Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
File:                     ZxeEwss7hIfKdHJqZfS0R74BLFY.mft (raw, json)
Hash identifier:          MrKgigzgph9eYlWUEzDDBt4eDaGwF/2/o9SBS8ekeVU=
Subject key identifier:   D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
Authority key identifier: 67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56
Certificate issuer:       /CN=671784C2CB3B8487CA74726A65F4B447BE012C56
Certificate serial:       17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
Manifest number:          05B0
Signing time:             Fri 04 Jul 2025 11:33:18 +0000
Manifest this update:     Fri 04 Jul 2025 11:33:18 +0000
Manifest next update:     Sat 19 Jul 2025 11:33:18 +0000
Files and hashes:         1: CFE3rJciYYY0mR_y1_iVs4eC7zM.roa (hash: NhitJe2bK1zQK5ZMdDD5f5EfKld2utd7/vXzAxT7NG8=)
                          2: ZxeEwss7hIfKdHJqZfS0R74BLFY.crl (hash: bfBRLd5bjnAbsdFnr1yR0ee6GavG2yTqw6nr8OMLj54=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=671784C2CB3B8487CA74726A65F4B447BE012C56
        Validity
            Not Before: Jun 15 01:42:47 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=D7EA3D60908126429271487E225B375F708A47CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:15:0c:31:7d:0a:00:4c:0d:72:7c:46:63:
                    bd:ab:da:f6:c6:c1:8e:d3:40:d4:e4:d9:44:60:fc:
                    21:f0:06:1f:3f:2d:61:0d:da:60:64:a7:fd:ca:aa:
                    34:89:41:a0:70:96:63:1b:f8:27:11:17:47:2f:db:
                    92:3a:57:6a:99:c4:ce:26:15:a5:ab:f7:94:b9:10:
                    b5:a6:a8:4a:4d:dd:f9:ff:43:19:40:4b:85:89:f3:
                    c3:07:16:63:88:0b:49:05:3c:1f:b1:a6:15:5b:b2:
                    8f:b1:fa:10:0d:a0:b9:db:dd:d5:45:f7:08:2a:8a:
                    6c:15:25:91:ac:38:e4:96:33:32:49:90:43:a8:64:
                    a6:dc:a8:d8:69:c9:3b:45:50:85:0a:ba:3f:db:0a:
                    34:fc:e7:7a:96:02:73:73:22:57:7a:c1:5b:96:e6:
                    11:68:3a:c8:e5:d8:e0:c6:66:16:f9:7b:c4:78:8f:
                    cd:ca:cd:63:98:78:74:ca:65:80:04:89:9c:71:c3:
                    6a:a1:79:53:f2:f1:ec:7f:ce:a8:56:14:aa:0b:22:
                    0a:8e:da:3b:93:09:db:2e:99:3a:aa:71:6f:83:98:
                    a6:76:3a:56:80:6d:fe:bc:7c:20:b5:62:af:94:65:
                    f6:48:57:38:b6:5b:a9:26:a8:bf:a6:64:68:bf:2f:
                    d5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EA:3D:60:90:81:26:42:92:71:48:7E:22:5B:37:5F:70:8A:47:CE
            X509v3 Authority Key Identifier:
                keyid:67:17:84:C2:CB:3B:84:87:CA:74:72:6A:65:F4:B4:47:BE:01:2C:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZxeEwss7hIfKdHJqZfS0R74BLFY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30387/ZxeEwss7hIfKdHJqZfS0R74BLFY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:36:e5:44:06:9a:b7:ed:df:03:9a:e0:e0:6e:ae:5c:af:e0:
         d2:b5:a4:cb:52:b5:a8:d1:9d:59:98:ec:57:47:c1:49:5a:f3:
         30:bd:14:3f:0f:65:de:18:3e:72:d8:fa:be:f1:58:8c:d0:8f:
         29:56:a1:d9:32:0f:7b:06:02:86:bb:4f:af:12:53:9b:6e:8d:
         37:d9:1d:34:81:e4:16:82:d9:cf:c0:6a:a9:13:ea:a4:f2:b5:
         e4:33:ea:6d:23:95:97:f1:d6:39:f6:7e:30:d4:ba:6c:1a:8d:
         1e:e2:fc:a8:db:06:b3:5d:7b:ca:03:6e:41:79:eb:e7:c1:37:
         9d:84:8a:83:1e:0d:38:b3:cf:5a:0d:10:b1:a9:0c:a6:3a:b5:
         dc:75:4b:7d:4b:64:5d:79:bf:ad:3a:25:95:5b:d5:9a:31:9c:
         e1:aa:57:ce:b1:8b:d8:d0:ca:2c:ee:a4:b3:21:f3:53:79:73:
         7f:9b:da:6a:85:da:ff:3a:88:2c:60:f5:53:7b:35:c1:b2:16:
         cd:38:c9:21:9b:ec:03:1f:63:4d:63:e6:11:f7:03:a9:87:b3:
         bd:56:c7:19:a8:6a:8a:7a:b3:5d:5d:65:52:91:55:1c:78:24:
         93:9d:89:61:47:72:aa:f2:68:ee:e4:f2:9b:bf:13:e5:19:88:
         99:64:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:17:15 2025 by rpki-client