Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
File:                     mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft (raw, json)
Hash identifier:          4I5tonuOaYZFNGUkefyFVTpky6QPzDv1eaB3BLxs01w=
Subject key identifier:   E2:37:DB:09:86:6C:F0:E4:F5:48:23:FC:A4:35:52:D6:AF:5A:38:CB
Authority key identifier: 98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2
Certificate issuer:       /CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
Certificate serial:       51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
Manifest number:          0CE2
Signing time:             Fri 17 Apr 2026 18:40:43 +0000
Manifest this update:     Fri 17 Apr 2026 18:40:43 +0000
Manifest next update:     Sat 02 May 2026 18:40:43 +0000
Files and hashes:         1: NGjSirFVS6AdnEZPspr3ZEYr0Dk.roa (hash: Ipw6ARwq4yoxjdCOgT5Bxs6tPN0gNJkQKF9EwuiUjOI=)
                          2: RPZLUbfGNxxcthmw7oP6Q8kNjok.roa (hash: vr0HJ0puG2KXT530cp5G5iscNKSiZidry9Iy5GOByX0=)
                          3: ReP8UIa1dfsO-_Rg8YrH4hLfYMI.roa (hash: uP3Vx67Il9fg1+PrxW5WQRHWdNAt2WAvOscHd6IqxB8=)
                          4: mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl (hash: ZsQ1Jh1FYBHbchZWBIaU776QMHppBzXaVJ8s2JdfSDY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98D124BF56B378D63EC8BD856F283E53E965ECA2
        Validity
            Not Before: Apr 15 01:42:49 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=E237DB09866CF0E4F54823FCA43552D6AF5A38CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:d0:ff:63:ff:6a:62:0c:38:7a:63:a7:ef:
                    b8:5b:8e:6e:35:45:b7:da:5f:25:a3:cd:24:94:8f:
                    77:76:2b:10:45:a8:dc:d4:13:2e:27:79:de:f5:67:
                    2e:73:44:3d:d5:51:25:74:05:40:9b:2f:58:b0:e7:
                    b1:09:3b:96:8d:90:6d:6b:a7:fd:7d:ca:6b:0a:cd:
                    d3:cc:bc:de:ac:3a:0e:c1:95:5e:86:c9:65:e1:97:
                    29:a1:a1:a8:1d:f5:b7:80:cd:7f:33:d7:47:a3:5c:
                    30:ed:99:c9:d6:b1:ec:cf:39:18:a7:e7:2f:34:b6:
                    aa:e9:9a:e4:31:ca:9e:84:66:4b:0f:22:6b:3e:e5:
                    56:0f:5b:ca:b8:89:5f:26:e8:24:db:25:b1:d1:2e:
                    24:83:b5:97:84:4a:16:eb:b0:06:1f:98:91:75:0a:
                    c9:7e:08:69:25:c7:04:d5:51:e3:71:9b:ea:75:ae:
                    87:99:df:d6:cf:b0:16:fe:1d:61:bb:e7:6c:06:55:
                    ae:bf:0f:09:f4:8e:aa:97:d7:4b:83:20:7e:d0:6f:
                    72:99:56:97:90:92:c4:eb:d6:0f:40:49:54:41:25:
                    1c:e9:c8:5f:c2:c0:79:86:23:1c:41:68:93:7b:a0:
                    d3:13:25:9d:b7:b1:b3:c3:af:0b:95:8d:39:7c:6e:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:37:DB:09:86:6C:F0:E4:F5:48:23:FC:A4:35:52:D6:AF:5A:38:CB
            X509v3 Authority Key Identifier:
                keyid:98:D1:24:BF:56:B3:78:D6:3E:C8:BD:85:6F:28:3E:53:E9:65:EC:A2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNEkv1azeNY-yL2Fbyg-U-ll7KI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/603/mNEkv1azeNY-yL2Fbyg-U-ll7KI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:74:ca:32:fb:59:f8:70:73:b5:da:e4:74:94:4f:56:cf:2a:
         e2:a3:9a:c9:86:11:b6:45:65:d5:2d:7b:ab:b8:44:0a:af:26:
         54:fb:f6:da:bf:fc:f5:7b:40:f7:5b:5e:b8:d0:6e:21:10:de:
         84:f8:24:8d:1c:79:71:e3:1a:d3:d3:44:be:ce:b2:e3:a5:49:
         57:ae:5b:48:59:d3:c3:a8:b8:21:68:90:40:1b:7b:3e:b0:f5:
         89:16:65:0e:95:3e:fd:4d:49:03:de:df:e2:ed:61:39:eb:a4:
         c4:cd:aa:ab:d3:7a:da:f4:98:3f:93:03:2d:47:35:c5:c2:3d:
         fe:55:3c:5c:74:ee:3b:ce:77:1c:ff:37:48:bf:20:7e:79:de:
         89:cd:a7:5d:f7:49:4d:3d:dc:18:72:83:89:00:23:a3:05:c8:
         c5:36:c9:45:5a:a0:29:24:b1:3e:f0:d6:4f:e6:06:02:99:fc:
         6a:d1:5a:e2:40:cb:ba:46:e1:19:22:43:fc:6e:af:ba:ed:07:
         46:9e:b0:d0:c4:58:0c:f9:08:2f:39:e6:98:ac:36:83:54:3d:
         62:6b:6a:8c:01:b9:d8:c6:b2:b1:cc:fc:2a:fe:1a:9e:79:e1:
         a3:3a:12:0d:44:32:13:99:ea:a6:d8:35:81:8b:c8:37:4f:ed:
         b8:0e:e7:6e
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5OEQx
MjRCRjU2QjM3OEQ2M0VDOEJEODU2RjI4M0U1M0U5NjVFQ0EyMB4XDTI2MDQxNTAx
NDI0OVoXDTI3MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRTIzN0RCMDk4NjZDRjBF
NEY1NDgyM0ZDQTQzNTUyRDZBRjVBMzhDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMaj0P9j/2piDDh6Y6fvuFuObjVFt9pfJaPNJJSPd3YrEEWo3NQT
Lid53vVnLnNEPdVRJXQFQJsvWLDnsQk7lo2QbWun/X3KawrN08y83qw6DsGVXobJ
ZeGXKaGhqB31t4DNfzPXR6NcMO2Zydax7M85GKfnLzS2quma5DHKnoRmSw8iaz7l
Vg9byriJXyboJNslsdEuJIO1l4RKFuuwBh+YkXUKyX4IaSXHBNVR43Gb6nWuh5nf
1s+wFv4dYbvnbAZVrr8PCfSOqpfXS4MgftBvcplWl5CSxOvWD0BJVEElHOnIX8LA
eYYjHEFok3ug0xMlnbexs8OvC5WNOXxuiVECAwEAAaOCAfIwggHuMB0GA1UdDgQW
BBTiN9sJhmzw5PVII/ykNVLWr1o4yzAfBgNVHSMEGDAWgBSY0SS/VrN41j7IvYVv
KD5T6WXsojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAzL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1sbDdLSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21ORWt2MWF6ZU5ZLXlMMkZieWctVS1s
bDdLSS5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC82MDMvbU5Fa3YxYXplTlkteUwyRmJ5Zy1VLWxsN0tJLm1mdDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKx0yjL7Wfhwc7Xa5HSUT1bPKuKjmsmG
EbZFZdUte6u4RAqvJlT79tq//PV7QPdbXrjQbiEQ3oT4JI0ceXHjGtPTRL7OsuOl
SVeuW0hZ08OouCFokEAbez6w9YkWZQ6VPv1NSQPe3+LtYTnrpMTNqqvTetr0mD+T
Ay1HNcXCPf5VPFx07jvOdxz/N0i/IH553onNp133SU093Bhyg4kAI6MFyMU2yUVa
oCkksT7w1k/mBgKZ/GrRWuJAy7pG4RkiQ/xur7rtB0aesNDEWAz5CC855pisNoNU
PWJraowBudjGsrHM/Cr+Gp554aM6Eg1EMhOZ6qbYNYGLyDdP7bgO524=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:22 2026 by rpki-client