Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
File:                     q2yEZLBStyD10sACDmQmtsftGGs.mft (raw, json)
Hash identifier:          6zMDe9EvMMiU+cHHJ7IFE/KiTCyJFF2hV2vp4/rGEPI=
Subject key identifier:   69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Certificate issuer:       /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial:       2C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
Manifest number:          1014
Signing time:             Mon 21 Sep 2026 10:52:42 +0000
Manifest this update:     Mon 21 Sep 2026 10:52:42 +0000
Manifest next update:     Wed 21 Oct 2026 10:52:42 +0000
Files and hashes:         1: Ra780q3frtXQOkD6GB08vlK_L2Y.roa (hash: M+ancDlEI6k4ZLQDbOrkhEF4JY9o+Q/UNDqYSvn774U=)
                          2: q2yEZLBStyD10sACDmQmtsftGGs.crl (hash: mk5mYEYI/WPVSCOtxG4VWhnmwNSJ6cyD6WzDtLBkF04=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 13:45:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
        Validity
            Not Before: Sep 15 01:33:43 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=69C644209752C31DA70DBDC998F223AB61A368FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:f0:08:38:21:92:25:0f:b8:70:8d:7b:a4:
                    28:ae:98:d3:4a:24:fc:7d:3c:99:9c:2a:cb:05:e8:
                    c9:26:39:e0:0e:cb:80:06:82:42:d3:a9:fb:01:4f:
                    eb:07:dc:b1:05:f3:9b:41:6b:e8:7e:8e:70:a9:0a:
                    ce:45:95:1e:83:9f:dd:b0:32:5e:fa:1d:aa:8c:49:
                    d2:ca:2a:8c:de:76:d4:b5:38:64:d7:a0:aa:eb:c8:
                    88:40:3a:86:2b:13:72:e7:78:d5:7d:31:db:cf:32:
                    1f:ec:e7:6f:ca:9b:94:ff:3a:68:1f:09:34:d3:6d:
                    bc:4e:df:57:da:5b:44:80:86:15:85:7e:7b:ec:5e:
                    2e:b8:43:e5:90:bb:1f:6b:76:ad:0a:46:93:a5:8f:
                    d3:40:88:4a:a3:87:27:29:07:a4:85:c8:3f:13:17:
                    37:ad:e7:4f:c1:fe:c1:85:ea:d6:a2:c4:95:2e:37:
                    ae:bf:9d:cf:07:e2:db:7c:9f:1c:a5:ad:d5:b5:b6:
                    08:11:b5:6e:70:be:99:98:bf:60:c4:6c:8d:98:35:
                    a2:44:9e:a1:69:03:d5:97:37:8b:3c:b4:0b:be:da:
                    f0:f1:f3:07:e7:7b:4c:3f:fe:3a:75:73:b3:f9:fe:
                    61:52:f9:a1:30:16:ef:d9:8b:99:50:3d:82:d1:35:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
            X509v3 Authority Key Identifier:
                keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:45:19:b5:e4:8b:41:77:9f:72:a7:10:40:f4:67:d7:56:
         34:44:7b:0a:34:02:c8:45:72:21:27:24:2c:a2:2a:60:f1:4e:
         43:ee:87:0f:1a:12:85:0d:42:58:d2:47:ef:6f:03:ba:98:e1:
         b1:94:6f:df:cd:9e:33:c2:d6:d4:a3:d4:54:49:dd:c7:53:90:
         f6:6e:19:e3:71:22:10:b0:4a:7e:f6:c1:4b:94:7d:42:1f:7d:
         c3:ab:60:25:fe:17:ab:48:77:ac:c2:4f:56:55:6a:24:7c:47:
         d8:a3:24:9f:86:d4:b7:c9:86:d7:33:13:f8:08:6c:b9:0b:fa:
         df:06:43:fe:5b:0d:54:3b:ea:39:eb:a3:36:36:34:fe:3d:76:
         cc:5b:dd:2b:e9:8f:a2:10:c3:2a:0a:fd:b2:52:d5:e1:87:56:
         42:96:8a:0b:b0:60:7f:16:7a:9a:06:f8:6e:f6:f6:e5:5b:e1:
         f9:a1:c9:4c:24:a4:49:ed:8b:6d:7f:ea:e8:b3:28:89:d4:78:
         1b:35:e9:a7:56:dd:c2:fa:da:28:69:50:72:33:e7:96:1b:6e:
         ed:f2:cc:08:be:6c:8c:70:c0:19:92:6b:c3:1d:b3:dc:f5:c7:
         d8:eb:28:1d:8b:3a:6a:20:5c:4f:d8:bb:db:36:92:1a:7a:c3:
         d0:aa:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:44:27 2026 by rpki-client