Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
File:                     UrIcP3vIfuQhVlQCwqMPsivcnjw.mft (raw, json)
Hash identifier:          UDqjcBO+KgOtIDqkqOzWGUbibqhiZLnspx8hTKL0BCU=
Subject key identifier:   FE:52:BF:AB:50:68:66:96:ED:81:4D:27:73:A4:60:E5:E1:26:AA:6F
Authority key identifier: 52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C
Certificate issuer:       /CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
Certificate serial:       0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
Manifest number:          072B
Signing time:             Tue 22 Sep 2026 03:43:31 +0000
Manifest this update:     Tue 22 Sep 2026 03:43:31 +0000
Manifest next update:     Thu 22 Oct 2026 03:43:31 +0000
Files and hashes:         1: IXsofKORjnQ32pm4nF3y9T3vBP4.roa (hash: In0FwLlSx9XADVywWDaQ5chqdprV1hkiI1wdBcNIk2I=)
                          2: UrIcP3vIfuQhVlQCwqMPsivcnjw.crl (hash: vuxz8ROuhD8jPS14I0fT8BZQIHEauzNQ5/qKq62aLJY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 06:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52B21C3F7BC87EE421565402C2A30FB22BDC9E3C
        Validity
            Not Before: Sep 15 01:34:48 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=FE52BFAB50686696ED814D2773A460E5E126AA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d1:c7:b6:d1:58:e0:15:4d:fb:f0:19:fe:a5:
                    91:af:0b:67:20:79:66:e2:ac:fb:fd:db:05:72:83:
                    c7:3e:db:d3:40:0f:45:4b:a7:a2:8c:ba:13:f8:29:
                    85:59:6a:19:8a:ac:11:2c:0d:5e:91:c2:53:f2:7c:
                    ba:38:bd:18:73:51:0a:7b:99:92:42:18:46:c9:65:
                    ae:73:9b:a7:52:f4:6a:cf:a5:e3:63:d3:41:b4:dc:
                    34:3d:f0:b8:f8:cc:1f:fb:d2:02:7b:8a:f2:55:b8:
                    f8:c4:22:46:50:a5:c1:f1:bf:7c:40:a1:1f:30:19:
                    93:18:84:d7:d2:8d:ef:6f:46:a6:c6:5a:71:3b:ca:
                    40:10:90:30:07:4f:04:16:e2:68:f6:c4:d3:60:9b:
                    3e:b4:02:4a:fc:04:79:30:13:72:9b:60:68:6f:72:
                    ea:54:ba:68:7f:73:31:b4:ab:d1:41:c3:9a:b2:91:
                    6e:e2:6c:d2:43:c9:a3:d2:cf:d2:55:0c:cd:81:6a:
                    c1:99:d4:df:2c:a1:11:52:8b:2c:d1:d3:fa:a4:32:
                    26:4b:fd:e7:ff:e7:0e:3b:8c:3c:fa:2e:73:58:2d:
                    24:c3:29:4d:da:4e:b1:77:9b:be:4d:2c:23:ed:1b:
                    32:2b:c4:bd:35:df:92:a2:d5:08:10:8b:cb:5e:08:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:52:BF:AB:50:68:66:96:ED:81:4D:27:73:A4:60:E5:E1:26:AA:6F
            X509v3 Authority Key Identifier:
                keyid:52:B2:1C:3F:7B:C8:7E:E4:21:56:54:02:C2:A3:0F:B2:2B:DC:9E:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UrIcP3vIfuQhVlQCwqMPsivcnjw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/938/UrIcP3vIfuQhVlQCwqMPsivcnjw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:bd:ee:11:52:04:01:93:bb:38:5c:ab:70:91:9b:42:b6:
         f5:d8:79:48:f8:89:2a:b3:f0:1c:98:53:8c:1a:0f:59:d0:da:
         0a:1a:e4:ba:06:d0:64:99:62:a5:8a:50:11:3c:ed:b1:33:f5:
         9b:e0:97:89:7d:b9:40:1c:4b:80:eb:75:c8:04:42:4b:bc:e2:
         a8:14:72:ce:39:9d:a2:b2:28:c8:90:d4:a9:17:6d:ea:19:e2:
         7a:6f:ae:7d:51:cb:a7:fe:31:fa:f0:5d:99:bf:b6:ee:86:50:
         f3:94:f6:e5:99:13:d3:f3:5d:6b:b9:a8:d8:0d:66:d9:68:10:
         a3:7d:db:f3:0c:85:33:b6:80:b9:3d:eb:a2:2e:7e:d0:06:e7:
         8e:57:9b:e4:dc:2a:c1:da:df:fb:26:94:62:5c:07:e5:f9:e7:
         aa:25:2a:af:d8:e0:8a:1a:76:68:a8:90:c3:b8:ae:6e:0a:60:
         1a:37:d4:f1:8c:c2:a0:99:20:fb:94:05:36:23:52:30:4f:2e:
         ff:a0:41:f3:21:f3:58:3d:13:f2:26:93:41:af:11:89:29:54:
         54:5b:f5:ec:23:bc:7b:a7:7f:fa:35:5a:85:ba:7c:6c:9c:5f:
         3d:dc:67:24:d8:23:90:de:e0:2a:22:8a:58:0d:1d:ae:b4:f1:
         75:1f:92:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:10:31 2026 by rpki-client