Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
File:                     VrJOODhFr-fapjHAHYD7UWw0i7A.mft (raw, json)
Hash identifier:          Cvft55czxYyjlDrd//YFva3FMgrYeK6sPk2v+r2Z3xE=
Subject key identifier:   E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Certificate issuer:       /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
Manifest number:          0224
Signing time:             Fri 04 Jul 2025 12:11:26 +0000
Manifest this update:     Fri 04 Jul 2025 12:11:26 +0000
Manifest next update:     Sat 19 Jul 2025 12:11:26 +0000
Files and hashes:         1: K03-WjLYOd1HsPB7C9phAG2f_Is.roa (hash: AS1r+GhsGIxu7cJEOtlfjdwuvT/ekIwzgGxIvuZ9x/0=)
                          2: TpzjShFDkh5n2KnbnTSM1bc4-78.roa (hash: 9lgomC8CNJnaCGR3udsJYmIRXb/RDExg+GTPgNguKDo=)
                          3: VrJOODhFr-fapjHAHYD7UWw0i7A.crl (hash: PfHEhoow5oumIOvp7cM0Kih4zVtvwAmTQ+8exJx4/g4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
        Validity
            Not Before: Jun 15 01:43:18 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=E2259B1529EE6A496D36569FFBCA2ECD646F56C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:4d:65:7b:41:bc:d8:34:6d:80:33:2b:d7:
                    ee:38:79:39:d0:82:10:6a:1b:e2:ee:a8:40:b4:5c:
                    44:69:0a:e6:4f:20:a9:43:33:fc:f8:ec:38:57:5f:
                    70:fd:41:9d:78:a7:44:45:69:22:9b:6b:bb:2e:d9:
                    86:3c:f2:f0:20:cf:03:7e:a3:c5:1c:19:b0:51:d3:
                    7c:20:7b:a6:5f:15:e9:03:4e:47:d2:cf:a6:32:3c:
                    e2:f8:f6:f3:14:67:d1:ce:f5:b9:51:ad:54:a8:53:
                    10:53:e3:7b:12:b1:20:87:33:eb:e0:58:45:a7:1e:
                    55:10:40:f2:43:a6:a8:a6:35:7d:2e:a6:9f:c2:cf:
                    da:b5:46:2c:98:6d:9f:77:58:ac:a4:d6:e8:d6:b3:
                    74:8e:c9:6f:94:42:ce:3f:af:d8:ed:39:39:fe:24:
                    e1:1a:6c:7a:7a:94:4a:48:79:a6:fe:b7:c9:23:fc:
                    3a:c4:40:14:5e:b3:af:e5:43:29:d4:c1:d9:47:22:
                    e9:8e:de:90:a7:77:58:7f:1d:db:1f:30:ba:84:2f:
                    f7:4f:21:65:10:7d:a2:ed:d7:20:a3:cd:ac:c0:90:
                    c1:fa:29:dd:3e:24:c0:a8:d9:74:40:26:ee:a6:34:
                    f0:06:36:91:18:61:14:6a:80:48:b5:7c:8c:c0:45:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4
            X509v3 Authority Key Identifier:
                keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:1e:fd:dd:f7:91:82:a3:cf:20:61:14:7d:ec:37:9e:84:
         3b:30:45:17:c1:ae:9c:82:9d:34:2a:3c:b0:da:ed:c3:e3:3b:
         7c:27:71:a2:48:5b:c0:5e:56:86:c8:50:14:30:bf:3f:b5:00:
         24:bf:e1:db:52:d2:52:e0:8f:25:c2:6f:f6:44:1c:cb:91:93:
         ee:ed:6c:f2:52:3d:cc:df:c6:82:9e:d3:5a:40:5e:04:84:5c:
         08:72:80:b5:88:2d:38:9a:19:63:9d:05:25:63:4c:f5:d7:5f:
         c5:b7:db:64:f7:ed:c9:6b:13:df:45:f4:5c:93:8b:a3:27:d7:
         1e:26:67:45:46:26:e2:78:ac:65:37:af:17:c3:89:a0:12:97:
         24:23:75:b3:76:12:90:22:a1:7e:e2:13:0a:5b:59:5a:72:ff:
         dc:13:f4:7d:09:7e:7b:98:51:32:7c:a4:77:34:f6:42:c3:e0:
         42:fe:0a:88:5f:3a:dd:1e:a3:9d:ba:33:63:54:d4:a2:24:b5:
         a7:44:0c:fd:7a:84:2a:a3:35:17:44:cb:fd:c1:d9:d8:94:dc:
         c7:d1:d6:19:48:46:21:c4:f9:6e:6e:c2:c5:4a:1b:f5:36:d8:
         a6:92:fe:ff:dd:35:a0:24:19:8f:81:ad:24:de:fc:60:07:d3:
         fd:dd:b5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:02:43 2025 by rpki-client