Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
File:                     U5vfL-GP84f9A4QsUIGhRe7rHPc.mft (raw, json)
Hash identifier:          +ErvIgP8nfrLcMhc5i1CNbxuf0XyuI/KFx51eYzkq0o=
Subject key identifier:   23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
Manifest number:          1117
Signing time:             Wed 28 Oct 2026 13:01:25 +0000
Manifest this update:     Wed 28 Oct 2026 13:01:25 +0000
Manifest next update:     Fri 27 Nov 2026 13:01:25 +0000
Files and hashes:         1: 2mJcrtDyAxLhoYkfh_7tGuJqEYw.roa (hash: xrtWwv9sFWR96w5dAwUvApy8lWMC2g0WCRbvAD+zoKc=)
                          2: 37jJtE0osatfYJlurUWgfnDEREc.roa (hash: +2k/V5B3RcNd209prGRQzanViVZQ+ia5DKPXUd9cMQc=)
                          3: C8GvGb4DbGkBYm_yHKra8Dts3w4.roa (hash: h360kM3Ky0230P7kCbwrSo66hXqQ8ucH7OMEB3tH7tE=)
                          4: CuCJaRZywjBxGtiTbMU90bjNNfc.roa (hash: jescTWjYLyP3z+LL/EKHeMsvU8GC8DdAYpAtEZCse2w=)
                          5: FKXB68nT-gyPnO5eUdTy-T5dwaU.roa (hash: eDl9SzE1bJPpBH2STiCrZoJuvS+TCxATS4Qzi3C7a6I=)
                          6: HVoeS1kiRXGJVb9Jn0Tsrfd0lJg.roa (hash: cc1t2+U+IT8lqIdHihcb5PF/qKYwO0mnMzRD/yAFIXA=)
                          7: O3LhHs-6ATdcKVQbMrdFaR6yQhs.roa (hash: 8SxoRV2qMadsG/Zqu5M59xaoqnbhLxXsy/zPZSnc+m0=)
                          8: U5vfL-GP84f9A4QsUIGhRe7rHPc.crl (hash: DTVV4mWqMx2uLcitDLz4OUgvZbKLBjhYeCFQB46sMgw=)
                          9: X2iRrjxxUpVqBH8X9xEspgXF5NQ.roa (hash: dIXvvs02S069TaRdyUUfU34zqKQNlU8dA960oF110h8=)
                          10: ZAkXAPDvhmJ_Lh5wLh42NJ7ZFU4.roa (hash: A7BpN0DE1SVceN4ck/Zdck/qCulEbbdiLmGl2I3Qkv0=)
                          11: Zw7ri3KCQCBQHQQWWWVJk2Lbzjs.roa (hash: CF5bNuRPohnr771c/yLEQOmPrVuaabwLv6pauwm1Kto=)
                          12: _RUUFcbNvP5avk6VK_llK7WXjTE.roa (hash: omXy55lH4zgvvGsqeP8QrOMdXCZzWZKoZrlEToRzTcI=)
                          13: rCUPgxg4L_Rij0smdbgj8T_my6M.roa (hash: 19hxoozXnFOQ9RJUC/9hXP7pKIXtHHs3aa15ne3H+Q4=)
                          14: y20X1pjmFx7JsC4UnXjEHGQk1U0.roa (hash: YI5UTmqmCS2ZEljRW5xIIrzphTWSTe6acZNl1bmWejU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 15:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Oct 15 01:38:49 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=2306FD64C5010CE033EC76139542E8EF87B26AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:9c:9b:7b:d4:00:2b:07:28:3d:78:8f:d4:
                    90:eb:4c:7e:a9:9d:48:33:6e:3f:73:8a:30:d8:eb:
                    45:23:88:af:47:9e:a1:fa:c8:03:74:ea:ac:bb:8c:
                    59:bc:9c:aa:b7:fb:65:d6:f4:81:ca:05:45:75:2b:
                    92:66:ba:4e:7d:61:a3:68:11:96:07:cb:38:9a:88:
                    8f:9b:d5:c6:90:78:a6:54:71:ad:9e:a2:70:3c:eb:
                    c7:a6:f9:41:a5:4c:98:44:1c:19:40:85:cd:8f:7d:
                    a9:74:8c:1e:c0:04:27:3f:f2:45:0c:d8:60:82:0f:
                    4f:f3:96:28:b8:ac:f6:dd:8e:7a:5e:bc:30:0c:12:
                    b1:b9:5c:2e:95:a9:68:ef:05:2c:17:92:8b:9f:9c:
                    98:80:b6:a6:f6:2b:26:a0:58:b4:da:c0:a8:9f:a0:
                    c3:6d:f2:07:6e:0d:1b:24:52:32:46:73:86:df:91:
                    25:0c:d1:b9:f0:8a:db:95:25:49:28:ee:f0:f3:1a:
                    4d:d1:29:1b:95:d0:7b:45:9c:b4:81:3a:99:d6:7b:
                    47:51:a1:2f:51:16:5f:2e:54:e0:97:f1:74:79:cb:
                    7e:d1:12:26:5b:01:2b:3b:d5:76:9c:5c:46:09:94:
                    88:7b:c7:1f:74:72:f8:6d:4e:31:56:e8:a7:5c:a7:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:c2:fa:60:59:9e:5f:d6:30:a0:12:71:23:53:ba:f0:22:
         8e:13:25:fa:a9:1d:5b:00:f0:79:b1:8a:00:01:2c:32:d2:9e:
         41:19:50:dc:fe:90:e8:1c:d5:ea:a3:e8:d2:3d:91:97:6d:67:
         19:84:e0:4f:dc:92:84:0a:e7:26:4e:aa:a8:f0:85:ed:26:a1:
         cb:b3:7b:b7:d7:a2:d1:32:6d:d1:e0:e6:e2:ce:58:19:3b:51:
         df:49:c1:06:1a:c2:82:b6:e4:36:ea:eb:91:90:70:15:36:f5:
         5b:f4:f9:06:12:11:a2:18:73:45:f1:83:85:1d:01:8e:21:85:
         21:67:13:0a:41:56:b6:0e:cf:81:43:f5:82:39:f7:31:d2:32:
         4c:fd:56:40:e1:77:77:83:9c:b4:b9:2e:ed:b5:d4:69:1a:50:
         83:a4:03:d5:0a:7b:a4:a3:ca:2e:b3:19:1d:1d:b9:48:d3:44:
         d3:8e:78:14:24:09:ba:ad:49:8a:3c:b2:47:26:dd:1f:53:ba:
         f4:c9:9f:8c:30:8f:d3:31:cf:43:a8:8b:db:91:c8:56:83:b1:
         6c:bd:ab:df:19:c5:7d:33:be:1d:bb:7a:99:38:04:cc:5a:7a:
         59:6a:1a:7f:b9:99:ab:34:7b:86:e9:07:78:da:5c:79:8b:aa:
         a6:68:97:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:44:52 2026 by rpki-client