Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.mft
File:                     bN5CfYSZqDSfFydfS6OBRUYVoL4.mft (raw, json)
Hash identifier:          lU1mYqLXjjn+t/Ti2j5OHkZC4M0S9RNMfhE3EsxN3Xo=
Subject key identifier:   56:2D:BD:09:96:6E:1F:A9:AD:12:1C:93:0C:86:98:A2:C6:63:41:64
Authority key identifier: 6C:DE:42:7D:84:99:A8:34:9F:17:27:5F:4B:A3:81:45:46:15:A0:BE
Certificate issuer:       /CN=6CDE427D8499A8349F17275F4BA381454615A0BE
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bN5CfYSZqDSfFydfS6OBRUYVoL4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.mft
Manifest number:          0349
Signing time:             Wed 28 Oct 2026 00:45:47 +0000
Manifest this update:     Wed 28 Oct 2026 00:45:47 +0000
Manifest next update:     Fri 27 Nov 2026 00:45:47 +0000
Files and hashes:         1: 6-LdQ5Ek9VnbuMX3xDnYOufaeUU.roa (hash: Wb/wmz+uRPIrgB4oTrgXKj9OWwa19X93BDvWg5I8HAk=)
                          2: QXllRvXXOa3G2Nkipb6AP-Z4WUI.roa (hash: 9HWhckHE5jw7qxpl0V68V0NTNmCxfhh2aqQxxEQ3PWY=)
                          3: bN5CfYSZqDSfFydfS6OBRUYVoL4.crl (hash: 5akrZqzi1qD4w3QhQnjN0d27HFmLNML25I2ubRTWWqc=)
                          4: w_qY9cTWmez7seuj74rMPphGOk4.roa (hash: MAmcv9HdqQInIq7CDNUe2SJAILWjnkhEOxl+FT0Vo6M=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bN5CfYSZqDSfFydfS6OBRUYVoL4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 15:06:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CDE427D8499A8349F17275F4BA381454615A0BE
        Validity
            Not Before: Oct 15 01:34:58 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=562DBD09966E1FA9AD121C930C8698A2C6634164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:13:06:ab:58:f5:42:6a:c6:09:de:a2:84:
                    41:47:92:40:73:8a:3b:60:93:ef:b8:a7:5b:46:09:
                    d9:b0:c5:30:b2:d6:89:e4:e5:2f:0c:1f:35:bb:e9:
                    c4:ff:81:4b:8d:02:52:a9:f4:3a:c7:74:35:0b:a1:
                    b3:9d:c0:0f:a9:9b:33:6a:b8:4c:b0:e4:5b:41:d3:
                    76:9c:65:f0:dd:da:54:26:d5:e5:67:56:9f:8d:0e:
                    15:71:0e:5f:b7:70:21:59:94:05:4f:45:12:fc:fa:
                    ea:30:72:77:29:cc:98:18:49:4b:29:d1:53:b2:e7:
                    77:db:bf:c7:95:58:18:b5:77:3a:99:ad:7d:93:d7:
                    07:06:d9:c7:e9:ef:53:bc:c0:26:dd:ce:e0:97:16:
                    b7:d1:8d:95:41:2d:06:85:99:4c:92:a1:52:c0:e9:
                    65:da:c7:7e:04:9b:3b:55:83:4e:45:00:1f:71:5d:
                    37:4c:94:97:f6:23:64:9c:ba:bc:bb:0b:49:fd:5e:
                    7b:f6:b9:42:ff:2f:af:68:93:1d:cd:63:62:53:a0:
                    0c:a2:34:23:3d:0a:db:27:bf:5b:3b:5b:d9:73:af:
                    33:ee:9d:be:d6:cc:6c:31:ca:36:6b:cf:40:dd:d1:
                    b2:09:30:ef:92:5e:bc:b0:91:69:fc:a5:89:bd:85:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2D:BD:09:96:6E:1F:A9:AD:12:1C:93:0C:86:98:A2:C6:63:41:64
            X509v3 Authority Key Identifier:
                keyid:6C:DE:42:7D:84:99:A8:34:9F:17:27:5F:4B:A3:81:45:46:15:A0:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bN5CfYSZqDSfFydfS6OBRUYVoL4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/566/bN5CfYSZqDSfFydfS6OBRUYVoL4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:60:80:2a:09:c2:e9:93:54:c5:17:1d:43:f7:73:05:be:
         45:97:20:e7:69:f8:01:be:77:bf:82:84:11:96:6d:5f:21:21:
         f3:01:ac:40:b9:85:d6:31:e1:41:7b:ea:7e:14:0b:b8:3a:71:
         af:bd:80:a1:da:d0:e2:e3:c8:00:7d:d1:d8:68:53:05:44:1c:
         7e:80:24:ed:a6:dc:c5:38:86:61:fd:3a:ce:23:a2:20:45:78:
         46:57:c6:60:43:9d:88:32:74:ce:d8:a9:a9:8c:f7:84:db:db:
         7e:d5:e9:90:d0:2f:b2:a8:07:cc:0a:fc:f5:c1:97:b2:86:27:
         8b:3b:3c:7a:7a:ec:ba:1b:3b:6b:46:aa:4c:d6:c9:c9:e7:c2:
         80:c3:35:c0:41:73:57:81:f8:f0:f1:20:2c:26:59:dc:19:9c:
         ee:b7:d5:1d:e0:5e:5a:9d:0d:d5:11:d5:d0:5c:39:ca:d3:c7:
         5e:c4:be:24:7a:7e:6b:5f:b3:04:7d:60:1f:ac:81:f1:2b:56:
         4a:48:50:f8:78:b6:da:0e:a1:43:46:c9:dd:9f:d1:50:eb:13:
         f9:b4:00:8c:19:23:f5:62:25:73:3c:a6:87:db:2a:82:b6:96:
         e7:46:ca:f9:bd:f5:17:a7:02:32:c6:a9:4c:a8:68:db:33:ed:
         99:79:94:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:00 2026 by rpki-client