Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
File:                     xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json)
Hash identifier:          I9E59LJQmod/1aPwFRZ0q85RKj+SF82IrFxKlRvSwgA=
Subject key identifier:   70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
Manifest number:          0EBF
Signing time:             Tue 07 Jul 2026 08:59:32 +0000
Manifest this update:     Tue 07 Jul 2026 08:59:32 +0000
Manifest next update:     Thu 06 Aug 2026 08:59:32 +0000
Files and hashes:         1: nZYiGSL4CpoQ73LIz2CWszwcVWc.roa (hash: bB2dQxAai+xnEi/IU5mDLRiueT8CYeI7md5CLX7jeJw=)
                          2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: mbLru/juuWCPie4Vaid+uMLMcir7PLzJHy5Cy6awyjU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Jun 15 01:43:53 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=70F776851E8F32323433068C6155794963FDEA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb:
                    7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf:
                    b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76:
                    06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01:
                    8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59:
                    8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72:
                    a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80:
                    96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be:
                    30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07:
                    c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6:
                    9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2:
                    9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24:
                    8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79:
                    4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb:
                    1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7:
                    38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5:
                    92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:e1:e7:63:b6:dd:cf:13:ac:ff:40:e7:23:05:32:0c:b1:e8:
         68:43:59:5b:92:cb:d3:f8:b6:91:f1:cd:81:47:3d:c1:38:55:
         5b:34:65:92:69:9e:5b:1e:09:e6:5a:cb:ac:fd:3f:d0:f4:4c:
         aa:e0:72:de:4e:5c:a1:dc:a9:85:49:24:f8:ed:cf:92:af:0e:
         e8:69:7f:a1:a0:8e:3a:1c:56:7f:98:e0:eb:3a:a1:e7:09:88:
         bd:d0:a5:0d:a2:5b:ee:f1:3d:da:45:f0:62:96:bb:02:2c:a8:
         0b:fb:b4:fd:ae:e8:5f:0c:b1:5a:69:5c:2b:69:21:df:ba:bd:
         76:2c:2e:47:83:5b:d4:2a:1f:b9:9a:db:43:81:3b:7c:27:db:
         ba:95:4a:4d:6c:c7:e1:e4:fb:fe:a1:c5:25:20:96:ec:4c:36:
         f8:5c:27:65:6e:13:b9:ba:28:d3:99:e7:6f:d6:62:47:1a:9a:
         2f:7b:c0:f6:d0:1a:90:90:44:d7:30:f2:e2:1b:b1:76:08:2d:
         bf:a8:83:84:eb:a6:1b:c8:42:56:f2:c9:02:ed:bb:1b:67:d8:
         26:a3:f1:21:c6:11:4a:47:ea:77:4a:a0:8e:e9:89:ec:02:02:
         3c:2f:dd:24:05:8a:cf:a4:78:3a:0f:f2:91:92:5d:4c:33:ff:
         4f:49:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:41:35 2026 by rpki-client