Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
File:                     sYFtHy1JTBfkW3qZBnCESrVprCs.mft (raw, json)
Hash identifier:          LA+blvTnNK1KP6yMYhynd/E+P0FV+VXNjFLYRnpxYow=
Subject key identifier:   A3:C5:DD:CC:0F:E4:83:D5:5C:F6:AD:AE:0E:7E:7F:FF:4D:12:64:C5
Authority key identifier: B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B
Certificate issuer:       /CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
Manifest number:          038E
Signing time:             Tue 07 Jul 2026 07:48:54 +0000
Manifest this update:     Tue 07 Jul 2026 07:48:54 +0000
Manifest next update:     Thu 06 Aug 2026 07:48:54 +0000
Files and hashes:         1: 8d0pDPDp9jhCE7cF6aEYPGK_z2Q.roa (hash: VfDbMs2JFqAFDe5rTGOwuemwprycjrDCejSIX9LcLb4=)
                          2: sYFtHy1JTBfkW3qZBnCESrVprCs.crl (hash: /t5h6XKyj12qcPaLLP9rh34LdVgYT9nNwEkJrsbzIQ0=)
                          3: yQKEvd4qwVU9R8bS5J8AgbQJ3Ew.roa (hash: 7z55gnucm4BxXkD5o9xT0ORUfi+V/fA/XchWkSeIqTc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1816D1F2D494C17E45B7A990670844AB569AC2B
        Validity
            Not Before: Jun 15 01:42:35 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=A3C5DDCC0FE483D55CF6ADAE0E7E7FFF4D1264C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:0d:16:81:65:fb:79:05:2d:42:26:a8:f4:
                    92:16:9c:a5:06:2d:db:a7:2a:52:e7:ff:ec:01:f7:
                    72:f9:99:37:c7:1b:62:47:1b:bc:5d:9e:24:8d:5c:
                    68:b0:12:0d:80:81:45:34:35:48:73:98:b7:c9:3c:
                    be:75:91:a3:df:ba:2e:5c:d1:0a:00:e5:af:43:5f:
                    55:3f:cc:3a:97:cb:8c:22:c1:59:15:6e:0a:3b:77:
                    00:24:80:55:51:23:62:2d:cf:2c:a7:e0:1c:08:79:
                    a0:64:e2:0a:20:1c:16:d9:f2:ac:b7:3e:c6:a1:41:
                    99:46:c1:5a:0c:26:4f:c2:56:35:6b:90:19:70:f8:
                    4e:8f:de:80:0a:39:f0:e2:77:5a:ee:70:f0:ce:28:
                    70:2d:41:8f:76:56:d6:2c:63:2b:64:38:38:a3:d2:
                    ac:34:4d:f1:aa:56:ed:5f:8b:b0:d7:ed:a8:19:28:
                    6b:41:3a:df:22:44:c9:ff:72:e9:bb:81:4e:60:ba:
                    cd:48:52:9a:bd:49:a5:b1:f0:e3:d7:5a:b0:04:ce:
                    65:39:de:5d:4c:52:29:d4:ab:5a:04:64:55:75:c6:
                    49:4c:59:1f:7c:42:48:74:d5:a0:87:ed:96:b1:a3:
                    cf:5e:de:b0:40:14:14:60:63:5a:32:60:a3:2c:83:
                    3e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C5:DD:CC:0F:E4:83:D5:5C:F6:AD:AE:0E:7E:7F:FF:4D:12:64:C5
            X509v3 Authority Key Identifier:
                keyid:B1:81:6D:1F:2D:49:4C:17:E4:5B:7A:99:06:70:84:4A:B5:69:AC:2B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sYFtHy1JTBfkW3qZBnCESrVprCs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30452/sYFtHy1JTBfkW3qZBnCESrVprCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:e3:38:62:ac:01:41:17:11:3b:64:e8:ba:23:3d:a1:17:
         f1:97:d8:97:75:52:16:09:65:f7:74:29:3e:8c:d2:54:6e:19:
         73:e1:bc:ab:8a:18:1b:1a:90:b3:4a:24:a4:f8:17:79:b8:b7:
         73:db:b8:2c:f6:41:4b:3d:cf:bb:cb:b8:e0:e8:b9:1b:0d:8d:
         59:a6:69:bc:41:d2:d3:79:c8:55:f9:95:fa:e5:f2:fb:f6:1d:
         d5:24:25:b0:cf:c7:de:8a:b0:85:d5:c0:24:44:1e:f4:83:95:
         8d:5d:21:95:05:65:2f:00:9d:fe:2f:57:b2:9c:4c:00:06:25:
         25:6b:ca:56:c6:ce:7e:aa:47:6b:69:22:b8:fb:ba:6b:8e:e4:
         d1:12:33:ca:58:3f:94:84:8f:8d:68:ad:5d:42:99:90:c3:2c:
         b6:15:bb:52:be:c1:71:4a:09:c4:b2:d4:a7:25:05:e7:c1:fe:
         2a:26:a9:0f:32:e1:c0:33:c2:76:85:96:18:41:70:b8:a0:16:
         87:ae:bd:63:14:cd:f6:41:e3:f0:08:ef:e3:82:29:07:48:0d:
         32:88:1a:7b:06:7f:8b:54:39:f2:b6:ab:cd:c0:81:35:2a:a2:
         6b:52:68:1e:ee:2d:75:a5:41:b9:17:c5:35:93:0f:77:fd:8e:
         2c:31:df:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:43:44 2026 by rpki-client