Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
File:                     _Vaf1ml8D76zznTsVqYGH7v8zrE.mft (raw, json)
Hash identifier:          ildc4aIiY5/s8rxvGmZrPjAmyBAWPG7D7E58uEcGFKM=
Subject key identifier:   9F:3F:F6:9C:01:94:B2:A6:3C:C2:C0:3B:30:07:FD:2D:36:49:8F:61
Authority key identifier: FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1
Certificate issuer:       /CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
Certificate serial:       65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
Manifest number:          1DC6
Signing time:             Mon 02 Mar 2026 04:07:10 +0000
Manifest this update:     Mon 02 Mar 2026 04:07:10 +0000
Manifest next update:     Tue 17 Mar 2026 04:07:10 +0000
Files and hashes:         1: CslWYQ-S53PJPqu04gKMKEcfITU.roa (hash: XEkxiM0rkyT7CYhs6T22PDI9Ro4y5I5mhC0Y69RcA1A=)
                          2: _Vaf1ml8D76zznTsVqYGH7v8zrE.crl (hash: LpALOejMnMndE/PTf/7DXdzqy+qEbvxe9izcwodG/n8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD569FD6697C0FBEB3CE74EC56A6061FBBFCCEB1
        Validity
            Not Before: Feb 15 01:30:53 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9F3FF69C0194B2A63CC2C03B3007FD2D36498F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:86:90:11:1d:c7:db:51:6f:d6:3d:94:7e:
                    3e:ec:9a:c6:11:de:7d:9f:c9:c0:4e:c6:a6:ef:2d:
                    45:e1:76:14:4f:32:b6:41:c2:6a:e9:d8:61:c9:1d:
                    70:52:89:73:d6:b7:1d:fc:fa:80:7c:bc:a7:89:0c:
                    64:b7:17:3f:d6:87:e4:bc:46:fe:d9:ba:a6:a2:01:
                    e9:35:50:ea:b5:b6:be:74:6f:83:f6:59:61:58:59:
                    f1:22:b5:4a:30:ab:90:3e:ed:ce:41:9f:f4:3b:61:
                    ef:8c:06:85:ff:fe:95:88:39:6c:4a:fe:64:e8:03:
                    2c:ad:42:e6:0e:39:02:00:85:aa:c3:aa:ea:80:df:
                    92:56:d0:23:8e:af:e0:bd:6d:17:02:2c:eb:8f:fd:
                    08:80:d7:60:18:90:f5:d4:2f:83:52:86:be:5c:cb:
                    f9:13:1a:87:ac:39:d5:8a:cb:d2:67:81:c5:d0:5b:
                    c0:2a:f9:7b:ce:f7:fb:cb:a3:67:d6:83:a8:4d:a1:
                    6c:e9:b1:e7:c5:8a:22:0a:a7:54:df:53:b1:4d:80:
                    1c:59:67:da:68:a0:73:80:ef:63:27:b4:1f:81:07:
                    93:2c:6f:bc:cc:3e:b6:a8:e7:c5:4a:dd:cd:c1:05:
                    05:c7:ab:66:0d:c7:ff:9d:29:60:14:04:ed:59:20:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:3F:F6:9C:01:94:B2:A6:3C:C2:C0:3B:30:07:FD:2D:36:49:8F:61
            X509v3 Authority Key Identifier:
                keyid:FD:56:9F:D6:69:7C:0F:BE:B3:CE:74:EC:56:A6:06:1F:BB:FC:CE:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_Vaf1ml8D76zznTsVqYGH7v8zrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1562/_Vaf1ml8D76zznTsVqYGH7v8zrE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ad:f1:60:74:f0:3d:90:8b:c4:e7:a9:51:ff:a5:3b:3a:db:
         b8:17:5c:39:a0:65:8d:a0:b0:29:38:01:5a:a1:36:cd:3b:9f:
         17:93:b8:d2:42:1d:97:1c:b7:c6:db:70:03:4a:b5:49:9d:c1:
         81:a3:fa:84:12:c6:58:2b:a1:80:a6:a6:ae:07:a3:e8:59:4e:
         3d:63:5b:63:51:50:a0:7e:cf:25:ec:62:c6:31:9d:51:29:12:
         f4:08:5a:70:8f:85:c1:df:2c:55:66:bc:f4:57:a3:cd:8c:74:
         46:ab:3f:93:4d:db:41:85:76:b2:36:8d:fd:12:1d:8a:1a:a4:
         c6:92:0d:05:7c:32:d7:44:10:b3:86:25:f9:de:e9:bc:7c:db:
         61:f7:12:79:d1:7e:6e:c6:98:22:b3:08:b7:0a:2d:f2:7a:97:
         0c:b0:fa:8a:fc:ad:10:12:19:d7:d1:65:31:26:07:5d:7c:2f:
         53:c4:d3:3c:90:dc:35:80:b9:70:ec:2d:3a:6a:bf:cf:a4:44:
         80:ec:cd:97:84:e6:07:04:ac:a6:c8:b2:0d:4c:03:ff:7e:45:
         d0:47:42:16:08:8d:a3:45:27:da:8c:5c:40:8f:71:0e:04:a9:
         ce:b4:61:d6:98:57:d7:69:43:8f:d5:5e:d1:6a:fd:05:a7:8f:
         2c:7c:45:b0
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBZTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDU2
OUZENjY5N0MwRkJFQjNDRTc0RUM1NkE2MDYxRkJCRkNDRUIxMB4XDTI2MDIxNTAx
MzA1M1oXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoOUYzRkY2OUMwMTk0QjJB
NjNDQzJDMDNCMzAwN0ZEMkQzNjQ5OEY2MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3zhpARHcfbUW/WPZR+PuyaxhHefZ/JwE7Gpu8tReF2FE8ytkHC
aunYYckdcFKJc9a3Hfz6gHy8p4kMZLcXP9aH5LxG/tm6pqIB6TVQ6rW2vnRvg/ZZ
YVhZ8SK1SjCrkD7tzkGf9Dth74wGhf/+lYg5bEr+ZOgDLK1C5g45AgCFqsOq6oDf
klbQI46v4L1tFwIs64/9CIDXYBiQ9dQvg1KGvlzL+RMah6w51YrL0meBxdBbwCr5
e873+8ujZ9aDqE2hbOmx58WKIgqnVN9TsU2AHFln2migc4DvYye0H4EHkyxvvMw+
tqjnxUrdzcEFBcerZg3H/50pYBQE7VkgVs0CAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBSfP/acAZSypjzCwDswB/0tNkmPYTAfBgNVHSMEGDAWgBT9Vp/WaXwPvrPOdOxW
pgYfu/zOsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTU2Mi9fVmFmMW1sOEQ3Nnp6blRzVnFZR0g3djh6ckUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9fVmFmMW1sOEQ3Nnp6blRzVnFZR0g3
djh6ckUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTU2Mi9fVmFmMW1sOEQ3Nnp6blRzVnFZR0g3djh6ckUubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAPK3xYHTwPZCLxOepUf+lOzrbuBdcOaBljaCwKTgBWqE2zTufF5O40kId
lxy3xttwA0q1SZ3BgaP6hBLGWCuhgKamrgej6FlOPWNbY1FQoH7PJexixjGdUSkS
9AhacI+Fwd8sVWa89FejzYx0Rqs/k03bQYV2sjaN/RIdihqkxpINBXwy10QQs4Yl
+d7pvHzbYfcSedF+bsaYIrMItwot8nqXDLD6ivytEBIZ19FlMSYHXXwvU8TTPJDc
NYC5cOwtOmq/z6REgOzNl4TmBwSspsiyDUwD/35F0EdCFgiNo0Un2oxcQI9xDgSp
zrRh1phX12lDj9Ve0Wr9BaePLHxFsA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:37 2026 by rpki-client