Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
File:                     4SW0OnWuMTJppgY45mMXlwtQtdM.mft (raw, json)
Hash identifier:          5BRIjmzdRiLhNXlfvvAJ9oasZ8xt2XNZ1J/P1YUe1ho=
Subject key identifier:   2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
Manifest number:          0D34
Signing time:             Sat 23 May 2026 00:13:13 +0000
Manifest this update:     Sat 23 May 2026 00:13:13 +0000
Manifest next update:     Sun 07 Jun 2026 00:13:13 +0000
Files and hashes:         1: 4SW0OnWuMTJppgY45mMXlwtQtdM.crl (hash: MklEtRpBNVaOkG18goTN+b/sTA8gmTv6wdfclfgKwz0=)
                          2: PpfivDYGT2J778t3GPN_GAU9nzU.roa (hash: HqjnMWktZtaSa23HTrNUbCHZAo4jYtepCM953NQ0ajQ=)
                          3: wTdc-fWgs3IweBf94dGKPDF3jd0.roa (hash: CJd0LjoMSoBAJg5KuBQEQksRwf2WIbz4jLOCUI3wxD4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: May 15 01:42:47 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=2A921C6775102E77A655E6C7BB0E169690FC4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:3d:a7:fc:4c:9a:03:4c:ba:89:29:80:82:
                    fe:c3:23:53:37:47:14:cc:bd:aa:81:22:b3:77:fe:
                    44:3a:fa:83:88:86:43:f6:df:43:9a:95:ad:17:64:
                    3c:a4:96:8b:ac:04:4b:4d:51:7a:d0:11:fa:85:b4:
                    35:51:69:0e:9a:ac:0b:40:25:15:68:41:18:17:56:
                    6f:9a:e4:7c:f2:47:36:dc:ff:51:cb:c1:b8:ff:5f:
                    c0:ce:a3:cc:6e:bc:56:46:99:90:1c:98:18:ce:61:
                    89:15:e7:ac:6a:08:7c:10:c0:58:cd:8d:3f:52:bd:
                    36:95:72:42:e3:dc:a5:b7:21:22:28:60:29:d0:3d:
                    ee:79:ca:18:70:9e:f4:60:fb:56:ed:1d:f4:f1:6b:
                    68:a2:00:e3:16:c6:75:f4:af:e9:1c:57:91:4e:f7:
                    a5:77:fa:34:b9:8c:1a:85:54:fc:bf:23:37:e1:75:
                    e8:1d:e0:eb:22:1e:20:cb:82:29:94:af:27:8a:6c:
                    f3:b2:6e:5d:e9:7e:fa:6b:86:78:7a:8f:1c:64:90:
                    e3:79:7b:32:85:4e:bf:0a:94:dc:4a:53:74:68:ba:
                    42:93:bd:32:6b:52:ce:0d:82:89:e1:61:07:98:56:
                    e5:ae:1c:ca:18:bc:dc:90:1f:23:fd:bd:89:d0:e9:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:49:eb:38:16:ab:d6:ef:0b:f7:5b:8e:ff:03:93:1d:13:90:
         22:67:b8:81:25:61:d4:55:af:05:f1:a3:6d:d7:18:79:10:8e:
         ef:ea:6d:32:8a:42:13:38:fa:7d:f8:8b:47:63:ec:2d:22:02:
         ce:ac:93:d8:29:27:75:63:e0:ce:87:87:20:76:e1:6d:d2:e0:
         16:54:94:91:eb:8e:39:4a:1a:be:85:ff:22:1a:0e:d9:e8:44:
         cf:11:a6:aa:63:48:77:54:32:8b:26:f9:10:99:f7:48:14:92:
         4d:e6:70:2f:be:ce:29:c3:8e:54:ad:d8:a4:19:ac:2d:e6:9b:
         52:bc:49:fd:1f:e6:4c:ca:a0:78:99:cc:d8:1f:89:92:97:a0:
         c1:f3:97:30:6d:d1:cf:8a:8f:e9:77:e4:61:eb:cb:1d:95:95:
         67:13:63:67:e2:cf:5d:4c:05:ed:57:5c:1f:d2:d5:7f:77:95:
         e5:64:51:6b:d8:46:95:03:7c:be:44:2f:15:ac:3a:2e:d5:35:
         44:ed:f8:cb:a1:c2:49:6e:d1:df:49:1c:9c:f1:4d:b1:ac:b1:
         06:4e:79:b9:b1:0e:9c:aa:3c:cd:5d:48:53:93:dd:2f:9b:5b:
         ad:08:d4:a3:ce:c9:32:91:c6:3f:82:31:87:19:78:64:b2:c3:
         59:af:bf:9a
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMTI1
QjQzQTc1QUUzMTMyNjlBNjA2MzhFNjYzMTc5NzBCNTBCNUQzMB4XDTI2MDUxNTAx
NDI0N1oXDTI3MDUxNTAxMzAwMlowMzExMC8GA1UEAxMoMkE5MjFDNjc3NTEwMkU3
N0E2NTVFNkM3QkIwRTE2OTY5MEZDNERERjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMnkPaf8TJoDTLqJKYCC/sMjUzdHFMy9qoEis3f+RDr6g4iGQ/bf
Q5qVrRdkPKSWi6wES01RetAR+oW0NVFpDpqsC0AlFWhBGBdWb5rkfPJHNtz/UcvB
uP9fwM6jzG68VkaZkByYGM5hiRXnrGoIfBDAWM2NP1K9NpVyQuPcpbchIihgKdA9
7nnKGHCe9GD7Vu0d9PFraKIA4xbGdfSv6RxXkU73pXf6NLmMGoVU/L8jN+F16B3g
6yIeIMuCKZSvJ4ps87JuXel++muGeHqPHGSQ43l7MoVOvwqU3EpTdGi6QpO9MmtS
zg2CieFhB5hW5a4cyhi83JAfI/29idDpghUCAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBQqkhxndRAud6ZV5se7DhaWkPxN3zAfBgNVHSMEGDAWgBThJbQ6da4xMmmmBjjm
YxeXC1C10zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTY4LzRTVzBPbld1TVRKcHBnWTQ1bU1YbHd0UXRkTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzRTVzBPbld1TVRKcHBnWTQ1bU1YbHd0
UXRkTS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC81NjgvNFNXME9uV3VNVEpwcGdZNDVtTVhsd3RRdGRNLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAAFJ6zgWq9bvC/dbjv8Dkx0TkCJnuIEl
YdRVrwXxo23XGHkQju/qbTKKQhM4+n34i0dj7C0iAs6sk9gpJ3Vj4M6HhyB24W3S
4BZUlJHrjjlKGr6F/yIaDtnoRM8RpqpjSHdUMosm+RCZ90gUkk3mcC++zinDjlSt
2KQZrC3mm1K8Sf0f5kzKoHiZzNgfiZKXoMHzlzBt0c+Kj+l35GHryx2VlWcTY2fi
z11MBe1XXB/S1X93leVkUWvYRpUDfL5ELxWsOi7VNUTt+Muhwklu0d9JHJzxTbGs
sQZOebmxDpyqPM1dSFOT3S+bW60I1KPOyTKRxj+CMYcZeGSyw1mvv5o=
-----END CERTIFICATE-----
Generated at Sat May 23 05:10:17 2026 by rpki-client