Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
File:                     rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft (raw, json)
Hash identifier:          ojKlC1Uq09brvh9LAXNny4Qw1pZXI8Vb8rdg++AXPFU=
Subject key identifier:   ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Certificate issuer:       /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
Manifest number:          0C22
Signing time:             Fri 17 Apr 2026 01:58:05 +0000
Manifest this update:     Fri 17 Apr 2026 01:58:05 +0000
Manifest next update:     Sat 02 May 2026 01:58:05 +0000
Files and hashes:         1: rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl (hash: 8lXOb+fbx66VZo1IIrpttG/6w47L48Pm+AG0zDFzG14=)
                          2: xXzUKuIW4skQEyHWw20nwPsJqF8.roa (hash: 7GbTObbdo1bO9jS3giu4fMr5NbrUdWHR8yb9s5GPGwk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
        Validity
            Not Before: Apr 15 01:32:49 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=ED5BCE6391E956982A8B963C430979A1AE437821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:81:fd:b5:37:0f:c5:f1:1c:dc:53:fa:bc:
                    40:ed:aa:ec:51:6f:d4:be:58:85:4f:97:e0:f0:0f:
                    0d:86:1f:1d:26:a4:85:61:27:34:c8:1a:c1:80:ae:
                    cf:d9:a7:4b:06:de:9a:6f:c1:7c:bc:18:95:64:59:
                    bd:5a:48:4c:18:33:57:e2:53:7e:28:a9:c8:2d:e6:
                    f4:02:d3:7d:c6:33:9b:47:b1:c3:13:17:33:d7:45:
                    9f:0a:19:e1:0b:09:76:dd:2d:5c:aa:28:1a:bf:a2:
                    d0:fd:ab:5b:e3:b4:8d:a7:ed:99:67:bc:6d:b8:13:
                    56:33:5e:67:89:58:9a:59:c0:6e:81:50:be:81:32:
                    ee:2b:b0:94:99:11:8b:f3:e0:0c:f5:42:04:2f:87:
                    cd:df:f9:f8:85:0e:26:97:f2:c0:35:10:84:f0:30:
                    ef:90:b5:63:e2:06:ad:00:cc:55:44:ff:c2:06:b1:
                    c4:dc:0a:a8:df:f1:01:94:0d:a1:a3:01:b1:69:4c:
                    8c:47:f6:83:b9:96:54:6c:55:f1:0b:f5:fc:f8:ce:
                    a5:3c:91:62:ef:02:ab:b0:ed:0b:ca:ad:f0:1f:91:
                    35:31:c8:35:b0:b3:f8:97:18:45:8f:0c:e3:4d:d1:
                    3a:93:ba:b8:eb:9d:5c:f2:8b:3a:2f:29:54:ff:1e:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
            X509v3 Authority Key Identifier:
                keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a6:14:2b:97:20:a4:a7:86:a6:2d:c2:a1:bb:90:70:fb:b8:
         74:ec:d5:54:44:a5:c4:e0:f4:c4:7a:d7:a7:05:51:7e:68:0a:
         88:a0:f5:e0:02:c0:83:e4:d4:16:81:e7:cb:12:53:92:84:a1:
         c2:e5:f2:27:0a:80:ac:c9:28:80:f9:23:9b:54:57:5a:14:2d:
         c9:40:c9:cc:97:c7:0b:c5:9f:3e:19:6b:a9:ce:77:e7:f4:25:
         70:0d:b8:48:63:81:84:4c:4b:c6:c3:96:d8:da:8a:23:95:ca:
         8c:ae:66:43:bd:c0:fb:81:5b:9e:3b:95:6e:a8:51:46:ed:94:
         16:5c:e3:40:12:69:24:32:f8:7e:66:7f:34:fb:3c:05:cc:c5:
         94:be:e4:75:74:a2:94:9d:9e:3e:36:55:a7:96:a7:5f:85:d7:
         3f:09:39:7b:8d:b9:25:0e:df:74:0f:89:16:7d:d8:cc:a3:ce:
         02:e4:d0:1f:4e:23:9b:d0:de:38:3f:ef:bd:04:a5:da:b4:47:
         31:ca:d7:32:c7:2e:fc:89:41:60:eb:15:ad:59:46:94:55:71:
         14:26:1e:81:08:e6:b5:4f:8e:64:09:1f:4c:82:64:24:91:9f:
         8b:7f:34:28:7c:a2:e0:f8:cf:bd:5c:bd:fe:f9:c7:bb:1d:cf:
         42:4f:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:11 2026 by rpki-client