDNkRIYy5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfxkwkIqiTPV55qbSROxO+NRo7
L+df82/6kj9c9ISbR/XvzRU2SVktve8yRE5mDVe2UiUC84vVApGCSLfHyun4JLQk
J5PuPdcurUJIiTGui/TsPSu+keV1ceHeBM4VDLg23BC7LYG0za4J8sLLPOd14hzv
YN//lV03HyMNQN8sT+0nwY+HD6stL3u0fzKXww4s67tIrdUeEf3c29AA6k5Y8v1K
iYekF8D1rOGPzZ11zb1sXeSZxtZHmtpI3hysnhtCyg6zhoqUyhfh2lCfhJzE83Au
3nU3vJl9xOPOpjS56Ch81WYRZlpGuZZj4aSF58kP+yXw/sWkTBfdILjjTheU
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:52:20 2026 by rpki-client