Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft
File:                     aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft (raw, json)
Hash identifier:          a7dNJGdFFnkodnm/FjvU22lhMZ291tFqX+jEKAIxBdA=
Subject key identifier:   3B:63:27:3A:24:F7:B5:5C:1A:07:CB:CF:2A:D3:DB:66:A2:12:D5:A3
Authority key identifier: 68:32:76:F0:D8:C1:36:6A:7B:0A:9C:B1:61:B9:0F:31:A7:FF:8D:69
Certificate issuer:       /CN=683276F0D8C1366A7B0A9CB161B90F31A7FF8D69
Certificate serial:       02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft
Manifest number:          B4
Signing time:             Fri 04 Sep 2026 20:35:00 +0000
Manifest this update:     Fri 04 Sep 2026 20:35:00 +0000
Manifest next update:     Sun 04 Oct 2026 20:35:00 +0000
Files and hashes:         1: 23zJv84moU4imwxdlGQ9arzQUdY.roa (hash: RY7axvQLH3B5VCywl/uZ+PltaT3FbBYCQvavSmCXk60=)
                          2: aDJ28NjBNmp7CpyxYbkPMaf_jWk.crl (hash: vGBIjR6LsEL/8lGB/Z4rwrWjttZoRYO/e2ucPwyxw4M=)
                          3: qAg3VLByVsDHC0ij4SgPCd9nqq0.roa (hash: InyP4lf0hZlPwvh29xl7TI2SzxuxcDARm/tKtHWiwkw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=683276F0D8C1366A7B0A9CB161B90F31A7FF8D69
        Validity
            Not Before: Aug 15 01:42:05 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=3B63273A24F7B55C1A07CBCF2AD3DB66A212D5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:ea:50:ed:ce:89:f3:c1:83:e6:f8:2d:b5:
                    46:80:16:b3:fb:88:4f:02:f5:db:82:16:b4:2f:2d:
                    a9:2b:e7:be:61:e7:35:29:dc:c0:0d:ef:fb:35:77:
                    26:7c:e1:48:e8:a8:65:d5:19:c7:4a:e0:3b:db:ad:
                    1b:c3:01:6a:10:95:05:b0:03:ef:e1:e5:eb:3d:68:
                    02:f3:a9:4f:4e:c8:34:c7:0e:05:18:fc:3a:ac:f7:
                    03:78:82:ee:5c:cd:61:8b:5e:bc:0a:ce:a1:59:3f:
                    31:47:b1:f4:5e:89:23:fa:18:bf:29:c0:93:6c:e5:
                    46:ae:f4:03:e0:c6:0b:35:30:e3:da:dd:6f:ff:ab:
                    2e:bc:dc:56:b3:82:e2:47:79:83:de:b0:09:86:e7:
                    35:c7:8a:ec:46:2f:31:3c:b7:a6:21:96:74:e2:ed:
                    10:27:3f:60:2f:b6:b2:14:3c:c5:64:56:60:ce:98:
                    9f:78:e5:6e:b7:2e:c6:36:1b:29:cd:ad:3d:bc:62:
                    05:ce:8b:bd:9c:c3:90:ee:3a:57:7b:87:52:0e:fe:
                    2b:d4:7f:33:a7:e5:81:5e:4a:9b:19:f2:a0:4b:0c:
                    5e:ae:d0:40:34:79:11:b4:37:b7:bb:94:a2:02:57:
                    14:e9:8d:13:6f:4f:cd:0c:09:c1:a8:4c:ac:a7:36:
                    5a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:63:27:3A:24:F7:B5:5C:1A:07:CB:CF:2A:D3:DB:66:A2:12:D5:A3
            X509v3 Authority Key Identifier:
                keyid:68:32:76:F0:D8:C1:36:6A:7B:0A:9C:B1:61:B9:0F:31:A7:FF:8D:69

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aDJ28NjBNmp7CpyxYbkPMaf_jWk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20286/aDJ28NjBNmp7CpyxYbkPMaf_jWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:a3:97:02:0b:96:2f:4f:a6:7c:b5:e7:81:96:4f:e8:9b:
         94:64:fb:2d:8b:d7:3d:f1:1b:15:9c:52:53:4e:de:3b:99:dd:
         66:09:68:2d:69:16:4d:ed:00:e8:d4:ec:61:63:72:a5:5c:42:
         44:ba:e3:0b:3d:86:57:3e:8d:f5:38:93:6b:bf:10:9d:71:e8:
         d1:81:04:89:69:20:4f:ef:03:31:a3:cf:0c:ac:a8:76:2e:13:
         8a:87:8b:e8:6d:9a:bb:d7:1c:41:d7:d4:bc:3a:a6:23:36:7a:
         4f:8e:40:9e:d7:28:46:2a:c0:a9:fe:35:d5:0b:63:2b:b4:30:
         eb:7f:89:1f:f9:52:d1:0c:a7:c1:ea:ca:9f:dd:09:ec:73:2a:
         2f:fa:0e:d3:23:48:3a:51:f1:cf:d8:5b:55:0a:9e:86:71:05:
         1e:b5:89:60:f6:64:71:0b:ff:01:61:0b:f1:f4:5b:fd:c6:af:
         a1:47:5c:2b:e6:3a:2c:8a:ad:b2:a6:cf:6a:01:2b:26:10:8f:
         55:0f:37:e0:df:6d:33:11:ca:de:52:fe:b1:51:b7:49:a2:d0:
         5a:9b:03:21:19:72:7e:1f:d9:0e:0c:4c:31:74:8f:8b:e6:b9:
         8e:fd:90:fa:c9:14:1e:b9:b8:c1:cc:39:bb:72:0a:a8:b5:74:
         df:56:32:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:06 2026 by rpki-client