Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
File:                     EWYArZfDsYxb9xPsgAruppKsTME.mft (raw, json)
Hash identifier:          jIpPhVhdH9TaGycr9wzRVCKbqCdqFy3XDw09/tC+zPQ=
Subject key identifier:   2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       8F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
Manifest number:          0CF4
Signing time:             Fri 17 Apr 2026 02:03:53 +0000
Manifest this update:     Fri 17 Apr 2026 02:03:53 +0000
Manifest next update:     Sat 02 May 2026 02:03:53 +0000
Files and hashes:         1: EWYArZfDsYxb9xPsgAruppKsTME.crl (hash: b1WOTrgdQnJz8mJhbvdT/vL1t2Upg0eEhdLzKoGK8ko=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Apr 15 01:42:26 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=2E2E731F792F6A65594CF848E42D88BDF9C33FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:3e:64:02:50:2a:db:98:7f:d6:63:4c:58:
                    bd:6a:ff:16:45:65:08:ed:38:f8:aa:6a:3e:80:1b:
                    41:12:33:67:e4:81:84:84:8b:6e:f7:07:58:ae:a7:
                    66:40:e1:d5:23:97:e0:f9:cb:83:38:35:4f:b9:5a:
                    30:e7:50:70:69:52:e7:aa:2e:eb:5c:45:01:ab:1f:
                    b8:49:c3:fe:0e:2d:67:49:e4:d9:11:61:78:75:75:
                    b3:ce:a9:f8:92:f9:d8:6e:eb:cb:dd:3c:4b:1c:59:
                    7b:0d:27:f0:dd:41:9d:7c:d2:ec:6a:a8:c4:de:f3:
                    80:7d:f8:44:37:90:45:ed:47:90:51:e6:95:fb:19:
                    d6:a8:49:97:19:86:6c:d1:b1:5f:f7:6b:38:20:a0:
                    d3:9d:52:e8:ae:9d:25:35:8d:e9:51:a8:3c:b7:86:
                    86:23:5f:a4:4a:ea:5f:ca:87:bc:76:37:86:34:f9:
                    e5:c0:25:6d:de:9c:a6:5d:4b:00:62:c9:c0:10:1d:
                    54:34:1b:7a:8d:5c:a2:41:36:67:a2:29:34:f3:eb:
                    7b:62:42:aa:da:4c:d6:71:f2:93:ca:c8:9a:3f:70:
                    e8:76:8a:a5:11:30:19:61:77:e6:b1:2a:a4:5f:5f:
                    46:69:63:cc:74:88:19:e3:1d:d9:e1:93:d0:89:09:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:93:5c:32:c7:25:24:ac:51:a3:f7:0a:7d:da:0f:06:35:33:
         b6:ef:93:d5:3f:d3:99:01:0c:c6:b6:67:57:fc:88:7b:61:e5:
         ba:5d:6b:1c:50:3c:87:54:7c:52:04:ac:e9:48:39:26:12:3a:
         89:ba:96:6c:72:14:d3:db:bd:19:74:3b:28:a2:df:27:75:fd:
         f3:8b:9a:e3:12:93:64:32:c3:c6:b4:f1:46:2c:a2:70:da:3f:
         13:d4:64:37:0f:e3:ee:a9:c7:42:ad:b8:a8:59:ee:df:9d:bd:
         04:ad:a2:99:30:1e:af:27:7c:03:cd:b1:1c:81:88:3a:42:51:
         9d:19:c1:cb:9a:50:28:66:6a:6c:7f:e8:dc:03:8d:52:50:03:
         18:d9:74:bc:bd:ed:fd:df:16:17:c6:2f:da:10:50:c7:87:a4:
         92:fd:75:fc:93:7c:09:1e:d6:98:f0:50:71:e6:62:0b:c8:45:
         3a:7e:ca:4a:5a:b6:df:1e:92:e7:3b:8c:98:21:55:21:30:f8:
         3c:49:db:4a:32:97:dc:c2:63:34:f6:66:81:7d:cb:b5:bb:ac:
         22:05:2a:51:17:31:cc:2c:cd:20:56:00:df:ca:08:03:bb:00:
         8a:9e:86:8e:18:79:bb:65:73:b3:b9:a0:c5:3e:00:04:1b:1d:
         a5:4a:7a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:04 2026 by rpki-client