Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.mft
File:                     MhMWqTw4IBGi_EuOfLhIZJho9DQ.mft (raw, json)
Hash identifier:          A2Rr89vAFx94qs15+GT8IQeOZatuG5RdebSoyxqnlwM=
Subject key identifier:   2D:05:18:82:CC:28:44:E8:6C:A0:93:B4:A0:2C:AA:C0:F8:D4:60:E5
Authority key identifier: 32:13:16:A9:3C:38:20:11:A2:FC:4B:8E:7C:B8:48:64:98:68:F4:34
Certificate issuer:       /CN=321316A93C382011A2FC4B8E7CB848649868F434
Certificate serial:       0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MhMWqTw4IBGi_EuOfLhIZJho9DQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.mft
Manifest number:          0428
Signing time:             Mon 21 Sep 2026 11:23:11 +0000
Manifest this update:     Mon 21 Sep 2026 11:23:11 +0000
Manifest next update:     Wed 21 Oct 2026 11:23:11 +0000
Files and hashes:         1: MhMWqTw4IBGi_EuOfLhIZJho9DQ.crl (hash: tOXSeNrsvK46GtuM3hYxKPOFS8JLLCOyMPEdItaLH0I=)
                          2: mOrRtve7GOlfeUioLZE9VcT05Jo.roa (hash: sSpJJid3pdA7gHkbphq82w/B8dRm9jlMOu7Xvaiwd8Q=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MhMWqTw4IBGi_EuOfLhIZJho9DQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 13:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321316A93C382011A2FC4B8E7CB848649868F434
        Validity
            Not Before: Sep 15 01:35:12 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=2D051882CC2844E86CA093B4A02CAAC0F8D460E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:63:4f:31:17:8e:38:7f:3f:b9:97:94:3f:
                    6c:2c:46:f6:98:b2:da:24:fc:03:6d:7a:ac:8b:1a:
                    47:8c:8c:37:3c:88:b9:d1:f5:c1:66:1f:f2:f2:bc:
                    9c:7d:77:7f:06:2c:a2:be:00:fd:a7:ea:a9:27:12:
                    3e:1c:27:c7:e0:c7:33:ce:ac:1c:d8:42:64:0d:e6:
                    11:11:7e:4c:24:b6:ca:a7:0c:07:61:31:61:04:b0:
                    96:bc:9a:86:68:fb:d3:ec:75:91:70:91:62:5e:0f:
                    7d:94:3a:3b:e9:ea:9d:1c:9f:9e:59:7b:f3:65:12:
                    e2:0b:b1:f1:92:8e:ad:53:a3:99:ec:0f:af:af:4e:
                    c2:f5:c2:20:1e:b7:2f:26:0b:e2:a6:52:70:4b:8a:
                    25:2c:5c:05:20:ca:7b:4c:09:2f:59:62:79:65:4c:
                    72:82:0a:87:af:74:6d:33:a2:c3:bb:de:26:b0:eb:
                    ce:79:ab:df:22:b4:0b:c8:2e:17:9c:19:61:2f:0a:
                    36:82:8d:19:c1:32:2c:8e:47:19:ae:d5:21:43:86:
                    b6:ab:84:23:09:6b:5f:bb:a4:b9:bc:8f:5b:40:0e:
                    98:4a:8c:f5:37:e2:99:38:7a:51:60:d3:d2:f8:7e:
                    92:2e:55:83:a9:c9:d5:2d:e3:5c:1e:1f:01:12:1c:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:05:18:82:CC:28:44:E8:6C:A0:93:B4:A0:2C:AA:C0:F8:D4:60:E5
            X509v3 Authority Key Identifier:
                keyid:32:13:16:A9:3C:38:20:11:A2:FC:4B:8E:7C:B8:48:64:98:68:F4:34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MhMWqTw4IBGi_EuOfLhIZJho9DQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1022/MhMWqTw4IBGi_EuOfLhIZJho9DQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:e5:69:90:bc:53:a7:64:23:3f:28:3d:1f:73:ed:9f:e3:05:
         c3:04:c1:3c:fd:8a:c9:93:d2:ca:36:3f:2c:00:71:ed:d2:97:
         c3:06:cd:0c:9f:fb:97:34:bd:5e:85:2e:0f:3e:b6:2f:d7:83:
         15:fc:52:d6:96:b8:f4:fa:aa:96:c5:1a:3e:77:bb:79:e6:39:
         9d:69:02:91:a6:a5:65:f8:ce:8a:4d:45:c1:fe:9f:5d:73:1d:
         7d:af:69:83:4d:1b:42:8c:7d:aa:d2:64:61:06:92:f8:bb:75:
         da:5c:d3:65:f1:c7:54:b9:b5:07:5a:0c:84:21:83:be:b3:28:
         b3:cd:4a:13:aa:13:db:1f:5f:56:2f:12:b3:3c:3b:43:32:14:
         84:09:85:b7:d8:f8:6d:2b:27:1f:8c:e3:99:7f:57:3b:fe:8c:
         6a:38:6c:97:35:d8:f2:b3:2d:8d:c1:63:a3:a5:f3:72:10:30:
         ee:14:ad:54:b5:67:40:6f:c5:60:5d:a8:96:1e:a5:13:b9:d6:
         d4:4b:f4:06:d7:e0:73:8c:ae:0b:2a:6e:94:bd:6b:2f:c2:57:
         8d:9b:5a:b4:e9:c1:1b:97:ff:56:9a:99:d4:61:8e:ad:78:33:
         db:ca:1b:82:34:6b:79:34:28:e7:7c:f0:b9:1d:e5:4d:dc:e2:
         30:9e:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:48:42 2026 by rpki-client