Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
File:                     NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json)
Hash identifier:          /uVPZcR3hnBoxt1quabUl7soU03JYRn7pgFqZrHXAOI=
Subject key identifier:   65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
Manifest number:          0FAC
Signing time:             Fri 21 Aug 2026 22:55:55 +0000
Manifest this update:     Fri 21 Aug 2026 22:55:55 +0000
Manifest next update:     Sun 20 Sep 2026 22:55:55 +0000
Files and hashes:         1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: ELREzQ6mKjMXZyiEc0EC+bPCGRaUWlQx7i+Oifg/vBg=)
                          2: i67bohZvhtzwiFLY2AmxcyzmeBM.roa (hash: nSYbppFw+A2pDL3/py7yK1dgWXA0kzPeCg9p/TuL61U=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: Aug 15 01:32:17 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc:
                    b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9:
                    d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70:
                    98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c:
                    89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81:
                    45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe:
                    5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89:
                    74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87:
                    0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd:
                    eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18:
                    31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a:
                    1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1:
                    d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c:
                    bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f:
                    27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6:
                    26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c:
                    62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:5a:1a:b3:ca:44:32:08:fc:0f:54:99:05:85:ac:61:28:
         0a:5a:03:9b:4e:1e:47:4e:1d:9d:66:6c:6e:15:0c:86:1b:78:
         1a:f6:aa:01:a4:7a:bb:53:31:0d:40:1b:cf:70:de:74:84:15:
         c4:27:f8:df:f2:f8:f8:f1:be:44:90:ed:33:8b:b4:8a:30:92:
         2f:15:9b:ba:02:68:ff:8b:3c:40:da:68:5f:04:1b:0d:5c:46:
         bf:76:94:bb:1d:9e:92:3a:86:2f:ab:ef:66:85:52:a2:41:42:
         b2:4d:ab:e9:bc:28:37:b6:ee:3c:7f:81:c9:ff:ee:f8:a5:71:
         2b:3c:66:b8:a9:0e:2d:a1:76:d8:c8:7c:f1:1b:5d:84:f4:b1:
         d2:0f:0c:01:9b:28:9b:e6:b0:2a:c8:70:d0:6e:c3:27:17:a8:
         5d:51:87:fe:d2:26:45:b0:2a:f3:a9:cc:0b:88:01:c7:cf:06:
         4a:c4:a2:62:ff:d6:87:ae:e5:50:6a:38:76:c7:fa:e2:12:76:
         83:95:4c:1b:f9:20:e4:76:0e:c6:b5:8e:17:a9:c3:b8:3f:06:
         cc:4b:16:6e:e9:7f:66:6c:2a:46:f4:98:e7:b1:2d:8d:8e:f2:
         cc:e6:cd:17:ac:81:2e:3b:cc:fb:bb:5f:85:5c:0b:4d:57:b5:
         4b:35:65:fd
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNjQ0
N0M2OUZFOTM0MzBBNEVGNUVCMjE3QzQwOUVCQjVCNjc2QkI5MB4XDTI2MDgxNTAx
MzIxN1oXDTI3MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNjUwQkUxMjQ0MTYyMERG
OTdCRUZERkI3RjA1RDYxRUJCREIzREM3NjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ1ec1emP3PKVNJfI5bcuRkTA7EfnOPOgysFpuK52Els8WLu5qbq
iiDRCe5wmE0vv5Zf/DPK30pXPVlMiW/SvC19h9W240i8mBiBRd8ogiPX/5021vnI
ZIT+XGJ9w//34RBA8TRRzM+JdNGlmCZiFRV7MPjmRryHDRGgwtSH+vHL7cMUFYe9
62jOidC3kpUcEK9trbQYMUDbVjdInjw6zTXgPkQqHt9QT9GLO7u9fjyM8e6x1uhV
8PKxQ6jL68sYIGdsveTTgp/tSXSN7d9MVYgvJ0RLBGR8QPhZG6GjVB72JpIlYVYz
a4otO4NOS5h8YgLcTRZq63EvM7kFsiYPUMsCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRlC+EkQWIN+Xvv37fwXWHrvbPcdjAfBgNVHSMEGDAWgBQ2RHxp/pNDCk716yF8
QJ67W2druTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMzgvTmtSOGFmNlRRd3BPOWVzaGZFQ2V1MXRuYTdrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTmtSOGFmNlRRd3BPOWVzaGZFQ2V1
MXRuYTdrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTM4L05rUjhhZjZUUXdwTzllc2hmRUNldTF0bmE3ay5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOI1oas8pEMgj8D1SZBYWsYSgK
WgObTh5HTh2dZmxuFQyGG3ga9qoBpHq7UzENQBvPcN50hBXEJ/jf8vj48b5EkO0z
i7SKMJIvFZu6Amj/izxA2mhfBBsNXEa/dpS7HZ6SOoYvq+9mhVKiQUKyTavpvCg3
tu48f4HJ/+74pXErPGa4qQ4toXbYyHzxG12E9LHSDwwBmyib5rAqyHDQbsMnF6hd
UYf+0iZFsCrzqcwLiAHHzwZKxKJi/9aHruVQajh2x/riEnaDlUwb+SDkdg7GtY4X
qcO4PwbMSxZu6X9mbCpG9JjnsS2NjvLM5s0XrIEuO8z7u1+FXAtNV7VLNWX9
-----END CERTIFICATE-----
Generated at Sat Aug 22 00:45:48 2026 by rpki-client