Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.mft
File:                     LU5x9qbyGs7kffXXRvfJNDus-9k.mft (raw, json)
Hash identifier:          M1w3PntkpIPnbh14KQFg/zAtSMLbV4qU7T8wExr/ZrA=
Subject key identifier:   3C:C4:B5:CC:C9:7E:09:98:1B:5F:DD:3C:E6:9A:90:89:F6:0A:9C:59
Authority key identifier: 2D:4E:71:F6:A6:F2:1A:CE:E4:7D:F5:D7:46:F7:C9:34:3B:AC:FB:D9
Certificate issuer:       /CN=2D4E71F6A6F21ACEE47DF5D746F7C9343BACFBD9
Certificate serial:       34
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LU5x9qbyGs7kffXXRvfJNDus-9k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.mft
Manifest number:          0BAF
Signing time:             Mon 02 Mar 2026 13:56:12 +0000
Manifest this update:     Mon 02 Mar 2026 13:56:12 +0000
Manifest next update:     Tue 17 Mar 2026 13:56:12 +0000
Files and hashes:         1: LU5x9qbyGs7kffXXRvfJNDus-9k.crl (hash: 1+B6QIxVGyj9D4hLEnSe+lN66LZ/jSMkIMnTowAMdCQ=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LU5x9qbyGs7kffXXRvfJNDus-9k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D4E71F6A6F21ACEE47DF5D746F7C9343BACFBD9
        Validity
            Not Before: Feb 15 01:43:29 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=3CC4B5CCC97E09981B5FDD3CE69A9089F60A9C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ea:09:c4:f7:b7:27:a6:06:6e:e6:bf:d7:5b:
                    e5:b3:aa:22:4d:ac:41:0f:95:35:b1:15:b4:85:80:
                    72:51:b6:31:1e:32:78:89:1a:9f:4a:50:d6:f8:a2:
                    0a:ea:31:ee:1e:42:dd:76:8e:4c:58:8b:63:81:51:
                    40:b8:f2:14:68:10:64:a7:d1:ee:a8:19:00:1b:0e:
                    8b:9f:14:04:7d:18:00:3b:7a:50:fe:94:63:ef:d3:
                    5d:a1:ef:23:b5:7a:a6:cd:2c:69:94:be:4b:28:f2:
                    10:fe:6f:c2:1b:55:b2:ff:21:e1:19:dc:2f:17:bc:
                    1e:1a:1f:7c:6e:34:b3:e6:77:c3:4b:01:9f:b7:aa:
                    f2:37:96:52:e2:73:1b:67:96:5e:e9:e4:4f:e9:b7:
                    3a:f3:76:c6:92:f3:7e:b3:f6:c2:90:93:a1:90:71:
                    db:37:d9:74:81:0c:3e:6c:f9:8b:f4:e6:98:8a:1a:
                    a5:36:05:82:7f:9f:3d:7a:87:bc:cd:3f:38:bf:6b:
                    46:1a:b4:3c:65:2e:8c:d0:00:61:fe:03:5d:95:bc:
                    4e:7c:51:f2:37:94:7e:4b:ab:45:00:a6:23:65:9c:
                    b0:df:1f:8c:2f:b2:87:fa:65:4e:0c:c7:47:e2:8a:
                    ee:82:a5:03:7e:5d:63:2f:9e:a1:39:fa:d7:55:8d:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C4:B5:CC:C9:7E:09:98:1B:5F:DD:3C:E6:9A:90:89:F6:0A:9C:59
            X509v3 Authority Key Identifier:
                keyid:2D:4E:71:F6:A6:F2:1A:CE:E4:7D:F5:D7:46:F7:C9:34:3B:AC:FB:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LU5x9qbyGs7kffXXRvfJNDus-9k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/LU5x9qbyGs7kffXXRvfJNDus-9k.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ea:ba:fc:5f:47:6d:e5:ad:66:d9:86:f8:fa:a3:a2:ff:d4:
         b5:ce:8e:d7:d1:bf:41:54:85:00:c0:91:73:82:ab:12:74:a2:
         94:ce:8a:8f:68:f2:a8:90:d4:01:38:38:ef:3f:07:9a:b0:ed:
         37:cb:ef:4f:eb:d2:b9:29:9b:51:d0:e7:e1:34:14:fd:41:82:
         7a:ca:fa:ac:bb:7d:dd:aa:f2:f4:51:7a:8c:22:e5:ff:d0:24:
         ce:ba:72:2d:8a:59:fd:90:c9:f3:d4:bd:4e:b2:7d:52:47:00:
         57:8e:ad:87:0c:51:29:49:00:86:dc:db:7b:ee:80:69:f9:5a:
         c6:4d:f0:21:04:10:a2:39:67:cd:27:c2:ad:b5:4a:d8:cc:85:
         41:a6:73:7d:18:37:6b:0b:2f:54:8e:67:9e:de:09:33:93:2f:
         88:8a:5e:75:95:54:a9:ce:14:85:a3:db:b7:92:42:f6:2c:7c:
         d8:8f:6f:3a:53:d7:1f:96:f2:22:5c:ac:01:78:33:99:d2:60:
         c5:2c:d1:67:cd:28:a1:50:19:ec:40:fc:bc:26:6b:93:d0:df:
         c7:63:cc:a3:89:75:df:77:f3:db:45:58:9b:0b:df:71:df:6f:
         d4:bd:30:88:b9:a0:7e:b0:46:ef:00:53:b5:36:1c:75:3c:18:
         e3:92:eb:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:24 2026 by rpki-client