Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
File:                     7HBrbRGl7MjB9otL6m6OmoKgOv0.mft (raw, json)
Hash identifier:          TkYlGTbi7dNOba9Dsl5e7QN7BVyneudRqvg4pV03y4E=
Subject key identifier:   29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
Authority key identifier: EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD
Certificate issuer:       /CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
Certificate serial:       58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
Manifest number:          121E
Signing time:             Tue 10 Nov 2026 09:20:24 +0000
Manifest this update:     Tue 10 Nov 2026 09:20:24 +0000
Manifest next update:     Thu 10 Dec 2026 09:20:24 +0000
Files and hashes:         1: 7HBrbRGl7MjB9otL6m6OmoKgOv0.crl (hash: 2qXGAR5APakuKXf/JJziN/mK+6/BzMnOWZwfqxFX60c=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Nov 2026 08:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
        Validity
            Not Before: Oct 15 01:31:32 2026 GMT
            Not After : Oct 15 01:30:02 2027 GMT
        Subject: CN=2959DC4EB0C9ADEFA8D7DF7A4C54E93645BEB8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:3e:f8:4b:13:2b:40:7e:43:99:98:60:d2:
                    7c:18:9a:07:55:34:4a:7f:f9:d2:d2:28:7f:e1:37:
                    41:30:58:31:63:52:0a:1c:7c:19:a0:e7:ed:fe:29:
                    80:df:cc:60:88:71:7e:ae:3c:ba:7c:23:52:d9:52:
                    9d:82:65:09:3b:84:c7:2c:24:76:3c:05:c1:db:2a:
                    56:ca:18:ed:b0:04:15:9c:08:25:7f:36:a8:e7:d8:
                    33:2f:37:39:84:71:10:9d:5e:cd:d5:89:9c:50:e6:
                    c1:57:a8:85:60:62:a3:2c:06:55:8c:32:52:51:f8:
                    98:78:c5:fe:17:9a:d4:1b:62:7d:a8:2c:57:1a:9e:
                    91:b2:60:62:97:41:1f:e7:f2:0a:8f:cb:5c:46:f9:
                    5c:40:0c:73:25:4d:c9:05:76:77:56:6f:20:02:2e:
                    f9:b9:1b:84:68:23:a3:af:68:a4:f6:28:c6:d1:5d:
                    35:12:cc:3a:0a:9e:13:d1:e5:62:8b:9a:2d:16:88:
                    a6:c3:71:3b:c2:7d:8f:69:3a:05:48:08:13:f5:1a:
                    77:26:0a:60:76:f7:fd:01:3e:08:e1:47:6a:79:67:
                    44:a3:85:e3:f1:5b:30:22:d3:f7:f6:bc:d4:56:ea:
                    0b:d5:53:5f:73:fe:af:dc:ae:f7:45:8a:40:19:e0:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
            X509v3 Authority Key Identifier:
                keyid:EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:85:60:39:66:13:7c:77:91:94:17:64:20:a7:81:a5:92:03:
         87:88:c9:8a:9f:3a:c4:3c:90:21:bc:5a:82:b3:f5:b0:b2:ec:
         c8:f5:33:42:a9:76:e4:b3:50:c7:32:d8:17:05:02:83:10:81:
         b4:69:ae:9a:0a:82:a0:e3:43:be:43:8a:11:52:bd:c2:3a:76:
         8e:5d:8c:25:57:ee:78:7a:a7:02:0e:70:3e:49:e5:e1:10:87:
         0f:fa:6e:a6:4a:2c:4c:8d:e2:f7:81:2c:b9:b9:cb:4a:fb:4b:
         f0:cf:94:03:7c:ea:21:0a:55:3d:89:13:7e:5e:47:2e:6e:74:
         6f:db:56:9f:f8:64:79:1d:5a:df:3d:f9:18:02:8f:4a:ea:4c:
         a7:0d:10:08:f4:29:e5:1e:f0:d4:76:f7:7f:0b:3b:54:93:24:
         05:02:1d:bd:ce:f6:47:3c:ae:30:89:28:2d:05:32:ae:05:94:
         a3:7c:1f:49:9e:fa:27:a9:13:40:7a:b6:65:16:fb:ba:e0:19:
         18:9d:c4:41:a1:b1:68:c8:b5:0e:21:85:c4:5a:26:f3:ab:2a:
         d6:cc:b9:53:8d:77:7e:91:ab:68:8d:7a:08:78:7f:21:f6:e1:
         ae:6e:a5:25:3b:e0:2c:ea:0a:9c:c5:9f:73:c2:c8:b4:ff:8d:
         de:c0:e7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 11:36:01 2026 by rpki-client