Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
File:                     -MAwVpHQKoXanVqhF6diWb1m9ZY.mft (raw, json)
Hash identifier:          gNqLUnQoBR4XJ9U3N8gTDM7ODR6wbmjVnpM0JQ5exfg=
Subject key identifier:   7A:AC:AF:B1:43:B5:46:90:5E:E3:4D:FB:0F:79:10:5D:E3:85:12:DC
Authority key identifier: F8:C0:30:56:91:D0:2A:85:DA:9D:5A:A1:17:A7:62:59:BD:66:F5:96
Certificate issuer:       /CN=F8C0305691D02A85DA9D5AA117A76259BD66F596
Certificate serial:       22
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
Manifest number:          0BBF
Signing time:             Fri 20 Mar 2026 06:51:39 +0000
Manifest this update:     Fri 20 Mar 2026 06:51:39 +0000
Manifest next update:     Sat 04 Apr 2026 06:51:39 +0000
Files and hashes:         1: -MAwVpHQKoXanVqhF6diWb1m9ZY.crl (hash: 4vIKc0CzS4mqqeoSSa2vdXHLO5jEbVEJCSQzRe2ezCs=)
                          2: TtfkZ1o3oFpgfvD-9e9kGrkb1ZE.roa (hash: 7u6EImkYD0NWhtvCO7WPt9yJhW9RxujXkTC7tvg9ETQ=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 06:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C0305691D02A85DA9D5AA117A76259BD66F596
        Validity
            Not Before: Mar 15 01:36:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7AACAFB143B546905EE34DFB0F79105DE38512DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:a6:93:22:96:c4:4c:a6:ba:e6:05:71:36:
                    92:4c:df:9c:6a:7c:e6:0d:f8:70:93:27:78:7f:69:
                    f7:97:a2:4b:a5:a8:af:65:50:03:bc:73:d7:7e:e4:
                    c8:71:50:76:0d:c5:af:c0:f5:82:7f:63:8a:90:bb:
                    9f:49:e7:08:44:e8:77:b3:e6:9e:f5:a1:df:18:61:
                    43:d1:36:0e:cf:ce:3e:55:03:05:ee:22:c6:f4:24:
                    6c:b2:d9:94:11:35:f7:89:89:00:9d:86:94:5d:8c:
                    f1:a6:67:00:44:f6:8e:48:14:d0:65:d0:c5:91:68:
                    5a:1a:d3:f6:35:e9:18:56:88:e7:3c:c6:f4:b6:7e:
                    43:e7:8f:26:f7:c8:2c:93:ab:aa:37:93:67:f1:fd:
                    e7:52:09:96:7d:60:8e:25:85:fe:d7:c8:be:9c:cd:
                    4a:39:cc:83:74:01:8e:b5:74:78:36:be:d2:02:71:
                    e4:2f:88:ca:9f:f8:bb:11:65:07:c8:10:51:cc:ff:
                    f7:d6:c9:97:58:4b:6d:dd:b5:5c:87:85:1d:ca:25:
                    01:32:88:7c:e6:e7:2e:25:59:af:be:18:85:85:f5:
                    00:3c:b6:20:c0:26:b2:97:1a:9e:34:ce:1f:53:86:
                    17:e7:a1:bc:7e:48:9c:30:8d:b8:56:75:f4:1c:1b:
                    7c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AC:AF:B1:43:B5:46:90:5E:E3:4D:FB:0F:79:10:5D:E3:85:12:DC
            X509v3 Authority Key Identifier:
                keyid:F8:C0:30:56:91:D0:2A:85:DA:9D:5A:A1:17:A7:62:59:BD:66:F5:96

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ee:36:71:e4:70:d0:0b:e5:ef:5a:86:1a:a7:9c:75:04:e6:
         ff:1b:88:74:4f:52:49:dc:7b:ca:f7:f0:0d:0b:ef:ca:8c:90:
         12:30:41:86:a3:f8:97:d6:98:86:a9:82:32:14:04:c0:87:f9:
         c6:df:5b:81:21:5c:c3:38:85:dd:17:90:b5:16:8e:8c:95:26:
         86:ef:83:7c:05:04:00:3e:6d:ef:3f:a7:92:91:92:a4:3b:23:
         2b:12:88:bf:2d:ba:6c:4d:b8:cf:4a:0e:1c:81:97:b3:f9:75:
         11:a5:ca:99:25:9f:74:7e:5f:0d:8f:14:a6:49:c6:2b:3b:c8:
         a9:e4:76:72:00:71:19:8b:b3:2f:3e:38:ea:d7:1e:6a:65:91:
         f7:52:bf:4d:c0:6f:01:bf:87:e0:55:fb:30:65:eb:58:26:05:
         10:0d:3c:fd:e3:9c:5f:a5:63:93:f6:a6:57:2f:3f:dd:80:30:
         67:cc:e8:b5:06:ec:3f:2a:87:92:76:dc:c5:c1:8e:4e:34:16:
         f0:1a:d1:84:b9:ca:ea:df:f7:9b:b5:ab:13:09:e5:5e:7c:8d:
         18:97:d3:ab:0c:14:d4:97:0e:f6:d2:20:e3:b9:1c:70:b3:52:
         0a:14:33:52:08:62:5c:2d:44:c3:58:9c:79:41:49:bd:05:d0:
         f8:69:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:01:37 2026 by rpki-client