Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
File:                     UrIcP3vIfuQhVlQCwqMPsivcnjw.mft (raw, json)
Hash identifier:          pKueyazw8jwQVFXJjl0eFBztr1/isEQqOSOtBX80Wy4=
Subject key identifier:   FE:52:BF:AB:50:68:66:96:ED:81:4D:27:73:A4:60:E5:E1:26:AA:6F
Authority key identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C
Certificate issuer:       /CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
Certificate serial:       0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
Manifest number:          0563
Signing time:             Tue 07 Jul 2026 11:14:49 +0000
Manifest this update:     Tue 07 Jul 2026 11:14:49 +0000
Manifest next update:     Thu 06 Aug 2026 11:14:49 +0000
Files and hashes:         1: IXsofKORjnQ32pm4nF3y9T3vBP4.roa (hash: In0FwLlSx9XADVywWDaQ5chqdprV1hkiI1wdBcNIk2I=)
                          2: UrIcP3vIfuQhVlQCwqMPsivcnjw.crl (hash: pbE0TRJ2ViG7JcIZ7u5+OHTnOCdcQlqyYdlwsUn9lY8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
        Validity
            Not Before: Jun 15 01:35:57 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=FE52BFAB50686696ED814D2773A460E5E126AA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:c7:b6:d1:58:e0:15:4d:fb:f0:19:fe:a5:
                    91:af:0b:67:20:79:66:e2:ac:fb:fd:db:05:72:83:
                    c7:3e:db:d3:40:0f:45:4b:a7:a2:8c:ba:13:f8:29:
                    85:59:6a:19:8a:ac:11:2c:0d:5e:91:c2:53:f2:7c:
                    ba:38:bd:18:73:51:0a:7b:99:92:42:18:46:c9:65:
                    ae:73:9b:a7:52:f4:6a:cf:a5:e3:63:d3:41:b4:dc:
                    34:3d:f0:b8:f8:cc:1f:fb:d2:02:7b:8a:f2:55:b8:
                    f8:c4:22:46:50:a5:c1:f1:bf:7c:40:a1:1f:30:19:
                    93:18:84:d7:d2:8d:ef:6f:46:a6:c6:5a:71:3b:ca:
                    40:10:90:30:07:4f:04:16:e2:68:f6:c4:d3:60:9b:
                    3e:b4:02:4a:fc:04:79:30:13:72:9b:60:68:6f:72:
                    ea:54:ba:68:7f:73:31:b4:ab:d1:41:c3:9a:b2:91:
                    6e:e2:6c:d2:43:c9:a3:d2:cf:d2:55:0c:cd:81:6a:
                    c1:99:d4:df:2c:a1:11:52:8b:2c:d1:d3:fa:a4:32:
                    26:4b:fd:e7:ff:e7:0e:3b:8c:3c:fa:2e:73:58:2d:
                    24:c3:29:4d:da:4e:b1:77:9b:be:4d:2c:23:ed:1b:
                    32:2b:c4:bd:35:df:92:a2:d5:08:10:8b:cb:5e:08:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:52:BF:AB:50:68:66:96:ED:81:4D:27:73:A4:60:E5:E1:26:AA:6F
            X509v3 Authority Key Identifier:
                keyid:52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4e:0f:3f:19:7e:a3:3a:8d:09:a9:8d:7e:33:80:61:50:00:
         c2:a6:33:f2:ca:59:5a:fe:77:1c:16:7d:61:6e:50:04:b9:36:
         46:f1:d0:9a:b7:ed:a8:97:0a:7c:37:93:dd:15:be:82:e3:6c:
         89:d9:c9:cc:b2:c4:b8:0a:3e:46:f9:ec:a5:c4:11:80:85:04:
         02:a9:c7:de:b1:18:4e:72:81:bf:09:13:30:d9:05:fe:25:bc:
         a6:05:4c:9e:49:e6:36:9b:1d:e5:86:54:38:cc:52:56:10:86:
         78:35:16:03:a8:d0:42:17:15:03:c6:08:07:11:66:03:cc:b7:
         3b:09:15:9b:61:2e:6f:f1:d2:1a:24:c3:f8:81:8f:42:09:8a:
         09:7f:aa:be:26:2c:91:b0:91:1e:06:b4:fb:63:84:4d:e3:50:
         42:1a:96:2a:f4:2c:e7:65:85:58:db:38:3c:eb:40:47:24:a5:
         b8:76:fb:4e:be:b0:ff:f6:22:d9:08:6b:56:e2:3c:c6:0e:7b:
         4f:ff:63:c3:9c:52:e4:0c:e4:07:b6:75:ae:9b:a5:ae:8c:10:
         83:87:d1:b1:99:79:fb:7c:02:fa:57:e0:39:da:9e:1c:07:21:
         39:9f:a1:fc:e9:98:80:aa:cd:a1:54:00:34:36:9a:4a:6d:18:
         c6:e9:84:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 12:43:28 2026 by rpki-client