Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
File:                     Tz5jlsnXbL307S1d56KnYCFMmDc.mft (raw, json)
Hash identifier:          BbycW/PcflkLD5UhdiHmZtm3KxL3DkBPcqzWATc7d+k=
Subject key identifier:   FB:EC:B8:4A:E6:69:7E:97:63:96:D9:BE:50:B1:14:56:0B:77:E9:57
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
Manifest number:          0FFA
Signing time:             Fri 21 Aug 2026 22:27:47 +0000
Manifest this update:     Fri 21 Aug 2026 22:27:47 +0000
Manifest next update:     Sun 20 Sep 2026 22:27:47 +0000
Files and hashes:         1: 8jVw8rHLeMJqCdH00JPd6Mj95-g.roa (hash: LaHsY6D/mtx6YPle+ZIwUCgUWaWgfxAo0JDb2kpldqM=)
                          2: EDhsjE2FftK02nHKRbl_4Ryrkgw.roa (hash: N17uj0k7iv8jy6Tjf9YfUd+TRe4DCiHfIcYefPvulLE=)
                          3: Eyjd-HqDbWu5Y300qcOeQKJgHE8.roa (hash: R+/ldXhbXVPzGAw2vGe+8KpNVlrGNsa8aNN8kQse+Gc=)
                          4: FZi2A_7DCNlm_p3AfdvYgrdNrM8.roa (hash: wJrzWk5swIy7b15UVFARuzexlQmID/rTwPNernWU/mk=)
                          5: ISglXUS_vDy6yPtEiVMVArf_LiA.roa (hash: 8ZES4LAup0liRjlJYA5Aj61jT+q4D+HRaLJCQsQEUas=)
                          6: KOXPBKEmCPP0OhEjMy0Tt8zw4aI.roa (hash: Vp/HiOTP/0jg1vF9/ODi60RSvxGnMwktL9tsKPSHdAk=)
                          7: MAZefK8_CMM2yhld6na6hxbMSPk.roa (hash: zF7zk+PHo9MxQYP/zPkdBNJYrkPkPrBjlsnUy3ukW30=)
                          8: PIy4kJLeiPgtNkqOEXfu6fHZjs8.roa (hash: jhWY7/9+Fk3PesbiV/54G3x0tdzgiSzxK8v4hiCyn+M=)
                          9: R5clv7C6Va7sPSHh5EBcaxxiINI.roa (hash: KsNSyihksB8g6p6l8yRDShxCoJN9z4xLbIQXe/Rd8TE=)
                          10: Tz5jlsnXbL307S1d56KnYCFMmDc.crl (hash: 279d/NGETVnqorhCmQljoK0SxAsG975rr6X262yDdfY=)
                          11: ZUWrKmSBfmc31KolcBzQmZviPG8.roa (hash: Es9xxZCpFN7mw8y5w1LFUzuM+KuK1xwiAXl1twsSYRk=)
                          12: cm4Hj3ux9Jey3atycoOHr66HtRQ.roa (hash: OaMW3by2as5LSyxzIqZ0Ns4TbDUNeOqEwl7amUZA3a4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 15 01:31:28 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=FBECB84AE6697E976396D9BE50B114560B77E957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:e8:47:06:11:36:3a:13:e8:2b:83:27:24:
                    33:90:25:ec:9b:3e:32:ad:81:15:60:c0:d6:08:a2:
                    69:ba:14:07:83:a8:56:8b:11:d0:ad:69:ef:36:7d:
                    76:0d:d6:20:c9:02:1f:6d:3a:44:ea:4a:fa:e8:6c:
                    61:1d:18:cf:ae:97:d2:5a:97:39:b5:ac:58:2e:8c:
                    ee:4f:f3:cc:fe:c3:b9:9e:59:d9:24:5c:65:38:da:
                    85:d2:21:83:3e:c3:d5:2a:9f:67:76:8f:ab:6a:70:
                    b5:dd:8a:86:e7:36:67:2b:b8:20:1d:1d:45:a7:66:
                    77:15:79:29:c3:19:05:91:51:49:fa:5a:bd:21:b4:
                    fd:a8:df:26:dc:66:6e:65:a9:f9:24:65:69:27:c4:
                    cd:20:d6:7a:b5:18:e1:08:3b:10:c7:46:7d:f1:bd:
                    4a:65:c9:a5:a2:73:a1:8c:be:4b:54:3e:61:d2:ac:
                    94:fe:3f:a9:1e:44:b0:71:6f:87:a3:e1:7a:86:da:
                    b3:19:31:2a:5c:5e:a7:92:02:8b:74:7b:2d:f6:95:
                    85:35:5c:b5:c7:04:ff:bf:8c:d7:7e:6d:10:08:38:
                    d9:80:2b:7a:fd:c0:a8:3f:65:b2:f5:d3:e5:2f:f4:
                    a3:fb:a2:48:d8:b0:ad:fb:ac:92:af:47:72:e3:ce:
                    71:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EC:B8:4A:E6:69:7E:97:63:96:D9:BE:50:B1:14:56:0B:77:E9:57
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:3a:50:dc:d2:c1:59:88:82:d3:03:ec:b0:32:c9:e5:b3:ef:
         4c:8c:d9:bb:70:9a:48:b8:54:da:d9:5a:78:64:c9:a6:e8:cf:
         45:fb:11:a8:4f:f7:bc:13:51:bf:33:b0:5f:ed:ab:d1:a4:cf:
         a2:2c:91:bc:b1:a9:08:df:ab:33:47:e4:42:0c:89:2c:58:50:
         b9:1b:6d:19:64:25:78:97:cf:46:00:1a:2f:5b:69:dc:43:7f:
         9c:ac:fd:7a:5a:3e:90:71:3b:1c:54:d2:9b:33:08:cf:85:81:
         bc:ac:a3:7e:75:84:b3:cb:3b:5e:2f:0b:33:ee:44:02:80:4e:
         47:fe:3d:1d:11:a6:21:5a:d5:02:93:75:ac:aa:ea:ad:71:47:
         3e:d3:f6:c9:02:66:46:68:e8:5a:4e:f5:47:22:a9:9c:bb:d2:
         1b:d1:42:95:a8:e1:eb:d0:72:94:c4:24:45:98:74:cd:18:9a:
         ed:b3:9b:e1:53:86:75:82:37:5a:a4:c2:54:d5:ff:a9:7c:71:
         b0:b7:87:01:2a:53:22:32:92:4f:f9:e5:9d:7b:0a:a3:9a:b4:
         1e:5e:ef:81:d1:b3:cc:15:33:ce:04:66:53:b9:d8:e2:9f:fd:
         24:04:89:1b:8d:bc:a5:d0:98:49:39:86:aa:cc:a1:d0:ca:b5:
         ea:72:dd:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:45:35 2026 by rpki-client