Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
File:                     jVezuNsxhZi2b03WYYyxmghWX_0.mft (raw, json)
Hash identifier:          tIjVBTvgClZq62/y3f8uIYHAlnH0K02FRUOcp54NsVg=
Subject key identifier:   AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
Manifest number:          060B
Signing time:             Fri 04 Jul 2025 10:41:01 +0000
Manifest this update:     Fri 04 Jul 2025 10:41:01 +0000
Manifest next update:     Sat 19 Jul 2025 10:41:01 +0000
Files and hashes:         1: LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa (hash: XRkyGpOHJUA5ShPrOxFFKDXmZrUhdl7h+5YR/70BD4k=)
                          2: jVezuNsxhZi2b03WYYyxmghWX_0.crl (hash: AzRR9GzDB+bhXBsarwITDUR8R+4YENMfUxtZE2TG69k=)
                          3: sgJETk3keJ3pOizZKU4YP90fO8k.roa (hash: kmzZDvB/9f0dBbwnLQQ19JkDE9LPf90HpHpz17CiRKs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: Jun 15 01:40:33 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=AD6EADF148C8851D6A71D73A70FB2013037772E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:1c:e7:d1:ed:95:c2:02:0e:18:6d:c9:c0:
                    b6:07:f7:70:c5:22:fc:5c:b8:aa:b2:f7:92:a2:aa:
                    b9:d9:5a:86:c7:09:fd:3a:c0:0f:0e:d6:50:8e:2d:
                    13:6a:42:68:35:5b:95:75:0f:77:60:df:d6:95:cf:
                    1e:2c:6c:56:a9:2a:74:d6:b2:92:61:5d:c2:1c:87:
                    4b:45:4d:b6:95:60:46:da:fc:1b:96:ce:2a:4b:69:
                    f0:42:de:ea:1b:4f:f3:f3:af:88:3c:2f:f8:97:1d:
                    79:f3:1a:02:c6:40:ed:39:37:2b:97:85:83:fb:15:
                    64:bd:14:01:ec:19:a7:04:7b:62:fb:fb:2a:71:68:
                    8a:7d:08:06:fa:ac:41:71:a3:12:de:44:ab:1f:17:
                    d0:02:57:2f:af:31:d6:33:6f:d7:de:9b:97:7e:06:
                    29:01:7c:01:43:63:8d:66:ca:70:39:cc:68:6c:72:
                    07:3c:77:ba:74:c4:e4:4a:79:2e:6e:6d:87:6c:8f:
                    2b:4f:38:45:d1:df:c8:5f:ca:88:47:d0:0b:b9:ad:
                    be:98:2c:31:1e:79:74:a0:15:eb:51:e0:f1:c0:4b:
                    98:04:d7:b7:a0:4a:9d:fc:6a:17:ae:22:ef:f8:12:
                    48:44:2e:3f:c2:26:c9:a0:b5:50:aa:92:5e:1b:7e:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9e:87:9a:e9:69:0c:d8:70:c5:8a:00:3e:7b:0e:bb:c0:32:
         3f:78:07:c6:0f:f2:aa:1e:1a:52:a0:74:b2:81:bc:2e:c4:ad:
         1e:a3:f7:eb:16:ab:4c:2f:89:57:2b:96:13:d2:1d:59:a6:e4:
         8e:56:1b:27:0f:a8:af:ac:05:a6:51:3b:03:df:65:d1:21:ff:
         ce:da:d3:65:07:10:33:92:09:d4:9a:fe:9e:49:84:e0:85:d1:
         77:be:7e:31:0a:63:28:4c:e3:b8:b3:3b:62:cf:1e:2e:fc:d2:
         69:00:6a:f0:5e:b2:d3:62:66:97:d5:70:0c:e8:30:01:aa:da:
         ff:80:90:a8:3a:57:bc:1b:ce:b5:43:95:d5:5e:34:49:b0:8d:
         8f:a6:16:1c:d9:6d:e2:1b:9f:bd:09:85:36:81:b3:c2:85:a5:
         66:9d:57:b0:43:aa:c5:d5:fe:ed:76:d8:c4:92:3c:ce:df:38:
         92:59:90:14:f4:c8:22:7c:63:6a:dc:99:da:6b:e5:48:2f:21:
         c2:3f:14:26:73:69:ed:a4:2f:32:38:ee:e2:f1:98:d1:27:42:
         f9:03:11:82:d1:34:78:ab:29:f7:17:f0:18:6a:a5:79:b2:08:
         8e:42:fa:5f:69:b7:97:5b:e3:4f:b7:43:82:45:6f:63:d7:a3:
         89:70:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:39:14 2025 by rpki-client