Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
File:                     OmLEe2ORFPaCyeWihWvA-cM-xkg.mft (raw, json)
Hash identifier:          AVOMMNntZISXcRtP/iOLLesrU/1976MvxJd++wW6KeE=
Subject key identifier:   2B:BE:FA:32:98:23:BA:2A:5C:09:D9:A4:CB:69:0D:A3:7A:76:B7:7A
Authority key identifier: 3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48
Certificate issuer:       /CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
Certificate serial:       10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
Manifest number:          0749
Signing time:             Mon 21 Sep 2026 11:29:07 +0000
Manifest this update:     Mon 21 Sep 2026 11:29:07 +0000
Manifest next update:     Wed 21 Oct 2026 11:29:07 +0000
Files and hashes:         1: OmLEe2ORFPaCyeWihWvA-cM-xkg.crl (hash: YQ+ynyT3DFSvjtMF/O6OpaVPNzfK9BfOblB1qMQ2Ft4=)
                          2: W1iBrtWgEtrqxikOW33SPjsmSKU.roa (hash: AC/B/V3HO6/F/OcZNjKSMrHNVTIe7vNmFZDceNILA6k=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 13:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A62C47B639114F682C9E5A2856BC0F9C33EC648
        Validity
            Not Before: Sep 15 01:34:46 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=2BBEFA329823BA2A5C09D9A4CB690DA37A76B77A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ae:3f:36:cd:44:6c:56:f5:2b:3f:47:d1:57:
                    ff:e7:74:de:11:8f:fa:81:32:c9:96:25:73:7b:46:
                    58:cf:ec:0e:e7:b5:3e:9e:1a:78:70:e0:2f:16:87:
                    b9:a1:06:07:20:12:7e:01:fa:a9:11:bf:0f:bd:a0:
                    33:84:87:e6:58:d4:05:63:3a:ba:dd:1c:f8:ca:6e:
                    cb:f0:5e:d9:82:ee:2e:c5:86:b7:4a:be:e0:ed:17:
                    76:81:59:36:05:53:fe:8b:35:88:91:8a:ac:df:d4:
                    ea:5f:c9:2e:d9:e8:18:89:69:0b:86:30:67:5e:eb:
                    9e:ff:fc:18:60:13:50:05:e2:c7:f9:06:62:c3:80:
                    32:d3:1c:b5:7a:d0:91:c6:46:6d:8e:fc:6a:f0:e4:
                    f6:15:49:ff:94:f5:f8:f2:81:f4:3e:f4:ce:34:1b:
                    d2:ac:5a:02:23:9b:8b:1e:be:d2:3b:39:20:56:60:
                    aa:cc:23:f2:e7:8d:ef:2c:c7:14:d4:0a:88:a4:c5:
                    cd:83:28:6d:19:c0:a6:dd:cb:11:44:61:e1:bf:4a:
                    6b:17:c1:ef:56:58:78:e4:9e:25:99:3d:94:72:09:
                    0c:c1:fc:f6:53:55:50:37:53:fb:0c:6a:13:5d:7a:
                    0e:d3:42:44:2f:39:7c:82:aa:d9:25:2d:9d:ae:a1:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BE:FA:32:98:23:BA:2A:5C:09:D9:A4:CB:69:0D:A3:7A:76:B7:7A
            X509v3 Authority Key Identifier:
                keyid:3A:62:C4:7B:63:91:14:F6:82:C9:E5:A2:85:6B:C0:F9:C3:3E:C6:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OmLEe2ORFPaCyeWihWvA-cM-xkg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20282/OmLEe2ORFPaCyeWihWvA-cM-xkg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:30:1b:5c:ca:b6:a0:fa:5b:c3:93:b2:b0:e9:17:07:75:
         02:1c:41:9a:2e:f2:d1:bf:c0:80:77:23:08:01:6b:f0:d9:0e:
         a8:a7:a8:49:04:d3:03:82:06:9f:f7:30:db:93:74:00:d7:21:
         96:72:4f:1c:66:fc:86:e4:9c:19:64:70:7d:93:70:ed:39:a5:
         a8:37:6f:3b:a9:6c:a5:ae:3a:53:c4:68:ee:69:c5:6f:00:f4:
         a5:d7:9f:ea:80:30:ca:b2:31:4b:81:ce:da:e8:a1:3a:b2:6a:
         e5:b0:1d:de:b8:cf:1b:2a:24:8c:bf:aa:a2:d0:01:e4:53:a6:
         a6:0a:3d:af:25:c7:e4:ea:e1:64:cb:57:98:85:90:9a:ea:a5:
         57:b3:64:1d:3a:a1:d4:92:3c:b2:55:dc:a9:42:c6:38:e6:d2:
         a3:42:0e:63:48:f3:ae:5b:c3:01:ab:4e:db:7b:78:68:66:0d:
         5e:6c:1e:49:2b:f4:04:f3:94:98:f6:1a:ef:c7:b4:3b:e3:89:
         fc:39:f5:e2:4c:8e:f4:74:68:ee:a9:be:29:82:26:9c:4b:f3:
         50:50:1d:c1:fa:e7:b2:42:46:ab:f3:84:df:ff:00:cc:dc:cc:
         90:9c:af:de:b0:6f:f2:b2:4b:14:fa:5c:3b:50:57:ea:48:64:
         fb:d6:b7:82
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQTYy
QzQ3QjYzOTExNEY2ODJDOUU1QTI4NTZCQzBGOUMzM0VDNjQ4MB4XDTI2MDkxNTAx
MzQ0NloXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMkJCRUZBMzI5ODIzQkEy
QTVDMDlEOUE0Q0I2OTBEQTM3QTc2Qjc3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALquPzbNRGxW9Ss/R9FX/+d03hGP+oEyyZYlc3tGWM/sDue1Pp4a
eHDgLxaHuaEGByASfgH6qRG/D72gM4SH5ljUBWM6ut0c+Mpuy/Be2YLuLsWGt0q+
4O0XdoFZNgVT/os1iJGKrN/U6l/JLtnoGIlpC4YwZ17rnv/8GGATUAXix/kGYsOA
MtMctXrQkcZGbY78avDk9hVJ/5T1+PKB9D70zjQb0qxaAiObix6+0js5IFZgqswj
8ueN7yzHFNQKiKTFzYMobRnApt3LEURh4b9KaxfB71ZYeOSeJZk9lHIJDMH89lNV
UDdT+wxqE116DtNCRC85fIKq2SUtna6hNFUCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBQrvvoymCO6KlwJ2aTLaQ2jena3ejAfBgNVHSMEGDAWgBQ6YsR7Y5EU9oLJ5aKF
a8D5wz7GSDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyODIvT21MRWUyT1JGUGFDeWVXaWhXdkEtY00teGtnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT21MRWUyT1JGUGFDeWVXaWhXdkEt
Y00teGtnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjgyL09tTEVlMk9SRlBhQ3llV2loV3ZBLWNNLXhrZy5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuxjAbXMq2oPpbw5OysOkXB3UC
HEGaLvLRv8CAdyMIAWvw2Q6op6hJBNMDggaf9zDbk3QA1yGWck8cZvyG5JwZZHB9
k3DtOaWoN287qWylrjpTxGjuacVvAPSl15/qgDDKsjFLgc7a6KE6smrlsB3euM8b
KiSMv6qi0AHkU6amCj2vJcfk6uFky1eYhZCa6qVXs2QdOqHUkjyyVdypQsY45tKj
Qg5jSPOuW8MBq07be3hoZg1ebB5JK/QE85SY9hrvx7Q744n8OfXiTI70dGjuqb4p
giacS/NQUB3B+ueyQkar84Tf/wDM3MyQnK/esG/ysksU+lw7UFfqSGT71reC
-----END CERTIFICATE-----
Generated at Mon Sep 21 15:57:23 2026 by rpki-client