Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
File:                     37zT-LypGRXEUzosCmnD01suaI0.mft (raw, json)
Hash identifier:          I0TSlCwKeAb/L6RR26Kb1qRM0bZBxHWEMRhCB/LFOkk=
Subject key identifier:   7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
Manifest number:          0FF4
Signing time:             Sat 05 Sep 2026 05:26:58 +0000
Manifest this update:     Sat 05 Sep 2026 05:26:58 +0000
Manifest next update:     Mon 05 Oct 2026 05:26:58 +0000
Files and hashes:         1: 2voAA-2sbnChvr7TT5XgiJtLaIs.roa (hash: SjezSNNuKTPF+GSf0a5yLJvWpfSafWaTjiw8YFIoIyg=)
                          2: 37zT-LypGRXEUzosCmnD01suaI0.crl (hash: +DsBUiCXPVKU81+5/daSLYB0rGLbXPtEOE6RJ2giaZs=)
                          3: 3NCXj76yzS56t0ZVlcqjyIwi15A.roa (hash: Yrknuod8WFyGF7f5oaUj3mVLnpdJZwdFL131hVx1lQA=)
                          4: AIkt-_44zcozIlDjcG63tDF64zs.roa (hash: ArSXKb9yZ4oEEZXVBU9Lyj7aLJJqHvdjpOkvA5u50d0=)
                          5: BC_9E0BYCRCFfZQJHoj4toaRnV0.roa (hash: 2Kt1MBrD+4k/oQalNtF0aoiX/7Hrmpo8m+kqcWoZM2w=)
                          6: C3uPIHRI7WFvAQh_u8FOWHArHIU.roa (hash: DMjK/B4RLVF3eXCVSfezQe8M/gWkoZVAMnHPLsKKiJc=)
                          7: FsjWFoocuU26_WNJcvkA3RRoYNo.roa (hash: Tz0hzaGasyExWIx0D+kekx2dLrH/e1xnkpJzNLkCckA=)
                          8: Gj_3GK479XHWo2Wpsh6RYGBDv-A.roa (hash: RaG5LkTEc6TU25XxgOsRSoHtmeWmLLV8yxHbqlUsymI=)
                          9: QOJbJkmTOf-a6Qexfl6dZsOvNyY.roa (hash: 2VLW8aidESsaAmjv2pMSbdwb9fplkbNfZSJOXtuPGdQ=)
                          10: VSqRKmzGExDVCPG9UrTSq8lc7Cw.roa (hash: O7AHYKeWrAClpQeorBPcVPAiIsGMmKULSCMQHaLLxo4=)
                          11: g_z8Gc3w59VO82D20bAA2gd7jaI.roa (hash: MzqjIq38qETTrl5e4JeSdwY7LW8JPOdIXzfON8m31Bg=)
                          12: hB2-RwcBJycpb4-pIgxofsIazqg.roa (hash: srUc2vdsQ3xLfiCqJPRSzrzrW+qT9nZMDrqoDmWJNqA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Sep 2026 04:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Aug 15 01:32:42 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=7BE2E21D1CEE6637B7532027D10736DC92958DD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:d8:f6:56:01:c7:a9:1a:57:d7:a4:c8:f1:
                    d8:d4:ee:ab:ce:4d:48:cb:e6:16:f1:7b:c2:8d:ac:
                    1d:2c:3c:53:f8:d4:12:ef:78:8f:f8:6f:a9:51:5e:
                    f7:39:58:46:3d:5f:f5:c0:2d:69:f7:04:30:1a:86:
                    d2:09:60:89:16:8c:15:6c:48:47:6a:96:18:70:02:
                    e5:9d:07:17:ee:40:fe:1d:38:fb:b9:7c:a4:60:7c:
                    90:61:a8:b8:4c:af:b2:b8:9d:05:1d:11:51:a0:de:
                    9f:fa:d7:5a:1a:30:b5:01:a1:37:0e:cc:bf:21:76:
                    0f:e4:7e:18:02:4d:04:ec:f1:e6:a4:70:e4:ae:da:
                    92:56:bc:c8:2c:da:de:1d:cf:91:f3:06:9d:03:dc:
                    a6:7e:6e:da:c2:7c:90:a8:51:ac:a4:64:83:24:ee:
                    5f:57:bf:c7:87:eb:75:8c:d1:92:39:f1:0a:0a:f4:
                    6d:e1:82:e4:83:06:fb:a1:6c:43:e7:cf:46:10:f0:
                    02:96:dc:99:14:3e:f5:23:43:92:5f:46:80:ac:19:
                    6e:88:1f:61:ea:c6:68:c4:af:1f:e7:98:b4:49:10:
                    93:7d:19:fe:4a:f3:f4:16:51:a1:31:f9:55:3f:e4:
                    c7:ad:04:09:8b:02:c5:c4:39:54:21:af:10:15:90:
                    15:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:b5:61:cc:94:b4:f1:39:6b:50:1b:76:cb:a3:81:de:de:a5:
         c5:ad:7c:61:c2:73:1a:73:9d:bf:94:fb:b3:17:d9:b2:fe:71:
         c9:ac:6e:8f:fe:6e:f7:99:79:0b:e1:95:8d:da:8b:9e:4f:d5:
         be:48:91:3a:b5:57:2d:b6:c3:55:12:e8:60:f4:26:3f:9c:31:
         bd:fc:b7:cc:8c:7a:a3:b3:7e:7b:36:d1:0f:c0:f7:12:b1:9f:
         af:61:3c:ed:5a:d5:71:e0:84:19:31:47:ae:26:b7:56:9a:f9:
         43:f9:75:24:e5:93:2f:b0:ee:88:c1:e2:b9:d7:c9:a3:ba:e0:
         fc:55:3b:bb:93:8a:04:31:21:86:8c:e4:a5:4b:60:e4:43:3e:
         bb:80:62:32:96:36:d0:1f:48:b4:3e:ad:e1:6f:53:63:c9:ce:
         76:c5:ad:49:fe:a3:61:79:1e:e0:79:da:95:0f:62:85:e5:1d:
         87:bd:1c:ed:44:fc:09:f0:27:6c:92:d6:24:47:ca:57:80:56:
         05:f4:9d:cd:c9:9d:a4:08:5f:2d:77:4e:0f:ef:c0:0e:41:ad:
         0b:f3:61:25:51:5d:47:37:21:88:d8:e0:b9:c9:38:54:e2:95:
         9a:d6:da:a8:68:1a:61:b8:01:de:50:52:e3:a5:fd:7c:42:21:
         5c:4a:70:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:15:08 2026 by rpki-client