Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
File:                     s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft (raw, json)
Hash identifier:          uNSC9aNm9zzZX5sryEpBoLBLcct7k9x35b541B49jaQ=
Subject key identifier:   B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90
Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27
Certificate issuer:       /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
Certificate serial:       11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
Manifest number:          0761
Signing time:             Fri 21 Aug 2026 23:29:54 +0000
Manifest this update:     Fri 21 Aug 2026 23:29:54 +0000
Manifest next update:     Sun 20 Sep 2026 23:29:54 +0000
Files and hashes:         1: k3kDfWcytzlgd8c47PhnECGP9Fc.roa (hash: hNzZZIvUuT7uj1kZD1oYd8upquRUGD//gbXJckEE/Qc=)
                          2: ri_ww_HykS1fson-wNxnBg7AksA.roa (hash: XY69wIxE8jQjT74aQja1mf6Xuy8WWQx/vk00oRH/6ng=)
                          3: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl (hash: /ixNCIN3arJKFBp8LfGDI0DD+uNIoKGsinwlMcsM0Wg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527
        Validity
            Not Before: Aug 15 01:34:15 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=B41B49F7B894A663AC74E0BB78BEE3B69CA93D90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:40:3c:fb:8a:24:71:be:b8:c5:f4:60:8b:92:
                    8a:7f:53:ea:cc:5b:61:7a:7d:f3:30:aa:4b:ff:ea:
                    40:7f:ed:54:63:ee:a3:29:e9:49:a5:90:82:0c:48:
                    b4:66:e7:55:37:93:cf:19:f9:3e:0f:7c:e1:92:cb:
                    63:bc:9c:75:a5:32:4b:a6:62:fd:72:46:1f:38:ac:
                    13:f5:9c:0c:9b:f2:8a:8b:43:25:3d:9c:89:13:52:
                    5d:ad:06:03:bf:50:b7:43:fc:15:64:7d:8c:17:20:
                    23:d9:4f:90:02:c7:44:e9:db:ad:03:ab:ed:5a:bf:
                    f1:d3:f7:eb:5b:29:3e:61:7f:ce:22:fc:10:bb:41:
                    d0:09:15:44:e8:1d:f4:fd:3b:79:50:81:e6:78:85:
                    e6:bf:b5:32:7b:7b:f0:72:a2:69:95:c1:87:a8:72:
                    fe:74:aa:93:c9:12:c9:c4:26:4f:7b:28:bb:8e:fe:
                    45:e6:3e:16:bd:bd:04:04:d8:03:04:eb:34:81:7c:
                    6a:5c:25:0b:0d:b7:a1:7b:bf:72:fc:fd:97:c8:d8:
                    44:19:7c:3c:f2:a6:3e:5a:3e:1e:d0:90:83:6b:00:
                    d3:66:55:b2:01:b7:30:22:6a:47:4d:7c:d7:04:9d:
                    16:9b:fa:b8:40:2e:40:47:f6:8f:0e:14:cf:6b:75:
                    4f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90
            X509v3 Authority Key Identifier:
                keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:9c:64:1f:81:28:63:a9:5a:ff:11:bf:22:10:5b:f1:88:
         d0:79:aa:6e:d1:d1:55:82:55:9b:6c:9c:41:b9:a7:a2:2c:d0:
         b4:aa:40:21:2f:04:d5:c1:53:2b:02:a0:9a:1c:89:ef:67:48:
         35:0f:c5:a8:ef:2e:11:f9:db:d4:57:7a:b4:5e:55:83:69:2d:
         9c:94:89:6a:5c:a5:6b:54:02:d2:44:b6:27:2c:3d:a5:44:d9:
         45:32:75:ee:c7:e5:9d:9a:7c:01:0d:8b:4c:1c:f5:d5:2c:cf:
         f5:29:0b:cf:16:23:7c:8f:3b:7f:6f:85:da:c3:4f:af:f0:6a:
         6d:15:81:12:ed:bd:a8:e4:ed:8b:1d:a1:85:9c:a3:87:e4:2f:
         07:e2:0c:6d:ce:0f:ac:f2:37:ff:a4:47:e9:6b:ba:b2:b1:8f:
         fa:89:20:30:d7:b7:ac:00:be:1c:35:92:3d:3c:af:1c:d9:9f:
         23:84:d8:e7:f2:10:84:0e:09:47:df:65:83:e9:ec:f8:b0:52:
         af:a6:d5:3d:a7:70:ed:88:55:45:5a:fe:94:b6:6f:48:8e:98:
         19:46:6e:cf:45:a7:6c:37:1e:a6:22:50:74:e5:fd:48:75:4e:
         d7:c0:13:94:9d:02:5f:37:e8:41:ff:28:dd:16:51:52:3f:cb:
         37:90:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:43:08 2026 by rpki-client