Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
File:                     4SW0OnWuMTJppgY45mMXlwtQtdM.mft (raw, json)
Hash identifier:          VbV8YkhmXOq/b8s98gbAIdKUOgH5Zgl80kBL9pXlVYI=
Subject key identifier:   2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       29
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
Manifest number:          0E42
Signing time:             Tue 07 Jul 2026 10:52:47 +0000
Manifest this update:     Tue 07 Jul 2026 10:52:47 +0000
Manifest next update:     Thu 06 Aug 2026 10:52:47 +0000
Files and hashes:         1: 4SW0OnWuMTJppgY45mMXlwtQtdM.crl (hash: FDkSuP/OZJQDVrz2heg681PFg6dCPA6IuGxaGZPwBTc=)
                          2: PpfivDYGT2J778t3GPN_GAU9nzU.roa (hash: HqjnMWktZtaSa23HTrNUbCHZAo4jYtepCM953NQ0ajQ=)
                          3: wTdc-fWgs3IweBf94dGKPDF3jd0.roa (hash: CJd0LjoMSoBAJg5KuBQEQksRwf2WIbz4jLOCUI3wxD4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: Jun 15 01:45:40 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=2A921C6775102E77A655E6C7BB0E169690FC4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:3d:a7:fc:4c:9a:03:4c:ba:89:29:80:82:
                    fe:c3:23:53:37:47:14:cc:bd:aa:81:22:b3:77:fe:
                    44:3a:fa:83:88:86:43:f6:df:43:9a:95:ad:17:64:
                    3c:a4:96:8b:ac:04:4b:4d:51:7a:d0:11:fa:85:b4:
                    35:51:69:0e:9a:ac:0b:40:25:15:68:41:18:17:56:
                    6f:9a:e4:7c:f2:47:36:dc:ff:51:cb:c1:b8:ff:5f:
                    c0:ce:a3:cc:6e:bc:56:46:99:90:1c:98:18:ce:61:
                    89:15:e7:ac:6a:08:7c:10:c0:58:cd:8d:3f:52:bd:
                    36:95:72:42:e3:dc:a5:b7:21:22:28:60:29:d0:3d:
                    ee:79:ca:18:70:9e:f4:60:fb:56:ed:1d:f4:f1:6b:
                    68:a2:00:e3:16:c6:75:f4:af:e9:1c:57:91:4e:f7:
                    a5:77:fa:34:b9:8c:1a:85:54:fc:bf:23:37:e1:75:
                    e8:1d:e0:eb:22:1e:20:cb:82:29:94:af:27:8a:6c:
                    f3:b2:6e:5d:e9:7e:fa:6b:86:78:7a:8f:1c:64:90:
                    e3:79:7b:32:85:4e:bf:0a:94:dc:4a:53:74:68:ba:
                    42:93:bd:32:6b:52:ce:0d:82:89:e1:61:07:98:56:
                    e5:ae:1c:ca:18:bc:dc:90:1f:23:fd:bd:89:d0:e9:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:d7:1a:6a:a9:ce:4d:f3:4a:4b:d2:27:ce:ef:40:a8:6f:
         3a:da:fc:46:25:d9:80:02:03:71:5d:16:22:57:0c:2f:ee:b7:
         1f:ea:68:26:b2:88:2a:10:5e:e4:5e:73:85:47:15:54:66:39:
         0d:18:cb:f7:6f:eb:e2:15:07:d7:7e:bb:ed:03:73:cb:7a:64:
         6c:dc:8c:c0:c0:15:a6:09:e2:3b:50:95:33:39:93:33:f5:99:
         77:f4:07:d1:78:01:0d:fd:b0:05:fb:51:11:b4:d3:73:a4:65:
         a5:59:38:81:37:b8:6f:35:1e:56:19:56:6a:40:42:36:dd:ca:
         33:c2:8f:49:93:a9:70:3f:64:f2:96:9a:f5:92:45:6c:62:34:
         96:38:b6:59:35:7b:96:de:72:a6:b7:ea:ac:28:c7:0a:ee:ed:
         4f:58:b2:f0:7b:1b:1c:f1:de:04:09:86:94:bd:b5:ee:2b:33:
         f1:72:ca:41:1b:05:24:8f:a7:0e:2f:5c:ee:08:51:6c:1a:7b:
         ef:a9:35:d9:17:87:bb:ce:59:f6:4b:94:7d:7c:7e:5f:a4:c1:
         ce:38:60:0d:fd:22:30:74:88:7c:ce:ec:72:a0:b8:20:35:d4:
         a8:84:c5:c3:72:fa:d0:7c:a9:ed:d0:ab:a5:9d:12:3b:5d:59:
         34:b7:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:40:24 2026 by rpki-client