Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft
File:                     2KzED_GWEYwha_JCu0wuGtiiV4s.mft (raw, json)
Hash identifier:          iSYhp19qoYpzzx7w4Gd0tpqDwe55cFKSVnafSPzjO98=
Subject key identifier:   9A:85:D8:9C:0C:E1:DC:FE:51:B4:09:8C:93:0A:38:E7:92:2C:53:87
Authority key identifier: D8:AC:C4:0F:F1:96:11:8C:21:6B:F2:42:BB:4C:2E:1A:D8:A2:57:8B
Certificate issuer:       /CN=D8ACC40FF196118C216BF242BB4C2E1AD8A2578B
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2KzED_GWEYwha_JCu0wuGtiiV4s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft
Manifest number:          01A9
Signing time:             Fri 21 Aug 2026 19:40:52 +0000
Manifest this update:     Fri 21 Aug 2026 19:40:52 +0000
Manifest next update:     Sun 20 Sep 2026 19:40:52 +0000
Files and hashes:         1: 2KzED_GWEYwha_JCu0wuGtiiV4s.crl (hash: a+T98dgl6qRZYpHN0bo2OkWPx2MAXizYra1Ngy1WEYM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2KzED_GWEYwha_JCu0wuGtiiV4s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ACC40FF196118C216BF242BB4C2E1AD8A2578B
        Validity
            Not Before: Aug 15 01:41:59 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=9A85D89C0CE1DCFE51B4098C930A38E7922C5387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:f5:23:d8:d4:54:af:26:2f:e4:45:08:de:
                    59:a0:ec:2e:8c:12:56:29:db:3d:6d:ea:17:38:3e:
                    eb:a0:6d:17:59:e4:49:06:03:a5:e3:60:df:72:b7:
                    35:ed:07:b2:07:a7:d8:20:46:c1:5d:4b:42:ab:c3:
                    70:60:0c:99:bf:2b:03:a9:72:86:33:75:bd:8a:59:
                    21:88:34:3f:54:f3:bf:b3:08:81:a9:5d:cd:52:e5:
                    af:15:a5:41:e0:21:76:f3:e5:55:11:b4:fa:2e:d3:
                    c3:84:d2:1c:70:55:60:90:cf:26:c1:16:fb:9f:49:
                    a5:49:4b:6a:1b:25:aa:0a:6b:4a:f7:fd:38:47:a3:
                    87:d0:ec:79:9b:b0:84:bd:6f:03:4a:74:b1:8d:13:
                    42:e0:4f:f0:b9:d1:3a:21:3c:0d:e5:1d:b8:65:bd:
                    c0:24:9c:09:8d:f7:3b:9f:07:ea:59:ef:c5:09:f4:
                    82:79:97:e2:4c:ec:cd:bf:4a:ab:98:bc:45:50:3b:
                    c4:07:ba:e3:60:8f:ec:4d:10:95:6d:0a:a2:c2:c6:
                    11:ec:16:ca:f2:6e:0d:4e:d1:19:28:ef:ff:9c:96:
                    6e:b0:2d:87:fe:e2:24:66:c6:f6:fd:5f:b3:7d:83:
                    0b:61:1b:84:ac:e0:72:dc:26:eb:76:20:6f:91:b2:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:85:D8:9C:0C:E1:DC:FE:51:B4:09:8C:93:0A:38:E7:92:2C:53:87
            X509v3 Authority Key Identifier:
                keyid:D8:AC:C4:0F:F1:96:11:8C:21:6B:F2:42:BB:4C:2E:1A:D8:A2:57:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2KzED_GWEYwha_JCu0wuGtiiV4s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b2:62:e7:fb:a0:1d:da:62:f4:46:c1:d8:58:fb:03:a3:67:
         92:30:5f:ba:b3:ac:33:1e:9a:83:89:0e:88:cf:4d:9d:f2:30:
         8b:d2:23:65:c9:15:d8:8b:97:47:d0:30:86:ed:28:4a:fa:0d:
         5f:e5:41:72:be:2a:1e:eb:f9:dc:41:24:08:cd:ef:d4:41:cf:
         3f:63:ae:c7:6a:22:9b:63:f9:07:1a:31:ef:d2:44:28:0c:62:
         fc:90:d5:2c:45:88:75:f1:b2:80:66:07:e4:e9:0e:a1:8b:cc:
         79:1d:93:f1:62:65:4f:e6:fd:8b:7b:40:de:c5:0e:1b:da:31:
         18:3a:30:d1:05:d1:41:34:c2:2d:2b:cd:84:64:b0:93:2b:3f:
         7a:89:99:42:96:a9:61:bc:e0:67:3b:3f:d1:05:45:6d:b0:30:
         59:e0:38:75:e2:c8:1b:ca:2a:fe:ae:81:89:43:fb:73:c0:de:
         4d:b3:ce:9f:9c:3b:04:6e:1b:bc:a3:18:49:fc:3a:0a:6c:ff:
         12:60:27:47:14:f4:89:67:e3:d1:9f:29:c4:9f:85:ad:c5:7a:
         39:0b:84:68:6c:06:8e:04:ee:72:47:3a:be:c8:2b:41:fa:91:
         e4:f4:17:d9:0e:93:99:ab:07:cc:a1:e9:7b:7c:8e:7c:3f:98:
         36:b8:44:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:48:17 2026 by rpki-client