Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
File:                     EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json)
Hash identifier:          iGMeEh8r10frjNjYbE18XV8gz74zxATRLYOCcnZfiR0=
Subject key identifier:   A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
Manifest number:          1DC8
Signing time:             Mon 02 Mar 2026 10:51:24 +0000
Manifest this update:     Mon 02 Mar 2026 10:51:24 +0000
Manifest next update:     Tue 17 Mar 2026 10:51:24 +0000
Files and hashes:         1: 3vcLkGdAkyeYB2dNUvSka_wHngg.roa (hash: Ank/GQ8gbIv5D7Bvyt3kImLf2TZVFiB9yEhAvHAXz3s=)
                          2: 5IjCZgSrV9ix_njviiE0Tk0YHHo.roa (hash: gJsoYwhkqnnrlN3plIV93fccMy4a17ZFnSve17lo5zw=)
                          3: 8t4_4obrL7QUpvNM99yzTRuS4uM.roa (hash: uHjukjOgqsJbZ3v64gV+WBraQJwW1gnZkwvQrlCo1ak=)
                          4: CSMu1ryvQioKDyD7cSxBe7ofaFc.roa (hash: YQ/qkuHtT+RdEiGqEt4CbHQh9IDnyoMgVQrj/u4CtQc=)
                          5: DXXbowcfgdOeYKvZHja2hi_9Apg.roa (hash: FovbXSYwUN4+b3NGj06GCzyiIUI6VAxGO3KK30uxsSc=)
                          6: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: FNK9MLHNrzttMnzG+GsDBn+cCZZACdmv6sgQwPTLalM=)
                          7: HvhrG5I-CcsH10EdewHmgM-K7s4.roa (hash: 3ZB4UQZQ2p8c9rJwyCR4QQdniHH+uSjMb5J8F96PJ/c=)
                          8: cMO06GRG2J_TBEs7JDUc9Q7t2EQ.roa (hash: k3cikG071HrMP7d0mL11iusgC1DMmeVtSh94BNMCMjM=)
                          9: gdZv4drrv_qKWuAEnCJNU_eQC8I.roa (hash: eh+k5WpKHBz2unz+/6s33I+ccEqv0KPmzLe+ydWDO6A=)
                          10: hAgHYHLvzwOgBfhZVr3TFwVIXxE.roa (hash: gScu5r7AykNEKqnD9IJuv6/CsSp+YjDDZY04/xreXLQ=)
                          11: kxvPJ3R4DXye7NedAjB8GbAa9Tk.roa (hash: OK2r7xyQjx5QTS1ZvQ2ZzHFs60LUceO4zGuf8NlHs3s=)
                          12: qfknMj3RijI1sUXaJWzboMC-qIE.roa (hash: yVEPIxeHlSOPePGOfvtC/THaWuoqrh2BsJ1gnr0OdeI=)
                          13: wbp3B_0KHkfU7GMiKWABSp2pC0A.roa (hash: 13OtEGGR/pNsqDh/OZGjAICfFYt64q37Wjbor1AnLxs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Feb 25 02:09:15 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7:
                    5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26:
                    90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14:
                    12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4:
                    63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00:
                    ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b:
                    c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14:
                    8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d:
                    a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17:
                    b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a:
                    b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a:
                    40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f:
                    55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1:
                    49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81:
                    d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e:
                    fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64:
                    51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:79:43:84:c6:13:e6:36:04:3d:a4:48:69:b3:fb:31:3d:0f:
         d0:30:8b:d1:d0:c9:89:bc:95:c9:bc:75:bf:70:1a:75:25:41:
         13:f6:7e:44:0a:c4:66:37:8e:61:d3:10:df:b3:c5:14:db:b1:
         24:48:f4:28:3d:5a:a1:e9:bb:bf:11:db:4b:b1:6f:d2:34:b0:
         9a:d3:f2:36:af:30:16:5e:39:91:91:7e:52:d0:bc:59:66:44:
         ba:af:fe:82:d4:f2:c2:c8:ff:cc:42:65:16:1f:10:eb:c6:be:
         1e:4f:d7:a4:31:34:6f:4c:ab:5b:6b:2a:64:07:c4:44:05:4f:
         91:c4:d9:1f:bd:69:1b:92:3f:a2:da:8b:ed:2e:cc:72:a4:e1:
         b4:a8:23:bd:66:b9:2e:42:e9:e4:27:95:ca:28:25:bd:b8:c0:
         77:00:db:a6:91:37:e3:8a:7a:18:db:44:db:dc:d4:ca:9a:25:
         c3:28:fb:33:fc:ff:04:07:ad:af:4c:83:48:07:8c:12:0b:0a:
         43:82:2e:df:7b:ca:0f:48:96:e0:9d:e1:b6:ce:7f:62:95:cb:
         af:31:05:a4:3b:3b:c4:08:58:15:6b:58:01:9c:0c:ff:44:80:
         bc:d5:a3:a3:cd:1d:a6:28:d6:81:a0:a3:1f:0a:6b:e6:97:ca:
         70:df:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:00 2026 by rpki-client