Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20038/ceWt379jcX-jlifVanybxHDBdjY.mft
File:                     ceWt379jcX-jlifVanybxHDBdjY.mft (raw, json)
Hash identifier:          iJj2COCQg00aOCwNAHQ2ylQLO4O+aWAQMeaMZ3/4g6o=
Subject key identifier:   F4:75:4C:10:0F:8B:87:59:EA:CD:E9:B4:B4:52:A5:49:CA:88:2B:1C
Authority key identifier: 71:E5:AD:DF:BF:63:71:7F:A3:96:27:D5:6A:7C:9B:C4:70:C1:76:36
Certificate issuer:       /CN=71E5ADDFBF63717FA39627D56A7C9BC470C17636
Certificate serial:       0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ceWt379jcX-jlifVanybxHDBdjY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20038/ceWt379jcX-jlifVanybxHDBdjY.mft
Manifest number:          0698
Signing time:             Tue 22 Sep 2026 11:37:23 +0000
Manifest this update:     Tue 22 Sep 2026 11:37:23 +0000
Manifest next update:     Thu 22 Oct 2026 11:37:23 +0000
Files and hashes:         1: ceWt379jcX-jlifVanybxHDBdjY.crl (hash: sGfXAi5SudE3O+/idIlvvnmjdDq36l8ckc4aqzpdN5k=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20038/ceWt379jcX-jlifVanybxHDBdjY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20038/ceWt379jcX-jlifVanybxHDBdjY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ceWt379jcX-jlifVanybxHDBdjY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 14:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71E5ADDFBF63717FA39627D56A7C9BC470C17636
        Validity
            Not Before: Sep 15 01:42:28 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=F4754C100F8B8759EACDE9B4B452A549CA882B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:aa:26:fb:fb:6e:02:8d:b9:33:7b:10:54:
                    a2:5d:a4:04:0d:b7:1e:92:64:f7:c7:8b:0d:f4:3f:
                    23:32:fb:69:46:65:19:28:39:94:b5:b7:79:d0:55:
                    d6:07:d1:35:7a:97:39:27:67:ae:64:60:cf:2a:b5:
                    a8:5d:d5:e4:ef:49:15:18:27:e4:98:2f:53:8b:a6:
                    87:45:ba:6d:04:fe:6d:61:22:c2:c5:34:97:a8:cd:
                    e3:03:50:91:15:5b:9f:a6:51:2e:0f:9c:7e:ef:6a:
                    b7:d6:d9:e5:59:16:ac:3a:ab:dc:28:00:e8:18:59:
                    69:b2:ab:46:83:2e:fb:88:0c:49:ef:08:42:77:16:
                    0f:29:9e:2f:af:21:c4:50:7f:74:6c:cc:5f:6b:0e:
                    e3:cc:0c:f2:53:b1:d2:b7:dc:0d:c9:1e:b6:e0:99:
                    a7:24:6d:e6:60:fb:61:14:2f:9c:55:6f:f1:cb:4c:
                    56:8b:fb:4b:63:a6:21:f0:54:55:4a:3a:03:35:62:
                    26:6c:01:ad:21:5d:a0:fa:55:2c:8e:a2:2d:42:8a:
                    bc:3e:04:1c:43:52:0c:bf:94:3e:ce:59:4f:11:ac:
                    65:2c:37:64:3d:0f:de:d8:2b:d1:68:92:da:74:ae:
                    11:f1:53:17:1e:4e:9e:eb:ce:e6:b4:fb:9e:36:f7:
                    b5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:75:4C:10:0F:8B:87:59:EA:CD:E9:B4:B4:52:A5:49:CA:88:2B:1C
            X509v3 Authority Key Identifier:
                keyid:71:E5:AD:DF:BF:63:71:7F:A3:96:27:D5:6A:7C:9B:C4:70:C1:76:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20038/ceWt379jcX-jlifVanybxHDBdjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ceWt379jcX-jlifVanybxHDBdjY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20038/ceWt379jcX-jlifVanybxHDBdjY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:7c:c9:ea:9c:94:68:42:d3:ff:b9:32:14:84:f6:ea:98:b8:
         64:64:38:74:f3:b8:82:dd:47:a9:4c:e0:cf:61:e2:84:3d:8f:
         0c:1a:96:b2:67:69:0c:e7:6d:fc:3c:aa:de:b3:a9:e2:82:c3:
         b0:f8:0b:2c:46:e9:9f:d3:6b:ab:0f:f9:b1:37:23:fd:7a:00:
         f7:00:72:d2:79:9d:c2:88:5d:ec:d4:a3:68:57:c2:6e:62:01:
         a7:89:62:15:c1:90:f1:10:f5:a3:66:2d:13:b7:5c:2c:66:6e:
         44:7a:fc:16:c8:8f:2d:d3:52:12:1f:cc:b8:f9:6a:44:05:66:
         7e:6c:08:14:54:51:96:48:1b:09:63:d0:df:ab:d5:44:ed:f1:
         54:bc:17:ac:c9:cf:51:f8:5b:9b:d1:51:c1:c0:1b:27:b8:af:
         fc:cf:e9:02:f4:bf:dc:cc:5d:0d:2c:8a:e1:0c:5c:c6:37:40:
         f5:43:0e:f5:6c:a2:2c:b8:dd:3c:99:61:b4:43:58:43:88:54:
         24:96:1d:8c:40:2e:7b:15:d6:bb:b4:25:d9:93:04:c3:72:84:
         d1:49:bc:ad:db:5e:df:23:bc:e8:ad:de:1a:0e:02:55:c4:f9:
         34:9b:0b:62:46:bb:47:a1:54:7b:cf:bb:cf:19:f6:22:6f:b9:
         69:d3:15:97
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUU1
QURERkJGNjM3MTdGQTM5NjI3RDU2QTdDOUJDNDcwQzE3NjM2MB4XDTI2MDkxNTAx
NDIyOFoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRjQ3NTRDMTAwRjhCODc1
OUVBQ0RFOUI0QjQ1MkE1NDlDQTg4MkIxQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL3Zqib7+24CjbkzexBUol2kBA23HpJk98eLDfQ/IzL7aUZlGSg5
lLW3edBV1gfRNXqXOSdnrmRgzyq1qF3V5O9JFRgn5JgvU4umh0W6bQT+bWEiwsU0
l6jN4wNQkRVbn6ZRLg+cfu9qt9bZ5VkWrDqr3CgA6BhZabKrRoMu+4gMSe8IQncW
DymeL68hxFB/dGzMX2sO48wM8lOx0rfcDcketuCZpyRt5mD7YRQvnFVv8ctMVov7
S2OmIfBUVUo6AzViJmwBrSFdoPpVLI6iLUKKvD4EHENSDL+UPs5ZTxGsZSw3ZD0P
3tgr0WiS2nSuEfFTFx5OnuvO5rT7njb3tY0CAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBT0dUwQD4uHWerN6bS0UqVJyogrHDAfBgNVHSMEGDAWgBRx5a3fv2Nxf6OWJ9Vq
fJvEcMF2NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzgvY2VXdDM3OWpjWC1qbGlmVmFueWJ4SERCZGpZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvY2VXdDM3OWpjWC1qbGlmVmFueWJ4
SERCZGpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMDM4L2NlV3QzNzlqY1gtamxpZlZhbnlieEhEQmRqWS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3fMnqnJRoQtP/uTIUhPbqmLhk
ZDh087iC3UepTODPYeKEPY8MGpayZ2kM5238PKres6nigsOw+AssRumf02urD/mx
NyP9egD3AHLSeZ3CiF3s1KNoV8JuYgGniWIVwZDxEPWjZi0Tt1wsZm5EevwWyI8t
01ISH8y4+WpEBWZ+bAgUVFGWSBsJY9Dfq9VE7fFUvBesyc9R+Fub0VHBwBsnuK/8
z+kC9L/czF0NLIrhDFzGN0D1Qw71bKIsuN08mWG0Q1hDiFQklh2MQC57Fda7tCXZ
kwTDcoTRSbyt217fI7zord4aDgJVxPk0mwtiRrtHoVR7z7vPGfYib7lp0xWX
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:10:33 2026 by rpki-client