Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.mft
File:                     DwCoa3vL_vikXegypvLNeXKZ4N8.mft (raw, json)
Hash identifier:          5fJPmqmY8zovK8HDJzCM0o7S8oJweRhUWbIy4OVvq6w=
Subject key identifier:   71:7F:C8:2E:4E:0D:8A:D3:0B:45:F7:71:0B:9A:87:36:8F:29:50:EB
Authority key identifier: 0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF
Certificate issuer:       /CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
Certificate serial:       6F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.mft
Manifest number:          2280
Signing time:             Mon 21 Sep 2026 10:35:31 +0000
Manifest this update:     Mon 21 Sep 2026 10:35:31 +0000
Manifest next update:     Wed 21 Oct 2026 10:35:31 +0000
Files and hashes:         1: CsGyImPynQbwDgWrBOZX64G35Rk.roa (hash: ekjp9PnZLC+GlZFSxnSnHgbc7LzGh4MChVNQ9GyhQUA=)
                          2: DwCoa3vL_vikXegypvLNeXKZ4N8.crl (hash: Cvim9TwCSl18Mw5eoX/umhcLyrOzp20MVtlp34Bk7xo=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 13:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F00A86B7BCBFEF8A45DE832A6F2CD797299E0DF
        Validity
            Not Before: Sep 15 01:36:07 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=717FC82E4E0D8AD30B45F7710B9A87368F2950EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:8e:63:bb:a5:fc:18:07:da:f3:28:75:41:
                    56:21:ba:ec:de:9d:03:f9:6e:38:e3:c0:98:1d:29:
                    ca:4f:e2:41:03:bc:2b:03:4b:dd:52:16:a6:ae:02:
                    ad:7b:3a:a1:25:07:0e:b3:bf:54:d2:8e:f9:71:27:
                    12:fd:ee:e2:02:87:b9:de:5d:b4:37:9a:58:8d:ac:
                    b4:ab:ae:6f:6e:d0:ea:d7:8e:c7:48:25:7b:a5:d4:
                    df:4c:95:15:64:0e:45:e4:c1:2b:eb:12:c2:a2:eb:
                    e0:54:31:9f:e5:b7:fb:f4:09:12:d2:7b:d7:8f:a3:
                    0a:9e:68:0a:37:03:94:1d:b9:e4:35:f4:6d:9a:89:
                    95:e1:bf:4e:43:ce:f3:2b:54:c9:6e:0e:f1:c4:00:
                    d4:d5:60:bc:68:0d:bf:e9:30:65:16:50:28:32:f9:
                    f6:0a:7d:47:90:58:4e:6a:dd:ca:07:e8:81:66:07:
                    7c:90:a0:5d:e2:be:99:66:7c:3a:3b:79:45:89:aa:
                    75:33:a7:d4:9c:2d:78:80:07:70:16:56:57:36:cb:
                    87:cb:4b:a9:d3:0b:18:56:3a:45:b2:d6:a8:d2:11:
                    72:f0:b8:35:f9:e2:ae:ae:39:26:99:ea:e9:77:99:
                    10:54:49:5d:c1:ef:5a:49:69:6a:8e:3a:19:81:e2:
                    8f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:7F:C8:2E:4E:0D:8A:D3:0B:45:F7:71:0B:9A:87:36:8F:29:50:EB
            X509v3 Authority Key Identifier:
                keyid:0F:00:A8:6B:7B:CB:FE:F8:A4:5D:E8:32:A6:F2:CD:79:72:99:E0:DF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DwCoa3vL_vikXegypvLNeXKZ4N8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30215/DwCoa3vL_vikXegypvLNeXKZ4N8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:28:5e:65:93:10:4d:09:59:3d:13:2c:d5:ab:fc:95:ab:75:
         13:d4:23:62:a9:ab:55:fa:2b:31:3c:26:cb:32:b5:de:b8:83:
         4a:95:5f:53:78:d0:8f:f4:66:67:c8:c2:be:85:ab:d1:c2:b2:
         4a:71:73:41:bf:54:e5:ca:44:73:b3:1c:dc:db:4c:41:43:4b:
         58:2d:13:42:8f:7c:8b:92:dc:d5:2c:1c:65:f0:93:3e:19:36:
         6d:4f:96:59:6b:17:38:53:75:e0:7b:f9:59:0c:be:2c:dd:24:
         a4:ff:b6:4c:9f:ce:0c:d8:cb:a6:e5:97:4a:4f:38:c8:c0:52:
         1a:2f:e0:ad:b1:54:a4:14:4c:32:e5:ad:6c:fe:1c:00:cf:16:
         78:96:5b:51:c7:f9:c2:4c:b3:ee:75:cc:a9:10:f4:c3:66:ea:
         51:52:59:d2:42:94:90:1a:e5:cd:e0:79:4f:fd:a2:fd:43:94:
         56:c9:a5:a4:27:6b:91:e2:8b:16:94:7d:19:f4:c8:89:27:26:
         be:05:cb:ec:ca:53:33:09:a3:82:8c:dd:fd:f2:0a:cb:b0:9c:
         a5:e8:ae:2f:c0:0b:01:23:86:2c:bf:03:34:76:f2:aa:b5:00:
         c2:bb:a1:9c:a1:75:68:96:9f:0c:a0:4c:3b:d6:81:a9:93:82:
         b6:3a:4f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:34:33 2026 by rpki-client