Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
File:                     B6SxrnWhC06C_ojd9KG5ZdYKetw.mft (raw, json)
Hash identifier:          z7a/VvfXueIinn5vdLT1GTQWzoK4TuuT6yEWkgSeYa0=
Subject key identifier:   43:AA:B6:04:F1:F4:AE:2F:44:3F:20:90:A1:AE:87:34:83:17:12:3B
Authority key identifier: 07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
Certificate issuer:       /CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
Manifest number:          01BB
Signing time:             Fri 04 Jul 2025 15:10:49 +0000
Manifest this update:     Fri 04 Jul 2025 15:10:49 +0000
Manifest next update:     Sat 19 Jul 2025 15:10:49 +0000
Files and hashes:         1: B6SxrnWhC06C_ojd9KG5ZdYKetw.crl (hash: P3VENfdK3LpaLWTfyHtCjKGXGjKO3tQsbVHspqrewE8=)
                          2: Vth5HiEat1CZNJNh9_gx5QwFql0.roa (hash: 2hwjVqmPQ05iUf4HcHCcAyynpZXgnAH+iuD2EkpyeKY=)
                          3: jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa (hash: Ayeq7pm0DhPrDChyc57XtijhExMMpul71yfcyFlBFd8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
        Validity
            Not Before: Jun 15 01:43:22 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=43AAB604F1F4AE2F443F2090A1AE87348317123B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:25:3e:ce:1c:44:b4:41:dc:55:a9:a0:a4:
                    e4:86:41:bf:ce:af:06:a2:6f:a2:df:6c:e3:f6:aa:
                    6c:d4:b6:ec:27:3a:2f:da:b3:36:9a:59:41:36:50:
                    f3:98:26:1e:84:18:03:d0:be:ad:18:5d:5d:87:b9:
                    b9:1e:1e:25:e4:d4:49:47:ec:fd:75:5a:71:a0:e7:
                    b3:da:2f:4e:da:47:df:c3:d7:8e:e8:6f:ac:a8:69:
                    6b:53:5f:64:07:98:b3:5c:79:0c:41:da:97:10:46:
                    37:83:4a:90:28:72:3c:70:ff:3c:3c:0d:59:0d:2e:
                    07:b9:21:34:35:f0:08:2a:df:88:60:4c:22:94:6f:
                    2c:77:05:2f:42:64:52:c0:dd:1c:d2:8d:30:74:5c:
                    b9:6c:01:b9:93:f4:85:c6:39:19:43:8e:de:71:9e:
                    53:67:4a:1c:7f:b3:8b:10:72:9a:87:35:68:96:87:
                    6a:5f:7e:35:5b:64:20:79:01:5c:63:27:80:18:2c:
                    08:41:5e:80:0c:66:b6:ca:04:b5:89:ee:14:c0:10:
                    bc:1a:37:13:a3:2c:3e:c2:0f:88:90:69:bc:68:c5:
                    d0:29:38:a7:e6:16:8c:34:a7:1d:07:2e:d2:15:81:
                    3b:bb:5e:5e:cd:9b:c9:6a:40:0e:40:c2:d8:9f:fb:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:B6:04:F1:F4:AE:2F:44:3F:20:90:A1:AE:87:34:83:17:12:3B
            X509v3 Authority Key Identifier:
                keyid:07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:f8:1d:bb:a8:49:79:26:13:5b:d3:d3:05:e8:1b:1f:3f:30:
         01:cc:45:46:11:9a:91:90:cb:be:b5:f7:c7:23:27:c8:3b:e9:
         04:ef:ea:c7:b5:d0:e4:e2:45:fd:e9:69:75:21:24:d9:06:8d:
         0b:f7:13:85:f0:c4:ce:cb:d7:78:c7:2a:b0:e9:c7:4a:b5:cd:
         8b:27:cf:9d:7a:25:13:56:48:ac:52:70:44:5d:96:df:12:0e:
         41:3a:fb:ba:fe:6a:a8:31:46:83:4f:a0:79:85:b4:b8:ea:92:
         cb:21:13:2a:e1:dd:db:13:bd:3a:57:f4:f1:f5:3e:69:14:a4:
         e7:13:40:e3:61:dc:f2:61:64:68:52:c8:2a:3f:9d:2a:e0:24:
         db:b9:82:3d:36:ab:4e:22:40:5f:a8:6c:d1:1c:d4:df:ff:d8:
         3f:d9:ec:72:af:b9:c5:f7:f0:fe:f2:a6:48:11:62:bf:f3:cc:
         97:bc:3e:51:e5:35:5a:ad:14:38:f2:c4:76:a5:bd:54:94:04:
         17:d3:01:27:f4:ea:03:9a:9c:5e:1e:43:05:41:c2:80:58:ed:
         fd:2d:86:d5:2b:2f:55:24:bd:e2:a6:ad:42:83:29:02:38:a9:
         f6:3a:ce:ca:8d:5c:21:82:2e:bf:00:51:f8:30:a7:01:33:9a:
         07:9c:28:f0
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwN0E0
QjFBRTc1QTEwQjRFODJGRTg4RERGNEExQjk2NUQ2MEE3QURDMB4XDTI1MDYxNTAx
NDMyMloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNDNBQUI2MDRGMUY0QUUy
RjQ0M0YyMDkwQTFBRTg3MzQ4MzE3MTIzQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANQkJT7OHES0QdxVqaCk5IZBv86vBqJvot9s4/aqbNS27Cc6L9qz
NppZQTZQ85gmHoQYA9C+rRhdXYe5uR4eJeTUSUfs/XVacaDns9ovTtpH38PXjuhv
rKhpa1NfZAeYs1x5DEHalxBGN4NKkChyPHD/PDwNWQ0uB7khNDXwCCrfiGBMIpRv
LHcFL0JkUsDdHNKNMHRcuWwBuZP0hcY5GUOO3nGeU2dKHH+zixBymoc1aJaHal9+
NVtkIHkBXGMngBgsCEFegAxmtsoEtYnuFMAQvBo3E6MsPsIPiJBpvGjF0Ck4p+YW
jDSnHQcu0hWBO7teXs2byWpADkDC2J/7IwcCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBRDqrYE8fSuL0Q/IJChroc0gxcSOzAfBgNVHSMEGDAWgBQHpLGudaELToL+iN30
obll1gp63DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwOTcvQjZTeHJuV2hDMDZDX29qZDlLRzVaZFlLZXR3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQjZTeHJuV2hDMDZDX29qZDlLRzVa
ZFlLZXR3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDk3L0I2U3hybldoQzA2Q19vamQ5S0c1WmRZS2V0dy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBs+B27qEl5JhNb09MF6BsfPzABzEVGEZqRkMu+tffHIyfIO+kE7+rH
tdDk4kX96Wl1ISTZBo0L9xOF8MTOy9d4xyqw6cdKtc2LJ8+deiUTVkisUnBEXZbf
Eg5BOvu6/mqoMUaDT6B5hbS46pLLIRMq4d3bE706V/Tx9T5pFKTnE0DjYdzyYWRo
UsgqP50q4CTbuYI9NqtOIkBfqGzRHNTf/9g/2exyr7nF9/D+8qZIEWK/88yXvD5R
5TVarRQ48sR2pb1UlAQX0wEn9OoDmpxeHkMFQcKAWO39LYbVKy9VJL3ipq1CgykC
OKn2Os7KjVwhgi6/AFH4MKcBM5oHnCjw
-----END CERTIFICATE-----
Generated at Fri Jul 4 19:18:38 2025 by rpki-client