Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
File:                     nbu4hcPSk50dl7JOrYvQZxca0rI.mft (raw, json)
Hash identifier:          OrgaGMLNi5+Xju6Y23i8CtvD9M8hghEuTgsgewskjv4=
Subject key identifier:   02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
Authority key identifier: 9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2
Certificate issuer:       /CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
Certificate serial:       0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
Manifest number:          0306
Signing time:             Fri 22 May 2026 23:46:50 +0000
Manifest this update:     Fri 22 May 2026 23:46:50 +0000
Manifest next update:     Sat 06 Jun 2026 23:46:50 +0000
Files and hashes:         1: 52jYiT46Msq_m5cR8Ve3SehuOTQ.roa (hash: MMkNAe7NQK36MTfTk4ETiff+VkRl++ePeNg00PTwgNk=)
                          2: nbu4hcPSk50dl7JOrYvQZxca0rI.crl (hash: 8CEAmk2IZoegGDbnnB5y0m8Zi1PVzKsoMipnakB0cvE=)
                          3: xiKin-JHEy6ydknOgmZerLEf0I4.roa (hash: v7hxP03+AjnvHQdhGNPQDY2xke6fzzz52ykfo1chUKk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DBBB885C3D2939D1D97B24EAD8BD067171AD2B2
        Validity
            Not Before: May 15 01:43:34 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=02CB8EF505D85E0EF940885D95CF4881841F9FC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:86:64:f9:9a:40:28:48:49:95:a8:2a:74:
                    19:94:a6:d4:7a:da:23:fa:c5:01:54:58:26:e6:5a:
                    ee:bf:2d:57:fe:b9:04:06:fb:8c:ff:ac:30:3a:14:
                    2e:2d:90:bb:60:b3:d7:ed:f5:f9:02:a9:6e:91:96:
                    d9:70:33:bd:45:ab:87:45:6f:36:50:40:f5:6f:1a:
                    da:6c:6b:14:27:81:13:f1:aa:2f:18:6e:11:d2:50:
                    79:8e:c5:74:6c:a1:5e:52:c4:f6:3a:52:0f:32:51:
                    9f:3b:d8:cc:b5:e4:68:3d:ce:d5:1e:3a:91:62:c2:
                    4c:28:75:02:97:92:67:82:f7:b8:52:ea:98:08:c7:
                    97:30:97:f4:de:eb:f3:23:b5:75:1c:2b:d9:fb:79:
                    65:0f:75:d7:98:d7:bc:08:57:71:68:59:22:62:4e:
                    b9:8f:fc:66:3e:13:65:51:fa:2d:b0:fc:62:9c:53:
                    39:5f:08:01:cb:b0:c5:a5:2a:af:9c:a3:6f:a6:29:
                    78:e7:e6:02:0b:6a:a4:85:25:d4:4f:76:46:2b:ba:
                    fd:b2:84:a4:30:92:4d:18:56:27:b9:aa:1c:e9:9f:
                    a3:3d:fd:ad:df:f4:47:e0:cc:a4:cc:1f:46:eb:a1:
                    f8:08:fc:cb:af:a2:98:3d:3d:45:53:e3:b7:41:b9:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:CB:8E:F5:05:D8:5E:0E:F9:40:88:5D:95:CF:48:81:84:1F:9F:C1
            X509v3 Authority Key Identifier:
                keyid:9D:BB:B8:85:C3:D2:93:9D:1D:97:B2:4E:AD:8B:D0:67:17:1A:D2:B2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbu4hcPSk50dl7JOrYvQZxca0rI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/946/nbu4hcPSk50dl7JOrYvQZxca0rI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a0:fc:c9:94:32:c6:f3:3d:19:2b:66:8b:3a:19:53:15:2f:
         b5:39:1c:7e:66:8c:61:19:69:5d:b0:b4:83:c4:1d:90:e2:07:
         4d:5c:12:33:1e:2c:ab:ea:ab:b7:60:ab:62:ef:ce:7a:36:04:
         a6:8d:2a:18:e4:41:d0:0a:ed:4d:33:84:4b:0d:b4:9e:c5:b5:
         47:63:aa:74:84:e9:f2:18:45:21:b0:b9:5f:da:ba:75:00:2d:
         38:f5:1d:c2:01:f4:59:a6:81:82:8b:0d:e6:33:69:db:f3:47:
         ef:2e:b3:8b:d1:ad:f9:76:85:5e:59:8d:09:e3:5c:76:77:aa:
         0e:e2:6f:54:4f:67:72:32:ff:87:f3:ac:02:8f:70:26:6e:1e:
         f7:3b:fe:5f:2f:19:84:61:69:ff:2b:3d:47:bd:76:80:a3:7c:
         95:f0:73:f6:41:3a:51:19:19:3d:8a:0b:71:81:65:f3:7f:bb:
         96:bd:c6:9a:7e:7e:f2:a3:bc:d8:6c:cf:26:cc:ea:d3:cb:bf:
         69:d5:a1:e6:2e:20:a1:c3:a8:75:74:0c:63:aa:a7:38:2a:c2:
         0a:a4:95:8e:f4:3f:64:e7:c4:ee:20:ce:4c:51:45:60:dc:b7:
         4a:42:e4:3e:9e:a2:91:31:c9:52:44:ce:59:5e:e4:38:20:62:
         4a:ec:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:10:40 2026 by rpki-client