Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5619/4qM_KzqP6Iey8L8dotoZtfxNt-0.mft
File:                     4qM_KzqP6Iey8L8dotoZtfxNt-0.mft (raw, json)
Hash identifier:          YyK7x8StmSDQ8VIhxKXyK7+3mIsj+G+ZyRMHuchDkq8=
Subject key identifier:   74:FE:93:9C:8C:DE:43:93:3B:B2:6B:A4:23:49:DB:33:A2:16:1A:7B
Authority key identifier: E2:A3:3F:2B:3A:8F:E8:87:B2:F0:BF:1D:A2:DA:19:B5:FC:4D:B7:ED
Certificate issuer:       /CN=E2A33F2B3A8FE887B2F0BF1DA2DA19B5FC4DB7ED
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qM_KzqP6Iey8L8dotoZtfxNt-0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5619/4qM_KzqP6Iey8L8dotoZtfxNt-0.mft
Manifest number:          BB
Signing time:             Mon 02 Mar 2026 05:29:00 +0000
Manifest this update:     Mon 02 Mar 2026 05:29:00 +0000
Manifest next update:     Tue 17 Mar 2026 05:29:00 +0000
Files and hashes:         1: 4qM_KzqP6Iey8L8dotoZtfxNt-0.crl (hash: 6lFcwGr4xKfOCOpS5YngwvVdshBcblxhezCiEidEVEw=)
                          2: a3_r1eLSzY26TZIVVrzIOj_cS1k.roa (hash: rjxVL4ydCgYs20XH+yQ5qsvFl3omI5dpr/xUYWy2YOY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5619/4qM_KzqP6Iey8L8dotoZtfxNt-0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5619/4qM_KzqP6Iey8L8dotoZtfxNt-0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qM_KzqP6Iey8L8dotoZtfxNt-0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A33F2B3A8FE887B2F0BF1DA2DA19B5FC4DB7ED
        Validity
            Not Before: Feb 15 01:42:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=74FE939C8CDE43933BB26BA42349DB33A2161A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:36:de:ca:03:02:60:9d:72:1e:4a:65:e5:
                    9a:e1:7e:8f:f0:8b:2d:47:1d:df:89:7c:48:66:01:
                    75:42:f1:a1:95:83:1c:09:89:ce:c5:e2:ce:03:30:
                    1d:a9:7d:7c:77:f7:dd:b0:10:12:e4:65:6f:fc:2b:
                    28:d2:81:b9:8b:3e:70:d6:c8:06:2d:df:a0:29:b7:
                    a7:5f:cf:eb:bb:f1:8b:14:c2:bb:94:6c:3a:f0:cc:
                    60:eb:f2:d2:81:33:89:d6:3a:44:34:20:ae:67:76:
                    4a:e4:ca:dd:be:b0:da:82:c4:48:ff:c0:0b:8b:cb:
                    b2:9f:5b:b9:01:25:ca:88:fb:f6:68:8b:08:e1:eb:
                    5d:96:95:26:79:b1:d7:49:f9:5d:d6:74:27:6f:31:
                    df:7d:2a:c2:64:bf:c3:4d:b2:b1:ba:da:98:ad:fd:
                    46:c0:ba:b1:43:71:10:14:b6:2a:04:13:0b:95:ce:
                    06:10:8a:54:f1:a7:7c:ef:3a:5f:08:fb:ef:09:ad:
                    73:a8:15:e1:44:e4:c9:f3:6a:28:85:cd:4f:c7:c2:
                    c3:db:b8:cf:97:f0:5d:6c:b5:5f:a8:b3:58:4d:e0:
                    54:83:b7:70:88:e6:33:40:b1:ff:87:f4:e8:e1:59:
                    af:ae:c2:35:44:9e:bd:be:96:36:56:20:ae:7c:ca:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FE:93:9C:8C:DE:43:93:3B:B2:6B:A4:23:49:DB:33:A2:16:1A:7B
            X509v3 Authority Key Identifier:
                keyid:E2:A3:3F:2B:3A:8F:E8:87:B2:F0:BF:1D:A2:DA:19:B5:FC:4D:B7:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5619/4qM_KzqP6Iey8L8dotoZtfxNt-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qM_KzqP6Iey8L8dotoZtfxNt-0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5619/4qM_KzqP6Iey8L8dotoZtfxNt-0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e6:dd:5b:f4:22:82:a2:ef:b5:9b:86:3c:e7:97:e1:18:bf:
         2f:87:df:6c:54:dc:88:a7:7d:8d:fb:f5:96:6a:5e:db:69:1c:
         9b:07:98:f8:5b:b9:07:36:96:86:6f:c0:99:b0:90:05:84:bd:
         ea:54:1d:ca:01:68:76:fe:66:1a:70:6d:1b:30:34:56:14:79:
         a9:ad:33:42:2d:0f:0a:3e:18:07:00:47:6b:4d:44:5f:00:ae:
         d6:4f:2a:94:17:ed:c8:49:63:94:f3:45:50:fb:92:f4:21:0c:
         62:00:0a:8e:e6:a6:66:f5:0b:1e:86:cc:79:6b:12:db:56:0e:
         32:a0:12:c5:7b:9f:f3:ed:90:0f:e2:36:0d:38:80:cc:d8:7a:
         3a:63:a6:5a:10:fe:cd:76:bf:64:6c:26:ab:5c:3a:18:77:a8:
         5c:25:c0:53:15:49:d0:10:76:3c:d5:e4:ab:f3:65:9b:90:be:
         ce:32:69:40:68:96:2f:99:6f:84:44:9f:26:df:ae:d6:fc:2f:
         29:1d:a7:bc:12:66:c1:32:16:88:ee:1f:b5:b0:04:7b:98:e3:
         f8:fe:3e:f6:eb:1c:fe:cf:9b:4e:a6:cb:16:5c:b1:3f:29:3f:
         0a:ae:e6:26:45:b1:af:00:9c:25:83:a8:9f:54:09:23:73:f7:
         3f:15:81:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:48:47 2026 by rpki-client