Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft
File:                     _WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft (raw, json)
Hash identifier:          SpTHhqrqaLpJhDkZGGHSud/V+Qtr2QtpgHnRAEgaEto=
Subject key identifier:   29:D9:67:3B:70:52:9D:81:5A:70:F9:27:A8:E0:DA:5D:83:37:04:E2
Authority key identifier: FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33
Certificate issuer:       /CN=FD640F920FB630F59CE577B5640918AD72D8E933
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft
Manifest number:          28
Signing time:             Tue 10 Nov 2026 12:43:52 +0000
Manifest this update:     Tue 10 Nov 2026 12:43:52 +0000
Manifest next update:     Thu 10 Dec 2026 12:43:52 +0000
Files and hashes:         1: Dlb58CmvqF8Wxq9vYUixrlL0VX0.roa (hash: qGohserCaCBKqkxrbtD/kv8SiNbCsURLvzZKJ2lag/M=)
                          2: XnFSg_YJJctXHQZOg8884luK7M4.roa (hash: OID3ljebJ3tE1nbHNAjsEouvkPXpHgwvnOmFwWfT7jU=)
                          3: _WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl (hash: sAXLDCnHHRyl3d3lJ8xwtgiCpTwMXDn3C//wuMQ3gMw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Nov 2026 10:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD640F920FB630F59CE577B5640918AD72D8E933
        Validity
            Not Before: Nov  4 03:14:56 2026 GMT
            Not After : Nov  4 03:08:29 2027 GMT
        Subject: CN=29D9673B70529D815A70F927A8E0DA5D833704E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:b0:0c:11:34:4a:5c:7c:d5:4b:61:ff:59:
                    82:23:a6:90:f2:67:d9:f0:bc:a5:d6:01:f8:2c:37:
                    a0:c7:5f:44:dc:6a:a8:d5:cb:86:f4:91:10:40:a8:
                    b4:56:01:a6:e4:81:38:5d:d6:f3:ed:ba:70:c0:f8:
                    47:ff:d0:17:26:ba:4f:71:f8:d5:11:2e:42:a9:34:
                    27:67:84:45:4a:03:a2:c0:16:f8:40:ac:21:b1:fe:
                    06:ac:f3:23:16:06:30:1d:1f:ba:17:14:ac:8e:ee:
                    35:4f:84:54:40:d3:5b:97:72:99:42:4e:06:84:2b:
                    a5:69:dd:a6:16:e4:56:52:16:96:b6:de:4a:d3:d6:
                    7d:9d:95:a2:42:e2:d0:d0:a0:95:51:5e:40:21:af:
                    b6:a9:07:19:70:72:d2:80:96:80:91:11:f1:06:c2:
                    82:b1:e3:05:c6:91:cc:00:24:89:d8:36:98:09:4f:
                    ee:6e:04:72:62:20:4e:a6:fa:8d:60:84:16:51:b5:
                    6d:ef:1c:49:a4:45:bd:ec:5a:51:21:58:9d:a1:5d:
                    02:f8:f5:5d:ba:e4:de:53:ec:d5:2d:e2:f7:5e:37:
                    e7:2a:30:c7:17:3e:7d:e3:1e:1a:0c:1f:5c:e2:ad:
                    95:24:18:f2:06:03:79:e4:e2:31:74:f9:67:c2:8b:
                    f0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D9:67:3B:70:52:9D:81:5A:70:F9:27:A8:E0:DA:5D:83:37:04:E2
            X509v3 Authority Key Identifier:
                keyid:FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:de:0e:89:c1:de:b1:6b:60:eb:63:12:e2:40:4f:24:03:45:
         06:c5:f9:f4:68:aa:8a:ab:6b:11:9d:0c:af:f4:59:3a:5a:6f:
         c9:f3:c9:14:fd:46:0d:02:7f:eb:4a:52:91:f0:8a:c4:69:38:
         7b:bf:64:64:42:c4:23:5e:53:36:e0:f0:0d:93:78:75:21:9d:
         9b:35:b6:2f:9c:89:15:f9:cd:f4:25:18:e0:9a:da:84:1c:96:
         f4:68:39:40:99:b8:34:65:e2:0e:94:2f:29:a0:3c:f6:aa:e5:
         1f:4b:c0:a6:92:28:94:4b:6a:9c:4b:18:0d:ff:47:a0:1d:7b:
         99:e0:f6:28:10:b2:69:da:aa:e5:79:49:fb:44:a0:d0:48:09:
         46:2f:67:a9:6e:a5:9e:36:ef:1c:fc:e7:d4:ab:93:68:c3:86:
         91:ac:43:8e:b2:d1:ab:e3:54:b1:09:08:d5:d9:53:c8:d6:a7:
         cd:dc:7d:63:3c:0d:70:a2:06:82:87:d2:ea:8e:3e:89:c9:b6:
         4d:36:de:3a:ef:85:e2:ed:0e:ff:97:b7:7c:d3:ac:1a:2e:20:
         88:a4:1c:9f:68:45:0b:e8:3c:0b:cc:a4:90:56:4e:42:ab:0d:
         ec:28:52:a4:02:f8:bd:ec:eb:e4:96:f9:d0:c0:f6:2a:94:e9:
         11:0c:b5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 16:09:58 2026 by rpki-client