Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/888/z-wr8Cs2UISe8rFPgKaonX7gVNY.mft
File:                     z-wr8Cs2UISe8rFPgKaonX7gVNY.mft (raw, json)
Hash identifier:          6br2OfiqaI9LiXuwkHJYv6WEKDwMWarcz+Jn8l1mifI=
Subject key identifier:   F1:0A:3F:EB:AE:A2:91:C1:80:8D:8E:2C:0A:07:27:9C:D4:4F:D6:E0
Authority key identifier: CF:EC:2B:F0:2B:36:50:84:9E:F2:B1:4F:80:A6:A8:9D:7E:E0:54:D6
Certificate issuer:       /CN=CFEC2BF02B3650849EF2B14F80A6A89D7EE054D6
Certificate serial:       02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-wr8Cs2UISe8rFPgKaonX7gVNY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/888/z-wr8Cs2UISe8rFPgKaonX7gVNY.mft
Manifest number:          71
Signing time:             Mon 21 Sep 2026 19:27:26 +0000
Manifest this update:     Mon 21 Sep 2026 19:27:26 +0000
Manifest next update:     Wed 21 Oct 2026 19:27:26 +0000
Files and hashes:         1: z-wr8Cs2UISe8rFPgKaonX7gVNY.crl (hash: mgeJTmsW464TpLm9TUeIIm5GY6uilfQY/+w4m1XrdLM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/888/z-wr8Cs2UISe8rFPgKaonX7gVNY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/888/z-wr8Cs2UISe8rFPgKaonX7gVNY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-wr8Cs2UISe8rFPgKaonX7gVNY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 17:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEC2BF02B3650849EF2B14F80A6A89D7EE054D6
        Validity
            Not Before: Sep 15 01:41:00 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=F10A3FEBAEA291C1808D8E2C0A07279CD44FD6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:bb:7c:3a:4f:d7:64:8a:ac:f5:89:1e:bc:
                    ec:a3:c5:b9:17:7a:19:3e:7b:f2:d7:86:95:18:49:
                    8f:f0:eb:73:1a:09:0d:f3:e9:82:b4:ff:15:4b:90:
                    65:20:9b:b6:87:2b:cc:7c:25:7f:57:f6:8a:b8:31:
                    c6:b1:1c:3c:53:4d:4d:ec:1f:dd:5c:22:11:fb:9b:
                    58:ed:66:43:df:b3:99:ee:79:6c:62:5c:3b:8b:55:
                    d8:be:9a:68:f0:8b:71:68:cf:8f:36:a9:a7:ad:13:
                    e5:79:33:e5:b5:de:99:c6:c9:02:75:99:00:02:9f:
                    13:57:48:ee:85:de:db:3f:7e:c1:51:c2:63:4a:3f:
                    66:e0:1d:1d:fb:e9:a8:24:02:86:0e:9a:19:6f:79:
                    c8:74:aa:20:36:53:52:98:b2:c3:fb:00:6a:7f:6d:
                    80:34:d8:7e:c4:68:46:7b:59:dd:19:24:0f:79:c0:
                    b9:29:c9:ef:34:3f:2d:c1:72:e8:b7:ee:bf:c2:4f:
                    ab:88:aa:2e:74:69:77:44:a3:6e:91:8d:d5:c9:71:
                    28:bd:a3:05:fe:a4:10:71:2a:db:19:95:88:0a:49:
                    5d:9d:e1:f5:02:d0:bb:3d:8f:21:72:d8:3f:a0:8c:
                    26:8e:a7:0f:85:d0:fb:12:5a:a1:c5:48:7c:74:20:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0A:3F:EB:AE:A2:91:C1:80:8D:8E:2C:0A:07:27:9C:D4:4F:D6:E0
            X509v3 Authority Key Identifier:
                keyid:CF:EC:2B:F0:2B:36:50:84:9E:F2:B1:4F:80:A6:A8:9D:7E:E0:54:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/888/z-wr8Cs2UISe8rFPgKaonX7gVNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-wr8Cs2UISe8rFPgKaonX7gVNY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/888/z-wr8Cs2UISe8rFPgKaonX7gVNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:27:08:5e:96:5e:80:65:43:9d:15:dd:2e:6f:f4:61:1e:13:
         29:16:37:2a:9b:41:b0:22:eb:e3:61:2a:a0:e5:5c:6b:c2:b1:
         cf:96:8d:9e:56:4d:89:4c:c6:5b:84:7e:11:79:a4:a0:2f:ad:
         36:c4:5b:cf:4f:26:af:61:ed:07:d8:4e:4e:59:b4:84:2e:be:
         bb:65:6a:89:50:da:0d:43:b1:6e:e1:0b:d3:c3:3b:8f:2a:b6:
         fc:6c:dc:ce:a5:8d:ee:00:10:4f:83:22:09:d6:b5:6d:5c:29:
         86:82:71:86:67:1a:7b:f7:49:72:6a:31:ff:3f:84:f2:82:f1:
         79:20:02:bb:5c:6c:32:bd:0d:6e:a8:e1:2f:fd:21:b2:86:f7:
         1f:58:2f:da:4b:30:c9:45:9d:dc:94:af:16:6a:21:30:65:6a:
         a4:3b:c2:37:7e:cd:d3:8e:cb:8e:c1:62:3c:c7:db:77:d9:9e:
         63:d7:ef:e0:20:77:40:27:95:7c:ba:26:6e:c8:58:71:38:05:
         b6:10:90:fd:07:18:a9:e0:9f:39:89:93:12:e0:2b:a1:a4:48:
         b2:e3:f5:88:c8:74:c3:71:13:3d:b2:a5:bf:1e:6c:7f:6b:52:
         29:de:04:f0:da:a7:b5:18:cd:42:9a:18:57:1b:83:e4:4e:9c:
         22:5e:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:11 2026 by rpki-client