Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
File:                     Tyg3I2nkguSUJO054kQzDjTrQLA.mft (raw, json)
Hash identifier:          ZSCgIsO56Liq01XPYCZwfrY4RkBFOcZq3Rpa9ATP3vw=
Subject key identifier:   57:91:F2:6F:17:B1:D9:81:94:5A:11:38:DE:8C:68:37:6C:94:21:B1
Authority key identifier: 4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0
Certificate issuer:       /CN=4F28372369E482E49424ED39E244330E34EB40B0
Certificate serial:       61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
Manifest number:          14BC
Signing time:             Fri 17 Apr 2026 02:03:18 +0000
Manifest this update:     Fri 17 Apr 2026 02:03:18 +0000
Manifest next update:     Sat 02 May 2026 02:03:18 +0000
Files and hashes:         1: AWKHACfcEZPHE5Ce5UJuuhysS5U.roa (hash: GtIJnHRH8uxCoccGpkVu9RTEjHYPr3PabmKKTmOgpWY=)
                          2: Tyg3I2nkguSUJO054kQzDjTrQLA.crl (hash: nw9+xBP6k37NXgbHmrGk8BeZV4iynKfr+mWVZRG3/fk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F28372369E482E49424ED39E244330E34EB40B0
        Validity
            Not Before: Apr 15 01:34:12 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=5791F26F17B1D981945A1138DE8C68376C9421B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:55:2e:95:bf:12:b9:30:11:44:2f:2c:b3:
                    16:0b:77:ba:1b:76:f3:00:f5:32:52:97:03:7a:3e:
                    7c:89:e6:5c:3a:f1:ba:dd:56:c7:89:14:29:ae:12:
                    9b:f3:64:bd:78:2d:b9:ac:ca:af:5d:e2:73:43:de:
                    33:9e:99:e1:08:de:59:03:ca:a5:0e:20:1d:42:44:
                    9e:bc:0d:fb:5f:96:16:da:3e:7c:c1:a4:63:f9:c7:
                    a9:f0:e7:3f:94:b4:9e:0d:91:31:93:ca:bd:06:3e:
                    d5:18:b4:00:d8:da:55:fc:75:a4:61:3f:51:00:5c:
                    f2:77:ba:4c:b7:aa:af:cc:b6:34:61:df:90:c9:22:
                    e3:c7:a7:f4:f5:4f:39:8a:47:76:38:be:3a:46:13:
                    22:82:3b:a3:12:d9:48:ed:13:e2:e1:53:02:eb:30:
                    78:e2:e3:63:d4:4c:01:71:9c:50:e0:47:02:6b:07:
                    3b:d0:66:44:59:e6:27:ba:e4:77:c3:6c:8a:13:12:
                    ab:99:b7:c5:9b:73:84:9f:4d:c5:e4:20:9d:d7:82:
                    7c:f3:9a:ba:fd:a0:f5:61:4c:70:57:e8:da:3a:c8:
                    3b:88:9c:85:cf:0d:ca:55:30:ad:f4:b2:cf:5d:ef:
                    bc:b8:0c:ce:a1:89:c5:be:85:0e:ec:6b:05:d2:41:
                    f3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:91:F2:6F:17:B1:D9:81:94:5A:11:38:DE:8C:68:37:6C:94:21:B1
            X509v3 Authority Key Identifier:
                keyid:4F:28:37:23:69:E4:82:E4:94:24:ED:39:E2:44:33:0E:34:EB:40:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyg3I2nkguSUJO054kQzDjTrQLA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30191/Tyg3I2nkguSUJO054kQzDjTrQLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1a:f8:b1:df:e8:b2:65:8f:9c:42:7c:26:af:e0:5f:19:70:
         dd:38:32:98:1f:d2:d6:6e:e0:b2:68:b0:ed:60:d2:0c:37:90:
         9e:d2:4a:cb:98:2b:a0:98:d8:9b:5e:4b:06:1b:a2:b9:3f:81:
         c4:7f:95:0c:1b:d6:b6:e2:d8:b2:45:c7:9b:74:26:49:bb:d6:
         46:56:13:dc:43:f9:91:b5:ef:b9:eb:11:ca:3d:a6:f4:89:87:
         df:90:bc:ed:9a:3f:33:d0:ae:35:5c:04:3c:5a:38:b3:ed:d3:
         98:81:3c:c5:41:a3:c1:73:00:51:0b:37:38:37:8f:63:09:6a:
         31:68:fd:b7:6b:1a:00:5a:12:a6:9c:fe:a6:7b:2a:cb:e5:81:
         24:0e:03:d0:d3:8d:2c:bf:a0:5d:20:34:e4:07:c9:4c:93:e2:
         07:9c:61:84:5d:53:01:15:07:38:2c:ec:a4:16:67:f7:3f:de:
         89:98:bc:e6:ad:aa:3a:23:de:04:92:7b:95:d9:68:70:c4:35:
         56:d8:f3:a9:43:17:81:d0:34:db:b6:3e:cf:d2:4d:8f:46:dd:
         6e:1f:60:cb:bc:74:94:8a:94:5b:a2:3b:a2:80:74:9a:31:e3:
         23:36:95:c3:ef:2a:62:c6:14:95:e1:6d:b2:5d:09:5b:07:53:
         2d:7b:0a:2b
-----BEGIN CERTIFICATE-----
MIIE2TCCA8GgAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RjI4
MzcyMzY5RTQ4MkU0OTQyNEVEMzlFMjQ0MzMwRTM0RUI0MEIwMB4XDTI2MDQxNTAx
MzQxMloXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNTc5MUYyNkYxN0IxRDk4
MTk0NUExMTM4REU4QzY4Mzc2Qzk0MjFCMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK6gVS6VvxK5MBFELyyzFgt3uht28wD1MlKXA3o+fInmXDrxut1W
x4kUKa4Sm/NkvXgtuazKr13ic0PeM56Z4QjeWQPKpQ4gHUJEnrwN+1+WFto+fMGk
Y/nHqfDnP5S0ng2RMZPKvQY+1Ri0ANjaVfx1pGE/UQBc8ne6TLeqr8y2NGHfkMki
48en9PVPOYpHdji+OkYTIoI7oxLZSO0T4uFTAusweOLjY9RMAXGcUOBHAmsHO9Bm
RFnmJ7rkd8NsihMSq5m3xZtzhJ9NxeQgndeCfPOauv2g9WFMcFfo2jrIO4ichc8N
ylUwrfSyz13vvLgMzqGJxb6FDuxrBdJB83MCAwEAAaOCAfYwggHyMB0GA1UdDgQW
BBRXkfJvF7HZgZRaETjejGg3bJQhsTAfBgNVHSMEGDAWgBRPKDcjaeSC5JQk7Tni
RDMONOtAsDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxOTEvVHlnM0kybmtndVNVSk8wNTRrUXpEalRyUUxBLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVHlnM0kybmtndVNVSk8wNTRrUXpE
alRyUUxBLmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTkxL1R5ZzNJMm5rZ3VTVUpPMDU0a1F6RGpUclFMQS5tZnQw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsGvix3+iyZY+cQnwmr+BfGXDd
ODKYH9LWbuCyaLDtYNIMN5Ce0krLmCugmNibXksGG6K5P4HEf5UMG9a24tiyRceb
dCZJu9ZGVhPcQ/mRte+56xHKPab0iYffkLztmj8z0K41XAQ8Wjiz7dOYgTzFQaPB
cwBRCzc4N49jCWoxaP23axoAWhKmnP6meyrL5YEkDgPQ040sv6BdIDTkB8lMk+IH
nGGEXVMBFQc4LOykFmf3P96JmLzmrao6I94EknuV2WhwxDVW2POpQxeB0DTbtj7P
0k2PRt1uH2DLvHSUipRbojuigHSaMeMjNpXD7ypixhSV4W2yXQlbB1Mtewor
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:18 2026 by rpki-client