Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
File:                     5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft (raw, json)
Hash identifier:          vYpaBM9POUhihLty2j9NrYzOdcwaxBrwk2vlrJajqoo=
Subject key identifier:   00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
Authority key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
Certificate issuer:       /CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Certificate serial:       27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
Manifest number:          0B68
Signing time:             Mon 02 Mar 2026 01:34:13 +0000
Manifest this update:     Mon 02 Mar 2026 01:34:13 +0000
Manifest next update:     Tue 17 Mar 2026 01:34:13 +0000
Files and hashes:         1: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl (hash: U8dYgwjBrn11RBW9taOFFwso7pDfAj9Y68nui0klXrc=)
                          2: 5nRRO3FqY0_z52OteZESkuLt6FU.roa (hash: ZqFhyJwcqfVODumtaeWLr7v888Geij5GRQw3vU8aZTE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
        Validity
            Not Before: Feb 15 01:40:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=00E74B3F7EC4135FF9161F7622E988E7DD761F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:29:8c:37:d1:91:b3:d3:f5:0f:ab:ac:e8:
                    9f:b6:2d:36:f5:12:6e:68:4f:ba:b4:7c:47:85:31:
                    a4:5c:5d:21:a1:c6:8b:19:cb:0c:f6:21:93:49:76:
                    db:cf:b1:7b:be:ef:18:3a:72:e3:bf:fa:22:f7:37:
                    43:e7:1a:af:ff:18:b0:18:52:15:52:a5:04:28:c8:
                    01:80:02:75:b6:05:89:34:19:96:c9:ec:89:73:d8:
                    d0:04:e2:81:2c:c0:9c:98:c9:e4:46:65:47:3e:7e:
                    a2:70:7d:68:09:e5:aa:75:ab:d3:65:fc:f2:c4:20:
                    0d:f9:13:a9:ba:c3:b7:43:91:1c:5b:e4:6c:5f:1a:
                    12:bd:1b:b1:2a:94:fa:bb:1d:b0:b5:4c:75:d2:98:
                    eb:38:25:39:93:03:ba:f0:9f:92:f5:3b:e9:da:92:
                    c1:13:68:b0:17:e3:4a:62:e2:ee:e0:f6:74:fc:d6:
                    7d:62:fb:00:db:e3:a0:16:31:eb:45:c4:9c:c3:af:
                    31:66:23:46:2e:59:b5:6e:70:a8:c8:36:75:f5:45:
                    6c:79:a9:af:10:86:e8:fe:4a:9c:fd:9a:73:73:45:
                    36:1d:87:6a:bd:84:5c:a3:bc:0a:6e:6c:bd:59:3c:
                    29:94:b5:c3:0b:65:17:a2:fd:22:8c:cb:bb:2c:41:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
            X509v3 Authority Key Identifier:
                keyid:E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:7b:d2:c2:4e:22:f7:2a:5f:63:e7:1c:69:0b:ae:e7:4a:
         18:e3:5d:de:31:1d:78:75:99:84:3e:8d:13:59:7c:d2:36:e8:
         8c:73:4a:9e:91:bb:4c:ea:dc:a3:91:55:c3:87:0a:e6:c8:81:
         96:dd:83:2c:a8:05:73:a9:c2:78:c9:7d:74:94:d8:6d:67:7a:
         46:74:bb:bd:79:17:38:73:b0:be:90:40:bf:16:d8:4d:29:a9:
         93:3d:b8:e1:4c:ce:32:29:0b:f5:27:1d:6b:9a:a4:3b:65:f7:
         4b:d8:02:d5:1e:88:f8:48:94:7e:ea:c9:b7:ed:d8:b8:b3:9d:
         24:88:13:ef:44:e9:66:db:a1:b1:f5:3b:7e:99:50:30:bc:58:
         32:5f:a5:3e:d6:75:8f:69:06:c0:ad:f1:df:f4:a9:fc:e4:6e:
         d1:49:f6:b5:81:f9:76:5c:ce:8b:d9:fd:22:73:58:78:32:c2:
         82:d3:d0:10:d9:06:a9:1a:64:42:73:aa:a5:08:35:0d:0a:ad:
         33:01:4d:e9:16:90:63:c6:e2:b5:0e:b7:71:ce:64:c8:6e:3b:
         ce:dc:80:9b:2e:cc:d8:84:9c:61:c6:fa:3e:35:71:7f:1c:d5:
         1c:c1:b4:81:2d:e7:fa:8d:b6:e2:1f:70:e0:41:02:d1:bc:72:
         1a:79:f8:03
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNTRE
MEE3MzJDRTFDNjUxNEEzNEEzRDA2RTkxNkIxQzRGQjhBQTBBMB4XDTI2MDIxNTAx
NDAyMloXDTI3MDIxNTAxMzAwMlowMzExMC8GA1UEAxMoMDBFNzRCM0Y3RUM0MTM1
RkY5MTYxRjc2MjJFOTg4RTdERDc2MUYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALsEKYw30ZGz0/UPq6zon7YtNvUSbmhPurR8R4UxpFxdIaHGixnL
DPYhk0l228+xe77vGDpy47/6Ivc3Q+car/8YsBhSFVKlBCjIAYACdbYFiTQZlsns
iXPY0ATigSzAnJjJ5EZlRz5+onB9aAnlqnWr02X88sQgDfkTqbrDt0ORHFvkbF8a
Er0bsSqU+rsdsLVMddKY6zglOZMDuvCfkvU76dqSwRNosBfjSmLi7uD2dPzWfWL7
ANvjoBYx60XEnMOvMWYjRi5ZtW5wqMg2dfVFbHmprxCG6P5KnP2ac3NFNh2Har2E
XKO8Cm5svVk8KZS1wwtlF6L9IozLuyxBglcCAwEAAaOCAjswggI3MB0GA1UdDgQW
BBQA50s/fsQTX/kWH3Yi6Yjn3XYfEjAfBgNVHSMEGDAWgBTlTQpzLOHGUUo0o9Bu
kWscT7iqCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTYvNVUwS2N5emh4bEZLTktQUWJwRnJIRS00cWdvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNVUwS2N5emh4bEZLTktQUWJwRnJIRS00
cWdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzk2LzVVMEtjeXpoeGxGS05LUFFicEZySEUtNHFnby5tZnQwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBk7HvSwk4i9ypfY+ccaQuu50oY413eMR14dZmEPo0TWXzSNuiMc0qekbtM6tyj
kVXDhwrmyIGW3YMsqAVzqcJ4yX10lNhtZ3pGdLu9eRc4c7C+kEC/FthNKamTPbjh
TM4yKQv1Jx1rmqQ7ZfdL2ALVHoj4SJR+6sm37di4s50kiBPvROlm26Gx9Tt+mVAw
vFgyX6U+1nWPaQbArfHf9Kn85G7RSfa1gfl2XM6L2f0ic1h4MsKC09AQ2QapGmRC
c6qlCDUNCq0zAU3pFpBjxuK1DrdxzmTIbjvO3ICbLszYhJxhxvo+NXF/HNUcwbSB
Lef6jbbiH3DgQQLRvHIaefgD
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:46 2026 by rpki-client