Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
File:                     pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft (raw, json)
Hash identifier:          of3nUDNP3Aqatp4kS2ybgGhFaSxoufTzbHAw1S+MFHY=
Subject key identifier:   D9:52:CF:47:52:11:A0:31:6C:63:18:41:92:AE:A3:7E:88:D1:CC:7C
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
Manifest number:          0FFF
Signing time:             Tue 22 Sep 2026 03:34:59 +0000
Manifest this update:     Tue 22 Sep 2026 03:34:59 +0000
Manifest next update:     Thu 22 Oct 2026 03:34:59 +0000
Files and hashes:         1: Ax5N2_evLpUmrQ0Jb3z1nIJoDl0.roa (hash: f3jlUa+A6/H8dSvuEtCCq2G0taT2KyGV0oeDVtTOUFc=)
                          2: G0B3NhPNHrSXW0apS02Q5_RaDwQ.roa (hash: uTS/tk8vwQbZA/GWTYHPO8dYSi5nvB17xPcHEI8qn/c=)
                          3: SvPSGqrirRzPmCmnL2ewD1CON8I.roa (hash: OS2IoSEqNTp/RF6nvqX8GJzPkNUXfAd9kfkVxINfOOQ=)
                          4: VclrgUSa6ajQUieeBQ7WThmow74.roa (hash: QYIJWNWP0QSMQhwqymW67Bsox0WbWsv9ScD7xQuAw5o=)
                          5: WqMkiIiBNQnSPM8HZjcZBY1QhkE.roa (hash: 9tgTbsj4azDXmWKzQduKe06gUYSQZsGTZCAKhVy7oyY=)
                          6: iiojS5FpNjBJ_KF8UgQK0-XQtNw.roa (hash: fAaHnGLqrjErVc5h3aoome3o6wdlOPSCe2SM7LywkzU=)
                          7: mROrlao_cCGjKWRD0JRMYKOd7Iw.roa (hash: 6jLcirSWftzZPgdEWK/30khea5lpXHiNz/7UIIl2u4Q=)
                          8: pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl (hash: EDDOk8ij5LmDNn0kD1+jH4AOzaakjo86dgrbZlVdgPE=)
                          9: s5O14B4G9TZ322G7vR5MduabDsg.roa (hash: wgeMcG4U7JXuNEhyc6Mb7CTfTgX545ajtGwOmBRmOEU=)
                          10: udXzNYW3_rZ1GXjZBGyL01fRNCI.roa (hash: mQPVwZUQUg95yK4mdtdD+8bf1+odaGQ5QGPkPCmObcA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 04:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep 15 01:40:05 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=D952CF475211A0316C63184192AEA37E88D1CC7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:a8:f9:58:6b:78:b0:96:6d:a3:36:3e:8b:
                    58:03:9a:ee:ff:6f:2a:7a:c7:f9:15:04:98:6c:55:
                    37:b5:d0:27:a8:76:ad:0f:ab:fb:7c:bd:76:a5:ff:
                    a8:37:8a:64:f2:27:40:1c:52:cb:fb:5e:b1:9c:4a:
                    28:82:2e:80:0b:77:bc:38:dd:69:73:9b:c2:34:98:
                    69:ff:3e:a9:c0:37:78:4f:e3:63:01:1e:a3:83:b4:
                    dd:d9:c7:c6:c4:f1:e8:24:47:27:00:b8:96:d6:19:
                    b2:02:26:02:56:de:e9:62:ab:99:f2:42:dd:6b:64:
                    86:e1:e3:ef:c3:b3:71:f9:9d:ab:98:29:15:21:c6:
                    01:0c:28:d0:f5:69:4c:6c:dc:10:07:5e:eb:0c:9a:
                    3e:09:09:f8:8a:2f:81:93:50:97:68:39:54:f0:d6:
                    ac:63:c1:96:b8:81:3f:73:d0:10:f3:63:cb:52:e7:
                    ec:e8:ef:6e:fd:0c:b1:07:c6:e7:20:86:72:0b:0a:
                    0f:65:9f:80:39:7a:da:31:50:d7:25:61:3e:88:08:
                    21:8d:c1:61:a3:d9:3b:50:1d:c4:4b:f6:aa:0f:8a:
                    53:0f:77:35:47:ec:2c:6c:99:41:76:14:e9:b3:32:
                    cf:b1:d4:69:03:df:54:cd:da:31:98:e3:a2:34:98:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:52:CF:47:52:11:A0:31:6C:63:18:41:92:AE:A3:7E:88:D1:CC:7C
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:3a:70:48:95:ec:99:dd:83:83:88:a0:95:2f:8f:4a:31:ad:
         5c:95:9e:8a:96:7d:11:67:58:b4:88:3e:5a:71:7f:10:10:80:
         15:94:44:fb:6a:96:04:78:f7:df:f1:9f:8a:17:5e:2c:03:ca:
         06:02:b3:f3:b1:8b:b0:c3:ae:f6:be:e0:16:c9:eb:c5:47:db:
         8a:77:d4:34:a3:33:8d:e3:5f:a3:19:b7:7e:6e:97:8a:4c:88:
         08:22:8a:fa:10:6f:45:fb:80:d1:19:f2:d6:6f:42:91:ea:91:
         62:cd:90:7b:32:2b:e1:f6:e8:61:3c:90:73:a3:90:05:a3:34:
         fd:5f:73:4a:20:71:b7:6b:48:70:7b:ef:8f:06:c4:a7:66:d6:
         64:d6:3e:1d:f0:32:35:20:7e:2f:11:b1:80:97:b2:2a:1f:53:
         99:1c:6b:45:98:9f:b4:af:fd:41:da:1e:64:7a:5f:cb:07:1d:
         4a:68:3c:34:2d:cc:33:0b:f2:dd:fa:63:b0:9b:91:18:13:7f:
         f6:a4:59:61:f3:c9:c8:51:26:65:05:72:3a:66:83:43:06:f1:
         c1:77:b3:71:4f:d1:34:1a:69:fb:e6:42:a8:4f:d7:51:35:94:
         b0:b7:70:62:33:20:b7:42:5b:49:7a:39:9b:b9:6a:00:d7:cc:
         6c:b3:65:10
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy
RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI2MDkxNTAx
NDAwNVoXDTI3MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoRDk1MkNGNDc1MjExQTAz
MTZDNjMxODQxOTJBRUEzN0U4OEQxQ0M3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMbQqPlYa3iwlm2jNj6LWAOa7v9vKnrH+RUEmGxVN7XQJ6h2rQ+r
+3y9dqX/qDeKZPInQBxSy/tesZxKKIIugAt3vDjdaXObwjSYaf8+qcA3eE/jYwEe
o4O03dnHxsTx6CRHJwC4ltYZsgImAlbe6WKrmfJC3WtkhuHj78Ozcfmdq5gpFSHG
AQwo0PVpTGzcEAde6wyaPgkJ+IovgZNQl2g5VPDWrGPBlriBP3PQEPNjy1Ln7Ojv
bv0MsQfG5yCGcgsKD2WfgDl62jFQ1yVhPogIIY3BYaPZO1AdxEv2qg+KUw93NUfs
LGyZQXYU6bMyz7HUaQPfVM3aMZjjojSYvzMCAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBTZUs9HUhGgMWxjGEGSrqN+iNHMfDAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD
+TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP
ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8zMTEvcGtMbmh6a0xiT2JPNW9XMFFfazZzMk9mRVd3Lm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACc6cEiV7Jndg4OIoJUvj0oxrVyVnoqW
fRFnWLSIPlpxfxAQgBWURPtqlgR499/xn4oXXiwDygYCs/Oxi7DDrva+4BbJ68VH
24p31DSjM43jX6MZt35ul4pMiAgiivoQb0X7gNEZ8tZvQpHqkWLNkHsyK+H26GE8
kHOjkAWjNP1fc0ogcbdrSHB7748GxKdm1mTWPh3wMjUgfi8RsYCXsiofU5kca0WY
n7Sv/UHaHmR6X8sHHUpoPDQtzDML8t36Y7CbkRgTf/akWWHzychRJmUFcjpmg0MG
8cF3s3FP0TQaafvmQqhP11E1lLC3cGIzILdCW0l6OZu5agDXzGyzZRA=
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:48:43 2026 by rpki-client