Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft
File:                     E7HIAH8jQgMPRBx3TKnLznR-ylA.mft (raw, json)
Hash identifier:          4/n/E36btZAKXWgRkb6aGfU2eZnpuUdbbFa0XAQOIbY=
Subject key identifier:   20:D0:8C:5F:F1:9A:88:4B:AF:F4:9C:EC:3D:2E:96:13:35:F7:FA:77
Authority key identifier: 13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50
Certificate issuer:       /CN=13B1C8007F2342030F441C774CA9CBCE747ECA50
Certificate serial:       31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft
Manifest number:          0F7A
Signing time:             Fri 21 Aug 2026 23:10:23 +0000
Manifest this update:     Fri 21 Aug 2026 23:10:23 +0000
Manifest next update:     Sun 20 Sep 2026 23:10:23 +0000
Files and hashes:         1: E7HIAH8jQgMPRBx3TKnLznR-ylA.crl (hash: IZmxhMNzyw6+pfFevWYWMrN+cfmSkRqXyTIJvPIE0RE=)
                          2: kFw3HLKChpbPIhL8zGeC_gYpnC4.roa (hash: cRvGpA4eVf2P/GIzCRxcSopEvtzToJyhGQMKn2Aa7AI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13B1C8007F2342030F441C774CA9CBCE747ECA50
        Validity
            Not Before: Aug 15 01:37:36 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=20D08C5FF19A884BAFF49CEC3D2E961335F7FA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:bf:27:3b:43:64:03:b8:cc:85:44:66:89:
                    8e:63:3f:f9:f7:89:23:81:8e:0a:32:23:67:77:c0:
                    e6:ba:17:b3:ed:a7:4c:85:4b:e0:4e:5a:83:b6:b9:
                    d7:1c:ef:7d:e2:68:9b:b4:4b:70:03:06:62:14:86:
                    82:9a:dd:b4:9d:d7:e4:e3:23:76:25:b4:40:e7:bc:
                    b1:4f:fb:b2:3a:ce:4c:0f:b1:40:52:c7:26:95:9d:
                    77:dc:68:c2:5a:2e:f2:ce:c8:6d:ff:dc:ff:c5:6b:
                    66:e7:58:e6:e1:41:fe:b8:b6:2e:ec:7a:ac:68:3f:
                    6a:38:0c:0a:88:f7:e5:5f:2a:90:c7:a6:39:7a:07:
                    0b:aa:d8:ee:2d:6d:d4:1c:ca:76:35:9a:46:97:05:
                    53:f5:8c:a7:28:8f:71:aa:ec:a9:5e:1e:52:fc:70:
                    4c:0f:9c:6b:c7:98:9e:8e:a2:f5:72:40:29:f6:65:
                    1d:38:ba:1e:d5:9e:36:24:c9:74:6e:6f:3b:54:c8:
                    45:49:57:9f:d8:5a:90:58:24:62:21:9b:a1:66:ad:
                    50:d5:df:03:8d:98:c6:84:ca:c7:38:93:d8:ce:8c:
                    34:c9:b0:95:cf:8f:84:19:81:62:72:2f:7b:ac:93:
                    6d:35:ba:81:60:79:68:9d:38:79:c5:b5:95:c0:46:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D0:8C:5F:F1:9A:88:4B:AF:F4:9C:EC:3D:2E:96:13:35:F7:FA:77
            X509v3 Authority Key Identifier:
                keyid:13:B1:C8:00:7F:23:42:03:0F:44:1C:77:4C:A9:CB:CE:74:7E:CA:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/E7HIAH8jQgMPRBx3TKnLznR-ylA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20227/E7HIAH8jQgMPRBx3TKnLznR-ylA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:12:96:53:c8:ad:74:6f:d1:f3:1f:82:31:1d:2a:2a:b5:7d:
         f3:39:01:83:10:23:07:f9:a2:93:6d:c6:54:1e:9b:bd:6f:bd:
         e9:ae:ff:fc:c3:73:2e:5b:49:43:b4:f9:b9:08:9a:70:32:4c:
         40:e5:2b:ad:c4:e7:bd:9d:c9:38:a1:c2:bc:4e:18:1a:14:e7:
         56:57:6c:13:21:d8:8d:b3:31:26:3a:87:c6:9a:44:35:cc:8e:
         96:d4:4a:7e:3e:3b:d9:ce:bf:33:54:68:b9:66:19:23:f9:1f:
         09:98:ad:e4:3f:4d:ef:41:2b:c7:b7:98:f2:a4:35:9f:aa:71:
         76:f9:38:ec:26:29:ea:8b:85:fc:c5:20:2d:86:ed:9b:b5:9d:
         7c:0e:7b:ef:e7:b9:2f:13:23:e2:cb:21:f3:43:32:ed:a0:f0:
         94:42:6e:69:05:4d:85:0b:20:23:6c:6d:9a:68:37:ce:57:40:
         84:26:8c:1b:cc:54:cc:83:da:39:6f:78:1e:8d:7d:0e:c5:97:
         e6:f8:68:73:1c:b4:26:db:c7:fd:1d:1f:a8:70:93:2d:d6:3a:
         fd:43:dd:6c:14:f0:df:76:89:da:a0:5d:b4:37:59:29:c2:22:
         7f:0f:59:a2:bf:18:c6:06:3b:33:6c:6a:44:7c:14:40:8e:80:
         de:ad:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:15 2026 by rpki-client