Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft
File:                     2KzED_GWEYwha_JCu0wuGtiiV4s.mft (raw, json)
Hash identifier:          9iF5VV9WSiFCqhMtFzlcvXUsxtaJsNK6+YSiIQgms74=
Subject key identifier:   9A:85:D8:9C:0C:E1:DC:FE:51:B4:09:8C:93:0A:38:E7:92:2C:53:87
Authority key identifier: D8:AC:C4:0F:F1:96:11:8C:21:6B:F2:42:BB:4C:2E:1A:D8:A2:57:8B
Certificate issuer:       /CN=D8ACC40FF196118C216BF242BB4C2E1AD8A2578B
Certificate serial:       02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2KzED_GWEYwha_JCu0wuGtiiV4s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft
Manifest number:          9A
Signing time:             Tue 07 Jul 2026 10:53:19 +0000
Manifest this update:     Tue 07 Jul 2026 10:53:19 +0000
Manifest next update:     Thu 06 Aug 2026 10:53:19 +0000
Files and hashes:         1: 2KzED_GWEYwha_JCu0wuGtiiV4s.crl (hash: prrl36YOA3KAv0ghly2dOUO0oXb24vET2yU2Yov7CXA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2KzED_GWEYwha_JCu0wuGtiiV4s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ACC40FF196118C216BF242BB4C2E1AD8A2578B
        Validity
            Not Before: Jun 15 01:36:29 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=9A85D89C0CE1DCFE51B4098C930A38E7922C5387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:f5:23:d8:d4:54:af:26:2f:e4:45:08:de:
                    59:a0:ec:2e:8c:12:56:29:db:3d:6d:ea:17:38:3e:
                    eb:a0:6d:17:59:e4:49:06:03:a5:e3:60:df:72:b7:
                    35:ed:07:b2:07:a7:d8:20:46:c1:5d:4b:42:ab:c3:
                    70:60:0c:99:bf:2b:03:a9:72:86:33:75:bd:8a:59:
                    21:88:34:3f:54:f3:bf:b3:08:81:a9:5d:cd:52:e5:
                    af:15:a5:41:e0:21:76:f3:e5:55:11:b4:fa:2e:d3:
                    c3:84:d2:1c:70:55:60:90:cf:26:c1:16:fb:9f:49:
                    a5:49:4b:6a:1b:25:aa:0a:6b:4a:f7:fd:38:47:a3:
                    87:d0:ec:79:9b:b0:84:bd:6f:03:4a:74:b1:8d:13:
                    42:e0:4f:f0:b9:d1:3a:21:3c:0d:e5:1d:b8:65:bd:
                    c0:24:9c:09:8d:f7:3b:9f:07:ea:59:ef:c5:09:f4:
                    82:79:97:e2:4c:ec:cd:bf:4a:ab:98:bc:45:50:3b:
                    c4:07:ba:e3:60:8f:ec:4d:10:95:6d:0a:a2:c2:c6:
                    11:ec:16:ca:f2:6e:0d:4e:d1:19:28:ef:ff:9c:96:
                    6e:b0:2d:87:fe:e2:24:66:c6:f6:fd:5f:b3:7d:83:
                    0b:61:1b:84:ac:e0:72:dc:26:eb:76:20:6f:91:b2:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:85:D8:9C:0C:E1:DC:FE:51:B4:09:8C:93:0A:38:E7:92:2C:53:87
            X509v3 Authority Key Identifier:
                keyid:D8:AC:C4:0F:F1:96:11:8C:21:6B:F2:42:BB:4C:2E:1A:D8:A2:57:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2KzED_GWEYwha_JCu0wuGtiiV4s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4350/2KzED_GWEYwha_JCu0wuGtiiV4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:d9:e0:fb:8a:f7:46:ac:65:1d:f8:e1:f2:78:71:e2:1b:2b:
         45:ae:46:ae:0b:e1:22:8a:b8:d1:4b:3a:7d:1d:3c:56:46:5d:
         bc:14:41:38:8c:44:ea:5a:37:f3:5d:7a:7c:fa:9a:4e:18:2b:
         78:17:a8:72:0c:eb:cc:7f:89:1d:1b:eb:14:af:a6:15:ee:15:
         99:8b:89:88:3d:1e:54:d3:64:f2:a2:9a:a1:57:8c:cd:3d:e1:
         53:2c:c5:1b:a9:ff:32:91:6e:6f:bd:96:be:31:04:cb:8c:88:
         72:ea:e4:ba:a9:95:3e:4a:d0:f8:00:45:67:cd:99:9b:b6:ad:
         72:c6:3e:fe:10:e6:6f:bb:e2:6a:60:f4:c0:73:4b:e6:25:68:
         59:4f:56:0c:c6:e4:45:a4:35:44:f5:e8:00:d3:fa:64:0e:ba:
         22:52:45:e7:21:03:0e:56:41:8b:e3:8f:92:42:3f:69:9c:22:
         8b:2b:39:a8:a8:4a:1e:26:8a:ca:d6:be:25:47:9e:f5:b5:ce:
         33:ca:7c:04:4b:96:8b:cd:68:05:12:32:5d:e8:8a:18:ff:76:
         d4:af:77:ab:2d:4b:4e:36:87:e1:46:8b:e8:e1:20:4e:2a:14:
         5e:32:0e:b4:c2:21:79:72:9d:e5:af:4d:e1:01:fe:6f:3d:46:
         3d:2a:f9:bc
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEOEFD
QzQwRkYxOTYxMThDMjE2QkYyNDJCQjRDMkUxQUQ4QTI1NzhCMB4XDTI2MDYxNTAx
MzYyOVoXDTI3MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOUE4NUQ4OUMwQ0UxRENG
RTUxQjQwOThDOTMwQTM4RTc5MjJDNTM4NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOFI9SPY1FSvJi/kRQjeWaDsLowSVinbPW3qFzg+66BtF1nkSQYD
peNg33K3Ne0Hsgen2CBGwV1LQqvDcGAMmb8rA6lyhjN1vYpZIYg0P1Tzv7MIgald
zVLlrxWlQeAhdvPlVRG0+i7Tw4TSHHBVYJDPJsEW+59JpUlLahslqgprSvf9OEej
h9DseZuwhL1vA0p0sY0TQuBP8LnROiE8DeUduGW9wCScCY33O58H6lnvxQn0gnmX
4kzszb9Kq5i8RVA7xAe642CP7E0QlW0KosLGEewWyvJuDU7RGSjv/5yWbrAth/7i
JGbG9v1fs32DC2EbhKzgctwm63Ygb5GyMGcCAwEAAaOCAfQwggHwMB0GA1UdDgQW
BBSahdicDOHc/lG0CYyTCjjnkixThzAfBgNVHSMEGDAWgBTYrMQP8ZYRjCFr8kK7
TC4a2KJXizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDM1MC8yS3pFRF9HV0VZd2hhX0pDdTB3dUd0aWlWNHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8yS3pFRF9HV0VZd2hhX0pDdTB3dUd0
aWlWNHMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNDM1MC8yS3pFRF9HV0VZd2hhX0pDdTB3dUd0aWlWNHMubWZ0MBUG
CCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw
BgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdng+4r3RqxlHfjh8nhx4hsrRa5G
rgvhIoq40Us6fR08VkZdvBRBOIxE6lo38116fPqaThgreBeocgzrzH+JHRvrFK+m
Fe4VmYuJiD0eVNNk8qKaoVeMzT3hUyzFG6n/MpFub72WvjEEy4yIcurkuqmVPkrQ
+ABFZ82Zm7atcsY+/hDmb7viamD0wHNL5iVoWU9WDMbkRaQ1RPXoANP6ZA66IlJF
5yEDDlZBi+OPkkI/aZwiiys5qKhKHiaKyta+JUee9bXOM8p8BEuWi81oBRIyXeiK
GP921K93qy1LTjaH4UaL6OEgTioUXjIOtMIheXKd5a9N4QH+bz1GPSr5vA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 12:37:15 2026 by rpki-client