Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
File:                     nbu4hcPSk50dl7JOrYvQZxca0rI.mft (raw, json)
Hash identifier:          onods0ebEJwF6Amrgk5nVzM894OMU2cHhx5SLV1QGRw=
Subject key identifier:   02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
Certificate issuer:       /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Certificate serial:       10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
Manifest number:          0522
Signing time:             Fri 21 Aug 2026 19:18:56 +0000
Manifest this update:     Fri 21 Aug 2026 19:18:56 +0000
Manifest next update:     Sun 20 Sep 2026 19:18:56 +0000
Files and hashes:         1: 52jYiT46Msq_m5cR8Ve3SehuOTQ.roa (hash: MMkNAe7NQK36MTfTk4ETiff+VkRl++ePeNg00PTwgNk=)
                          2: nbu4hcPSk50dl7JOrYvQZxca0rI.crl (hash: CYJHsN6sseIjPIucOQ4Vhja6W/cGQajEOwm+yIFwI0c=)
                          3: xiKin-JHEy6ydknOgmZerLEf0I4.roa (hash: v7hxP03+AjnvHQdhGNPQDY2xke6fzzz52ykfo1chUKk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
        Validity
            Not Before: Aug 15 01:39:39 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=02CB8EF505D85E0EF940885D95CF4881841F9FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:86:64:f9:9a:40:28:48:49:95:a8:2a:74:
                    19:94:a6:d4:7a:da:23:fa:c5:01:54:58:26:e6:5a:
                    ee:bf:2d:57:fe:b9:04:06:fb:8c:ff:ac:30:3a:14:
                    2e:2d:90:bb:60:b3:d7:ed:f5:f9:02:a9:6e:91:96:
                    d9:70:33:bd:45:ab:87:45:6f:36:50:40:f5:6f:1a:
                    da:6c:6b:14:27:81:13:f1:aa:2f:18:6e:11:d2:50:
                    79:8e:c5:74:6c:a1:5e:52:c4:f6:3a:52:0f:32:51:
                    9f:3b:d8:cc:b5:e4:68:3d:ce:d5:1e:3a:91:62:c2:
                    4c:28:75:02:97:92:67:82:f7:b8:52:ea:98:08:c7:
                    97:30:97:f4:de:eb:f3:23:b5:75:1c:2b:d9:fb:79:
                    65:0f:75:d7:98:d7:bc:08:57:71:68:59:22:62:4e:
                    b9:8f:fc:66:3e:13:65:51:fa:2d:b0:fc:62:9c:53:
                    39:5f:08:01:cb:b0:c5:a5:2a:af:9c:a3:6f:a6:29:
                    78:e7:e6:02:0b:6a:a4:85:25:d4:4f:76:46:2b:ba:
                    fd:b2:84:a4:30:92:4d:18:56:27:b9:aa:1c:e9:9f:
                    a3:3d:fd:ad:df:f4:47:e0:cc:a4:cc:1f:46:eb:a1:
                    f8:08:fc:cb:af:a2:98:3d:3d:45:53:e3:b7:41:b9:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
            X509v3 Authority Key Identifier:
                keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:42:2d:14:01:18:a5:fc:19:bb:8e:1c:e2:9b:8b:da:3c:
         9c:20:4e:5b:37:14:72:31:4e:f9:98:c2:ec:3e:8b:25:48:1d:
         c8:1b:51:e7:68:e9:7f:bb:e8:0c:ba:c6:ce:2b:a1:23:30:57:
         8d:3b:11:94:de:ba:84:29:67:08:0d:55:5b:00:60:f6:34:41:
         db:ac:3b:61:64:96:f7:cd:aa:8c:c7:96:90:11:56:8e:f0:f1:
         1b:6e:f3:bf:79:5e:89:aa:55:fd:34:c9:dd:42:9e:72:c5:c7:
         ad:a2:10:66:24:6f:8d:ed:8f:95:ec:38:d7:ae:07:86:9f:29:
         ca:15:38:1b:dc:45:c6:32:e8:6b:d0:2a:f8:dd:a2:8e:4e:50:
         ae:22:7b:4f:ce:43:3e:9b:98:72:54:65:4c:dc:c1:a6:b0:e2:
         06:d5:f0:d9:9d:11:a6:36:27:75:e2:e3:83:80:36:01:17:60:
         09:5e:44:11:f8:72:37:00:5e:f5:0f:a3:ca:3c:a9:d0:d7:eb:
         06:2a:1f:5f:05:94:c7:37:04:7a:41:ce:1f:60:c3:34:2b:d1:
         1d:18:09:ed:55:75:79:2e:10:26:d2:e5:7f:d6:d1:a8:ef:80:
         29:56:1a:70:10:d9:c9:94:59:b9:84:00:dd:4a:4d:f7:90:45:
         80:0b:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:03 2026 by rpki-client