Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
File:                     rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft (raw, json)
Hash identifier:          LQquUMW4n3BGRJtD6r5oK4IzCc100/dVP+ixVHPSxqk=
Subject key identifier:   ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Certificate issuer:       /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial:       0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
Manifest number:          0578
Signing time:             Sat 05 Jul 2025 03:55:57 +0000
Manifest this update:     Sat 05 Jul 2025 03:55:57 +0000
Manifest next update:     Sun 20 Jul 2025 03:55:57 +0000
Files and hashes:         1: Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa (hash: OW1a9fJXbnd5dRA6aPAoX3XECFuiihiMUNsm3zVdQQ0=)
                          2: rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl (hash: 6g1IbaiYjmGHt1n5CmDZwYGkX7170FclTNdbyovjl9k=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
        Validity
            Not Before: Jun 15 01:31:14 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=ED5BCE6391E956982A8B963C430979A1AE437821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:81:fd:b5:37:0f:c5:f1:1c:dc:53:fa:bc:
                    40:ed:aa:ec:51:6f:d4:be:58:85:4f:97:e0:f0:0f:
                    0d:86:1f:1d:26:a4:85:61:27:34:c8:1a:c1:80:ae:
                    cf:d9:a7:4b:06:de:9a:6f:c1:7c:bc:18:95:64:59:
                    bd:5a:48:4c:18:33:57:e2:53:7e:28:a9:c8:2d:e6:
                    f4:02:d3:7d:c6:33:9b:47:b1:c3:13:17:33:d7:45:
                    9f:0a:19:e1:0b:09:76:dd:2d:5c:aa:28:1a:bf:a2:
                    d0:fd:ab:5b:e3:b4:8d:a7:ed:99:67:bc:6d:b8:13:
                    56:33:5e:67:89:58:9a:59:c0:6e:81:50:be:81:32:
                    ee:2b:b0:94:99:11:8b:f3:e0:0c:f5:42:04:2f:87:
                    cd:df:f9:f8:85:0e:26:97:f2:c0:35:10:84:f0:30:
                    ef:90:b5:63:e2:06:ad:00:cc:55:44:ff:c2:06:b1:
                    c4:dc:0a:a8:df:f1:01:94:0d:a1:a3:01:b1:69:4c:
                    8c:47:f6:83:b9:96:54:6c:55:f1:0b:f5:fc:f8:ce:
                    a5:3c:91:62:ef:02:ab:b0:ed:0b:ca:ad:f0:1f:91:
                    35:31:c8:35:b0:b3:f8:97:18:45:8f:0c:e3:4d:d1:
                    3a:93:ba:b8:eb:9d:5c:f2:8b:3a:2f:29:54:ff:1e:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
            X509v3 Authority Key Identifier:
                keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:22:ec:3e:68:e2:7c:fe:c5:42:7c:a9:d9:36:37:da:57:
         49:cd:8e:41:bc:66:98:29:bc:ac:5e:ce:f0:8c:fd:a5:f0:61:
         a8:6d:fc:bc:19:49:66:72:e0:8d:cb:3f:6d:a2:3c:da:57:01:
         f6:0a:f5:17:4e:c4:d8:0a:f0:f8:5b:6c:76:d6:9e:65:67:60:
         4a:bd:94:f0:64:87:b8:e4:8c:f0:2c:4b:38:a4:70:e4:f3:1b:
         ed:22:f9:83:d6:27:cb:a2:59:4f:e1:14:ca:c6:94:a5:dc:1e:
         7f:58:5d:2b:ab:bb:71:50:9f:d6:a6:e9:1e:dc:63:11:ff:61:
         93:53:d6:9f:74:20:1e:76:67:9c:99:4e:1c:2a:1d:4a:46:69:
         f5:62:66:2c:83:84:dc:67:36:ae:0c:d1:c7:cf:5a:dc:5b:b9:
         55:26:1d:67:2a:e4:b6:fe:13:24:16:5f:8c:ed:be:23:06:f6:
         88:13:2c:64:15:af:85:7b:de:b4:c6:91:12:9a:5c:d2:e1:69:
         c0:7c:05:b0:3d:6b:41:f7:02:7c:24:8e:57:f6:d8:88:d0:5b:
         f6:c3:06:44:a4:41:41:74:be:37:3f:42:32:2f:0d:0d:ba:b2:
         e9:37:d1:0c:43:02:19:fa:fb:f1:80:44:d1:ca:c1:54:f9:98:
         bb:ed:76:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 05:53:06 2025 by rpki-client