Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
File:                     piJKoaybMP-6N30uvrl5ocN-0gI.mft (raw, json)
Hash identifier:          Van640ajXWTFocDowcxI2s1uylhVahwDgD6B8UxsbgQ=
Subject key identifier:   6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
Manifest number:          028C
Signing time:             Sat 05 Jul 2025 03:28:45 +0000
Manifest this update:     Sat 05 Jul 2025 03:28:45 +0000
Manifest next update:     Sun 20 Jul 2025 03:28:45 +0000
Files and hashes:         1: E7wiPInEht-zu-gG_gy_Z9sDius.roa (hash: bh0mazX8O8HzyFGyAfuLAkAaIyxr79ZBjlP4kagXbYE=)
                          2: piJKoaybMP-6N30uvrl5ocN-0gI.crl (hash: S0AJcrMNMP8llqBQ6TAznds70+18W6Y8M4IZsLU2LgE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Jun 15 01:43:12 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=6AD98EBBEF0D0366E1134D5010C37168DBA0EC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:11:91:b3:d8:d1:dc:2e:fc:1c:58:ae:12:
                    01:58:b6:17:88:68:3b:1f:29:42:12:66:9f:cf:ff:
                    21:44:9a:84:bf:89:6b:62:6b:ed:f3:4c:d2:93:79:
                    fc:2b:12:73:9e:d1:b2:23:ec:87:bb:b5:27:7b:d7:
                    79:de:f8:51:f3:e5:3a:f3:e1:56:07:5e:9f:35:c7:
                    88:64:95:96:fe:a9:3f:05:13:6b:a4:5e:54:d6:53:
                    49:5c:30:94:a9:3c:fe:eb:a2:d8:d4:34:6a:7a:fc:
                    54:6b:68:c4:65:bc:9d:b6:af:1d:71:b0:76:36:98:
                    42:f0:00:d9:34:75:33:b0:e2:3c:ad:55:ec:eb:5e:
                    3f:d0:ca:a5:76:76:19:8a:bd:4b:53:b1:3b:c2:47:
                    a5:cc:01:75:e2:fe:71:10:72:36:b3:51:58:78:69:
                    54:0a:b0:0d:cf:46:f3:65:a7:3d:93:51:40:7e:23:
                    e8:15:59:fa:5c:07:cd:d2:ce:03:e7:76:35:01:1f:
                    f2:95:75:ac:02:14:af:86:f9:d8:76:f2:10:2b:59:
                    17:6e:71:8a:b1:cb:25:94:df:54:b1:64:85:67:38:
                    eb:3a:b2:4f:c1:a4:17:16:73:4b:f2:dc:a6:d2:24:
                    fe:ec:a7:5e:2a:b5:f1:24:41:96:21:03:3b:83:6a:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:80:b0:05:72:c3:7e:b2:8c:3c:5f:cb:5c:3c:8b:42:1b:42:
         db:6d:5c:ba:d0:ef:18:5f:57:02:1e:e7:25:ac:65:db:16:14:
         11:cb:1d:e4:39:dd:fb:59:87:b8:61:f2:87:80:60:6f:aa:0d:
         d9:0a:37:59:20:4b:bf:e4:91:e3:73:51:a9:2c:d4:fe:be:79:
         2a:bc:b7:78:89:0e:50:72:07:78:2a:e5:da:de:e2:66:da:25:
         75:09:80:e7:f9:96:49:10:f7:19:09:ad:e2:0f:27:53:01:a2:
         0c:c6:ca:82:be:7d:a1:f1:9d:4e:91:99:a6:2a:cc:8e:b0:95:
         5b:5a:c7:84:13:66:c7:3e:be:10:00:b0:28:23:54:bc:7d:99:
         ab:62:36:df:0f:fb:19:a6:ae:f4:f9:24:0d:f8:2f:b8:e2:1d:
         a4:b1:c5:d8:8f:92:ef:bb:87:8b:f7:f5:a5:73:ff:e2:d4:35:
         a6:e7:26:46:c0:96:af:04:43:37:7c:10:8e:a1:e6:66:d9:ab:
         5f:51:2d:33:28:21:c4:de:40:da:ff:1c:af:29:e9:96:5e:35:
         35:39:53:ba:28:05:16:65:1b:7e:24:64:e3:70:ee:3e:b3:cc:
         41:71:aa:8c:cd:ae:f7:67:94:37:31:43:47:71:08:f3:d8:96:
         bd:ec:20:02
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjIy
NEFBMUFDOUIzMEZGQkEzNzdEMkVCRUI5NzlBMUMzN0VEMjAyMB4XDTI1MDYxNTAx
NDMxMloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNkFEOThFQkJFRjBEMDM2
NkUxMTM0RDUwMTBDMzcxNjhEQkEwRUM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMMxEZGz2NHcLvwcWK4SAVi2F4hoOx8pQhJmn8//IUSahL+Ja2Jr
7fNM0pN5/CsSc57RsiPsh7u1J3vXed74UfPlOvPhVgdenzXHiGSVlv6pPwUTa6Re
VNZTSVwwlKk8/uui2NQ0anr8VGtoxGW8nbavHXGwdjaYQvAA2TR1M7DiPK1V7Ote
P9DKpXZ2GYq9S1OxO8JHpcwBdeL+cRByNrNRWHhpVAqwDc9G82WnPZNRQH4j6BVZ
+lwHzdLOA+d2NQEf8pV1rAIUr4b52HbyECtZF25xirHLJZTfVLFkhWc46zqyT8Gk
FxZzS/LcptIk/uynXiq18SRBliEDO4NqOhMCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBRq2Y677w0DZuETTVAQw3Fo26DskjAfBgNVHSMEGDAWgBSmIkqhrJsw/7o3fS6+
uXmhw37SAjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDAvcGlKS29heWJNUC02TjMwdXZybDVvY04tMGdJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcGlKS29heWJNUC02TjMwdXZybDVv
Y04tMGdJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzAwL3BpSktvYXliTVAtNk4zMHV2cmw1b2NOLTBnSS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAgLAFcsN+sow8X8tcPItCG0LbbVy60O8YX1cCHuclrGXbFhQRyx3k
Od37WYe4YfKHgGBvqg3ZCjdZIEu/5JHjc1GpLNT+vnkqvLd4iQ5Qcgd4KuXa3uJm
2iV1CYDn+ZZJEPcZCa3iDydTAaIMxsqCvn2h8Z1OkZmmKsyOsJVbWseEE2bHPr4Q
ALAoI1S8fZmrYjbfD/sZpq70+SQN+C+44h2kscXYj5Lvu4eL9/Wlc//i1DWm5yZG
wJavBEM3fBCOoeZm2atfUS0zKCHE3kDa/xyvKemWXjU1OVO6KAUWZRt+JGTjcO4+
s8xBcaqMza73Z5Q3MUNHcQjz2Ja97CAC
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:39:22 2025 by rpki-client