Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
File:                     4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft (raw, json)
Hash identifier:          uv1Xm/3+wO9kIOtpayh0c5gQSwn7rDPLppVYyXGI1kU=
Subject key identifier:   09:E9:41:30:84:24:70:DF:B6:39:4A:EB:34:91:A1:AF:0F:53:50:50
Authority key identifier: E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67
Certificate issuer:       /CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867
Certificate serial:       35
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
Manifest number:          104D
Signing time:             Mon 21 Sep 2026 11:06:17 +0000
Manifest this update:     Mon 21 Sep 2026 11:06:17 +0000
Manifest next update:     Wed 21 Oct 2026 11:06:17 +0000
Files and hashes:         1: 4g5t9Do_AgrbZ1oh86kaxNjzWGc.crl (hash: 9MtCrQKOkGQOVpI1Ubsjcl5m08BiGfTW+XciBZCr/IU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 08:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E20E6DF43A3F020ADB675A21F3A91AC4D8F35867
        Validity
            Not Before: Sep 15 01:37:55 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=09E94130842470DFB6394AEB3491A1AF0F535050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:ae:96:2e:76:bc:58:0b:09:98:88:6a:71:
                    34:66:ae:61:4f:74:5d:dd:53:49:46:7e:0d:c0:8c:
                    1b:b8:0d:92:05:11:c2:a9:e1:b6:81:80:81:c5:e7:
                    f2:26:83:43:95:72:44:d7:3b:95:61:c2:8c:6f:9a:
                    00:98:ce:0b:62:97:ee:b5:1c:f5:55:b0:cc:21:58:
                    1c:a8:5a:aa:67:3e:1b:d5:b2:78:92:52:2c:15:30:
                    14:fd:d1:b5:37:74:90:e4:d9:ce:ad:de:72:92:20:
                    ec:dc:90:6d:45:97:c4:2c:8d:c1:89:2b:e5:c2:8f:
                    73:5d:98:99:b0:48:5b:a8:2a:87:bb:22:0a:18:dd:
                    bb:41:7d:e0:b1:e4:9a:fb:0c:3a:d2:5d:ad:b3:cf:
                    73:1d:71:c1:5b:93:fb:3c:af:f4:b4:31:4e:44:b0:
                    2a:9b:27:9e:3f:f6:0f:02:a5:ea:52:46:a5:b7:af:
                    a4:3f:18:86:1b:62:c9:61:57:37:08:19:d4:25:42:
                    37:6d:4a:26:94:7b:f9:c1:10:f0:1e:7e:00:a5:a5:
                    7f:a9:15:c4:31:1a:54:a1:79:0f:76:4f:f6:7a:0f:
                    f2:19:a6:1b:28:72:f2:48:c2:ac:d6:52:46:e2:99:
                    fe:8c:78:47:54:be:2e:20:6c:c3:a6:b9:30:ac:54:
                    a6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E9:41:30:84:24:70:DF:B6:39:4A:EB:34:91:A1:AF:0F:53:50:50
            X509v3 Authority Key Identifier:
                keyid:E2:0E:6D:F4:3A:3F:02:0A:DB:67:5A:21:F3:A9:1A:C4:D8:F3:58:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4g5t9Do_AgrbZ1oh86kaxNjzWGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/4g5t9Do_AgrbZ1oh86kaxNjzWGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d6:97:d9:77:82:61:a9:ee:40:2f:df:4d:d2:d8:4f:8d:52:
         68:15:bc:5c:d7:af:39:a4:80:37:93:f3:77:12:8f:13:55:10:
         2a:6f:b9:5e:f3:2e:7d:32:fb:ee:71:dd:39:e1:09:87:44:a7:
         24:f6:27:d8:aa:2c:33:c7:67:e9:2c:3e:c3:7c:ca:9a:a8:6f:
         05:ee:5d:fc:8c:27:e1:3f:c9:35:c0:36:59:8a:95:30:ba:b5:
         39:51:ce:4f:d8:11:f8:19:42:ed:7b:e1:d7:1a:d7:c9:87:01:
         1f:28:77:17:e4:9e:5b:c5:eb:c9:51:27:b2:6d:99:35:41:0d:
         6e:46:4b:b4:81:7d:3e:e4:72:9b:52:e1:78:77:92:e4:7f:cb:
         7a:f8:98:dd:fc:eb:02:68:f2:a4:f1:e4:62:d2:d6:2d:dd:4c:
         c7:55:5b:27:ec:e4:7c:ff:30:32:cb:41:73:6f:ed:8f:c6:aa:
         7f:47:b8:98:68:32:a7:71:fb:bc:4e:c5:8a:92:61:4e:a8:31:
         37:57:d4:6e:c6:e3:7e:5b:3a:8a:17:ec:fa:19:01:a1:5e:96:
         0b:76:d4:a9:c2:b3:72:a3:69:cd:9e:0c:7f:9d:90:40:bf:7a:
         39:ac:a2:b0:5d:b0:20:10:5f:ae:cf:e8:14:5c:34:70:b1:89:
         4f:a3:0d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:19:14 2026 by rpki-client