Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
File:                     dBy43AAUAFl7vLIdMeSR1_VaLIA.mft (raw, json)
Hash identifier:          96itVK2jzk1TwjfyvFlmSBsIERzXjF6ZVKNety2PSXM=
Subject key identifier:   05:1F:04:81:BA:26:C8:0C:08:27:12:9C:57:32:60:C7:D1:32:D9:D2
Authority key identifier: 74:1C:B8:DC:00:14:00:59:7B:BC:B2:1D:31:E4:91:D7:F5:5A:2C:80
Certificate issuer:       /CN=741CB8DC001400597BBCB21D31E491D7F55A2C80
Certificate serial:       51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dBy43AAUAFl7vLIdMeSR1_VaLIA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
Manifest number:          0AF8
Signing time:             Fri 04 Jul 2025 21:30:40 +0000
Manifest this update:     Fri 04 Jul 2025 21:30:40 +0000
Manifest next update:     Sat 19 Jul 2025 21:30:40 +0000
Files and hashes:         1: AYAThmql9n-pepRmVAGtvI_8jZY.roa (hash: cVGbJD6nyguMRBg01f/692NxMMoP1CiKH+yNGvU0IY0=)
                          2: dBy43AAUAFl7vLIdMeSR1_VaLIA.crl (hash: dPF2r8REt4SQP/ls3mEHEBLYwFE/hSkcEwkfx839eLU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dBy43AAUAFl7vLIdMeSR1_VaLIA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741CB8DC001400597BBCB21D31E491D7F55A2C80
        Validity
            Not Before: Jun 15 01:32:59 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=051F0481BA26C80C0827129C573260C7D132D9D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:1f:a5:75:db:64:30:4e:37:2f:1b:30:09:
                    e9:b9:8c:41:25:9b:2f:76:ea:ae:bf:0d:ed:89:8b:
                    f4:cd:98:2a:dd:59:c9:94:26:5b:e8:23:b3:96:ff:
                    98:f1:77:4f:d9:08:b5:fd:47:24:58:0e:fa:26:8f:
                    ca:eb:8c:d7:15:23:ce:cc:a0:1d:15:9d:8a:85:3b:
                    f6:62:6e:62:7d:e7:8d:98:00:ad:2e:92:29:90:97:
                    f2:7d:11:c0:0b:e9:3f:1e:a0:ec:bd:e9:9c:21:63:
                    f3:fe:1b:18:8b:59:01:4c:36:e0:2a:b4:84:10:6f:
                    bb:d5:9b:f0:31:1a:c2:00:5c:2e:8d:47:ad:f0:ff:
                    d1:81:f2:67:6d:73:a1:e9:56:7d:86:5d:6a:70:09:
                    7c:6c:4b:90:e6:6b:25:82:68:c1:03:2f:91:7b:18:
                    34:50:24:3b:e7:23:30:e2:ea:a2:04:7d:54:8d:c9:
                    12:d7:ba:6f:87:8a:d8:2a:87:0e:12:39:2c:b9:19:
                    68:ec:72:a8:5c:6c:00:d9:90:57:ac:8b:f4:e3:aa:
                    8e:f9:82:ea:e2:34:54:2d:4f:10:21:52:37:b6:af:
                    d0:ac:78:26:30:00:5c:b5:89:cc:16:09:5d:3f:bd:
                    60:d0:0b:53:a8:b0:24:d9:c5:95:8f:03:58:ab:b8:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1F:04:81:BA:26:C8:0C:08:27:12:9C:57:32:60:C7:D1:32:D9:D2
            X509v3 Authority Key Identifier:
                keyid:74:1C:B8:DC:00:14:00:59:7B:BC:B2:1D:31:E4:91:D7:F5:5A:2C:80

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dBy43AAUAFl7vLIdMeSR1_VaLIA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1611/dBy43AAUAFl7vLIdMeSR1_VaLIA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:1f:75:3b:98:e0:dd:b9:c2:e1:b4:0a:66:ac:78:0d:4d:
         55:1e:60:78:a7:01:1b:53:f4:f1:c6:25:43:75:8b:1a:5e:74:
         97:18:86:fd:46:c5:9a:14:95:19:20:ff:6f:34:98:6d:1e:32:
         02:67:68:fb:97:22:2f:e5:02:a0:70:0b:be:0c:ab:31:40:a2:
         b0:44:65:db:d3:ea:9d:bb:17:88:7a:69:93:07:a3:8a:22:20:
         05:28:f1:fd:b7:96:79:2c:61:2c:40:03:70:c9:07:4c:5c:0d:
         d7:28:41:e5:cf:11:14:4f:39:22:97:9b:fd:cf:44:89:5e:98:
         62:94:3a:95:53:8b:fd:b0:66:48:aa:f9:5f:d0:fb:26:94:d5:
         6a:01:d5:19:6f:22:cf:9c:c0:23:2b:ba:05:fe:d0:6c:77:84:
         4d:1d:88:ef:65:c8:4b:96:05:5c:8f:b4:18:76:1a:af:03:3c:
         7c:2c:09:b6:24:4b:4d:84:81:ce:39:5d:7e:e3:75:39:fe:4b:
         8f:bd:5c:c7:e1:e9:0f:ec:2d:ea:c5:bd:86:ca:37:e1:ef:65:
         4b:56:b2:a2:b9:c9:67:dc:75:13:82:08:ef:b1:4a:df:0a:a3:
         a3:a5:0a:68:d4:5c:2f:b3:e7:2c:2b:a5:67:67:2b:ad:ce:97:
         08:35:fc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:34:28 2025 by rpki-client