Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft
File:                     nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft (raw, json)
Hash identifier:          OCepl/7ZYlAq7UbpWupq70Vc+smRMZnLJQCWXUdDrhg=
Subject key identifier:   ED:6E:F8:F7:E8:26:46:D3:AB:FB:DA:44:BA:C3:6A:58:43:12:B8:B7
Authority key identifier: 9F:16:C4:C3:6A:2E:44:B6:16:F9:A4:9E:E6:EE:81:0D:68:EA:E3:C6
Certificate issuer:       /CN=9F16C4C36A2E44B616F9A49EE6EE810D68EAE3C6
Certificate serial:       15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft
Manifest number:          0AFF
Signing time:             Thu 24 Sep 2026 16:16:37 +0000
Manifest this update:     Thu 24 Sep 2026 16:16:37 +0000
Manifest next update:     Sat 24 Oct 2026 16:16:37 +0000
Files and hashes:         1: n2JLtVJiHpMVXzVseCsH0VjwKI0.roa (hash: b0m/6KK+v26v2Vac8LNitmbYglC5tBHvKq3QlmZMq3s=)
                          2: nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl (hash: 9S4vc5pk5kQuYkG1ilXxTZ7QvHSXHq1GLOIhAxwUR2Q=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F16C4C36A2E44B616F9A49EE6EE810D68EAE3C6
        Validity
            Not Before: Sep 15 01:34:18 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=ED6EF8F7E82646D3ABFBDA44BAC36A584312B8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:b1:33:86:7c:e7:41:c0:d9:2c:15:27:80:
                    d6:28:4a:b4:51:65:c0:f4:55:86:c6:09:30:76:de:
                    98:22:6a:a7:f8:39:5b:b5:4d:79:85:a8:9a:d2:e0:
                    bb:51:03:bb:64:db:c3:50:01:57:65:dd:70:d5:3e:
                    56:f7:13:19:10:37:17:6c:e0:76:40:8c:b3:30:9f:
                    d3:f2:00:b4:43:a6:67:f9:7f:8f:bb:12:3e:d5:68:
                    d9:0c:3b:48:26:6a:72:e0:98:05:40:e1:ef:25:c3:
                    1f:f6:f6:6b:6c:ce:70:06:97:91:95:52:cb:a7:89:
                    3a:96:57:8b:73:81:04:b1:dd:0e:dc:83:a9:e6:ff:
                    7b:51:65:85:81:db:70:90:1c:7c:c6:d8:d8:a9:e9:
                    6d:90:96:75:5a:80:33:bd:53:69:5d:b3:cb:99:20:
                    19:e1:18:f8:2d:2c:95:aa:06:45:d0:67:6a:90:01:
                    2e:e9:fa:55:b1:0c:62:34:54:d5:ee:68:8f:81:2e:
                    dc:c8:f7:29:f3:1f:a1:81:c5:36:7c:25:1d:30:fd:
                    d8:fb:1f:6d:f4:3a:01:53:e5:5c:72:a8:3c:aa:01:
                    7c:92:a5:e6:c4:65:e1:03:18:a2:3d:f9:36:90:a1:
                    cc:66:71:b5:71:6e:bc:0f:99:6d:9b:87:ab:a4:d8:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:F8:F7:E8:26:46:D3:AB:FB:DA:44:BA:C3:6A:58:43:12:B8:B7
            X509v3 Authority Key Identifier:
                keyid:9F:16:C4:C3:6A:2E:44:B6:16:F9:A4:9E:E6:EE:81:0D:68:EA:E3:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nxbEw2ouRLYW-aSe5u6BDWjq48Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20269/nxbEw2ouRLYW-aSe5u6BDWjq48Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:ee:10:1c:a5:46:65:b5:7f:5e:5c:bb:6a:e8:81:91:ac:
         ee:24:b9:8a:9a:24:95:9d:2b:c1:c9:ff:32:77:f5:a3:80:d4:
         6d:74:87:08:78:c1:af:a7:89:31:13:4a:3b:9a:4c:aa:25:13:
         ab:c6:6a:ae:17:b0:e8:89:6d:7f:ca:c5:b3:d9:49:b0:4b:a5:
         5c:94:9b:11:55:73:e7:b8:08:26:9d:f7:db:fd:71:2e:5f:f9:
         37:7c:3d:c4:d6:95:f3:fd:18:be:46:23:77:a2:bf:e3:1a:5a:
         59:a1:9e:66:0b:88:f7:64:d0:c2:9b:1b:9e:9d:e2:41:3f:94:
         54:e8:42:6b:36:1f:b3:cc:36:8e:02:fb:51:33:a7:24:9e:62:
         22:b2:44:be:6d:b9:75:b2:98:55:8a:5f:ce:af:f0:79:71:fd:
         71:df:c4:99:96:e6:65:c6:61:0b:74:ed:87:b4:49:4f:25:7c:
         1a:c7:32:45:47:92:e6:79:82:0d:bf:60:7c:e3:37:39:01:00:
         29:3d:0a:4e:d6:35:2c:6f:73:12:cb:c8:c2:c5:18:97:3d:d7:
         76:09:51:a0:96:7d:fd:9d:ab:fd:03:5b:f1:05:38:81:0b:8a:
         43:6d:56:3f:d8:c8:83:46:3c:82:82:d8:56:3f:df:59:39:d7:
         c6:9e:50:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:59:41 2026 by rpki-client