Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft
File:                     g3GTlezs0ieqs-JSnnoQSDwPmG8.mft (raw, json)
Hash identifier:          sZwnpOYC5tiakQsYTItYaNetMQubistjHO+ec5+DhBI=
Subject key identifier:   3B:38:43:6F:29:6F:E0:CE:6C:63:80:92:14:46:71:1F:22:EE:8C:42
Authority key identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F
Certificate issuer:       /CN=83719395ECECD227AAB3E2529E7A10483C0F986F
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft
Manifest number:          0FB3
Signing time:             Fri 11 Sep 2026 09:14:23 +0000
Manifest this update:     Fri 11 Sep 2026 09:14:23 +0000
Manifest next update:     Sun 11 Oct 2026 09:14:23 +0000
Files and hashes:         1: HyK-vFuytIEBKMG6ZWZ2YakLcGs.roa (hash: 2PSR2V7aW7I+vrNoaLAEwc9SNRTnH6V/gyj3bRrkUoE=)
                          2: g3GTlezs0ieqs-JSnnoQSDwPmG8.crl (hash: XGrW90AL1fUs1ggz5fBmm9WlrXhDY0YMVdIdBAmmC8w=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 06:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83719395ECECD227AAB3E2529E7A10483C0F986F
        Validity
            Not Before: Aug 15 01:39:06 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=3B38436F296FE0CE6C6380921446711F22EE8C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:3f:ba:d0:fc:32:02:e1:ed:9c:d7:e7:26:
                    c6:8d:02:89:4c:8f:de:b5:b9:4e:d6:ef:60:2e:dc:
                    f8:2a:6e:31:65:a5:98:ba:95:91:99:ef:58:ab:c5:
                    bb:74:e4:74:3a:e1:25:65:54:26:60:ac:d1:28:09:
                    95:72:2e:a3:9d:67:bf:98:2f:f3:d5:ad:c0:2e:f2:
                    0a:3a:94:6a:e3:2b:a1:30:23:ab:bb:19:6f:34:71:
                    33:01:ac:9b:56:fd:9b:2b:e4:8c:5c:db:e4:16:37:
                    a4:99:94:2f:2d:ae:74:46:4c:3f:f0:5a:55:3a:12:
                    c5:8e:6b:a3:45:20:1b:8d:18:95:8b:83:0e:26:39:
                    53:90:6a:ce:1d:c9:e1:2c:22:78:ea:f6:08:7f:a6:
                    70:e2:4e:2a:b7:05:e2:cc:ce:0c:4d:56:2a:71:e2:
                    d4:3e:8a:b1:bb:03:06:ba:64:f1:40:97:87:61:0f:
                    16:03:28:b9:89:72:0c:d9:58:78:61:e4:12:79:2c:
                    3d:3b:71:d4:63:80:6d:5f:65:5c:12:dd:59:13:8a:
                    c1:0a:a3:f6:b1:ae:12:d4:42:f7:4c:fc:36:f8:4c:
                    cd:15:e0:6f:80:16:8a:91:40:7d:9e:7b:9b:f7:01:
                    2f:1b:1f:09:0f:02:1c:17:84:a6:7a:a5:df:7c:42:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:38:43:6F:29:6F:E0:CE:6C:63:80:92:14:46:71:1F:22:EE:8C:42
            X509v3 Authority Key Identifier:
                keyid:83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:26:d2:e1:a8:85:50:72:38:77:3b:20:ef:e7:ca:a7:d4:
         5e:03:ba:4b:e5:bd:5c:a4:e0:8a:e9:33:03:00:11:62:9d:a6:
         04:d5:d8:23:67:69:ed:a5:82:95:a6:5a:0d:a5:08:4c:c0:8f:
         b8:d0:c5:44:f5:3b:fe:f2:f5:87:25:37:27:e9:db:90:8e:e4:
         75:78:9c:ca:61:7b:8d:7e:a9:08:ba:86:76:48:af:19:c6:2c:
         55:0b:84:0a:08:15:96:b6:77:51:fb:d9:5e:48:fb:8b:6b:92:
         b9:e2:31:62:61:f3:ef:44:98:ba:ca:2e:73:99:d5:7e:7b:d5:
         62:d4:3d:5c:bb:0e:1d:58:11:7c:dc:f7:04:0d:fc:69:25:32:
         30:08:76:dd:68:ba:f1:c1:e0:08:2b:09:08:66:e9:8d:c0:43:
         a2:b7:d8:af:69:f4:a5:a3:83:6c:31:c1:1b:6f:74:9e:2b:a5:
         8e:7a:c5:71:25:35:15:a3:c0:78:1c:db:e5:c0:8b:2e:78:40:
         11:5d:fd:83:b6:8d:cc:65:78:84:b2:53:09:49:c8:c0:3f:cc:
         18:6d:86:d8:a2:91:9f:84:03:fc:a1:fc:06:b8:b9:e3:27:75:
         39:81:27:d5:fb:fd:b1:f0:48:b2:73:b0:2a:78:b0:d6:33:6d:
         5a:21:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:57:03 2026 by rpki-client