Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
File:                     ZxeEwss7hIfKdHJqZfS0R74BLFY.mft (raw, json)
Hash identifier:          lzNPw0ECvHXeFC2XN0lyhE5AOPB2ajIK+Z1kn5a+U5Q=
Subject key identifier:   D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
Authority key identifier: 67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56
Certificate issuer:       /CN=671784C2CB3B8487CA74726A65F4B447BE012C56
Certificate serial:       28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
Manifest number:          0FD2
Signing time:             Sat 12 Sep 2026 11:38:26 +0000
Manifest this update:     Sat 12 Sep 2026 11:38:26 +0000
Manifest next update:     Mon 12 Oct 2026 11:38:26 +0000
Files and hashes:         1: VtQ_A-M7aRqFVMNAP7ay81gMHmA.roa (hash: Z0TYvVeLoSSafcF7gRMejLOsAGDuhmvTZY+vf6GWYOw=)
                          2: ZxeEwss7hIfKdHJqZfS0R74BLFY.crl (hash: LeOkDKXTrG3mIDiE61uIGmYBvr09DOCjvajRvBF0qII=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Sep 2026 14:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671784C2CB3B8487CA74726A65F4B447BE012C56
        Validity
            Not Before: Aug 15 01:33:47 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=D7EA3D60908126429271487E225B375F708A47CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:15:0c:31:7d:0a:00:4c:0d:72:7c:46:63:
                    bd:ab:da:f6:c6:c1:8e:d3:40:d4:e4:d9:44:60:fc:
                    21:f0:06:1f:3f:2d:61:0d:da:60:64:a7:fd:ca:aa:
                    34:89:41:a0:70:96:63:1b:f8:27:11:17:47:2f:db:
                    92:3a:57:6a:99:c4:ce:26:15:a5:ab:f7:94:b9:10:
                    b5:a6:a8:4a:4d:dd:f9:ff:43:19:40:4b:85:89:f3:
                    c3:07:16:63:88:0b:49:05:3c:1f:b1:a6:15:5b:b2:
                    8f:b1:fa:10:0d:a0:b9:db:dd:d5:45:f7:08:2a:8a:
                    6c:15:25:91:ac:38:e4:96:33:32:49:90:43:a8:64:
                    a6:dc:a8:d8:69:c9:3b:45:50:85:0a:ba:3f:db:0a:
                    34:fc:e7:7a:96:02:73:73:22:57:7a:c1:5b:96:e6:
                    11:68:3a:c8:e5:d8:e0:c6:66:16:f9:7b:c4:78:8f:
                    cd:ca:cd:63:98:78:74:ca:65:80:04:89:9c:71:c3:
                    6a:a1:79:53:f2:f1:ec:7f:ce:a8:56:14:aa:0b:22:
                    0a:8e:da:3b:93:09:db:2e:99:3a:aa:71:6f:83:98:
                    a6:76:3a:56:80:6d:fe:bc:7c:20:b5:62:af:94:65:
                    f6:48:57:38:b6:5b:a9:26:a8:bf:a6:64:68:bf:2f:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
            X509v3 Authority Key Identifier:
                keyid:67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:77:0b:e7:2f:87:61:b2:11:8f:aa:b8:3b:06:ca:ff:6e:
         a6:a0:33:02:21:6d:b0:09:91:26:8b:a6:ab:7e:5f:23:e9:89:
         d6:2d:21:45:70:29:30:7b:30:5e:37:55:b9:e1:6e:08:b4:fe:
         27:c4:23:fb:17:01:32:34:ad:81:fb:fe:06:f4:99:c7:90:fc:
         96:5e:dd:ab:b1:92:d9:12:f3:ad:ff:a6:e8:2d:e9:30:79:9e:
         d2:fa:2e:08:66:c6:3e:b6:8e:c4:bc:27:af:8b:56:60:2a:fa:
         26:92:8e:a4:43:7f:47:d0:31:d2:7a:27:93:41:d1:e1:02:26:
         62:9c:95:ef:3e:8f:74:3c:eb:51:63:08:61:f0:3a:6e:96:35:
         ff:cd:fd:2b:9a:c6:67:2a:e9:2c:01:e1:fd:75:a3:06:74:21:
         81:5d:ae:5f:e0:4e:0a:8c:36:f5:ee:97:81:59:77:be:80:5a:
         df:aa:0c:18:33:5a:d5:08:9e:4a:c1:bb:f7:91:bd:88:33:b1:
         de:99:07:50:67:85:ea:0d:1d:be:29:76:79:a8:a8:d1:32:b0:
         b7:7c:66:69:9b:16:46:74:35:fc:b3:e8:7d:70:ed:36:7c:f2:
         55:ca:f7:1c:a3:71:75:e0:5b:c8:dc:0c:6c:89:20:96:10:d7:
         94:67:dc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 16:59:42 2026 by rpki-client