Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
File:                     S-pr2KnHhIgpFBmZoBagydGZEq8.mft (raw, json)
Hash identifier:          avyZ1bpZGYqmaVptFcWaOCKObv9nZXO6pUyEEzJTuQA=
Subject key identifier:   88:05:D1:97:AF:6A:98:C2:B2:54:25:D0:95:A1:4A:95:E2:AE:DF:46
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
Manifest number:          0AD0
Signing time:             Sat 23 Aug 2025 07:13:59 +0000
Manifest this update:     Sat 23 Aug 2025 07:13:59 +0000
Manifest next update:     Sun 07 Sep 2025 07:13:59 +0000
Files and hashes:         1: 1AYjWOVqrkBkDFVy-EU61EG32NQ.roa (hash: Cqq2NH7hQbP01dDR9V6kDGL7ATLvfvHddrjmza+VHhk=)
                          2: 3EsE9CuCyuihorBvLZmq2XtcpHg.roa (hash: wKIeNt04BjjimExH73CIEivN+oGFUSRBxPXJOe/7NRY=)
                          3: 49oOQXu_lO4Io7QiKBITHtemLxU.roa (hash: RFe99WP0iLF6bMnw3m9LOnhe1XNRTJGan28z+1I4oPE=)
                          4: 9ygvu_6B1iLMFBHZOF6F_jsoMIQ.roa (hash: UVSAkM1lcJxS0oa+CiO9GTx2tb8NwZF+1miW47mQ8VQ=)
                          5: S-pr2KnHhIgpFBmZoBagydGZEq8.crl (hash: FOVcR4gJWEuQwGmSxT2pa4QXhte9PvIdlGm21VvzLlM=)
                          6: U-bM0SjglPOsG25oC32eyuRDyoo.roa (hash: 2TKLrEuV/gXlTEHS6kZemKjuz0FffA4YZABJ7nUcL2Y=)
                          7: Uv4q2xub8cbB9RSlUPnwHMiyp7o.roa (hash: IqJvUxbgxMEtss5ClcvBLtcQ0yXGGBw4B1SC4L7crik=)
                          8: VT-KCd5pfUP4kQXAj-BLw9bExyk.roa (hash: Dp6hf6r8wEa8mjXIYRQHxvRqr84F7HiOZmfSYEY1ozs=)
                          9: ZKiHAH5b1wFH2qac51GsI5mUzIc.roa (hash: qLh8ohYYBlea/V7pFhaNgXHicBEdFTAd+r636OYd6ow=)
                          10: cnerBmB74J3f7QkgfPM6zqnKVds.roa (hash: B5oUrFh9TgYlwMXlaDb4esYP1GtqvwRsa03Qvg0X9F0=)
                          11: jV4S1ue5xtVeKHRu18n5P2mFRGE.roa (hash: Hu11gqMCiluV3eckeVsCNh0dvkO96dVassf4MYy0eeo=)
                          12: jw8xxOsOlHU4bKuqQ0_HXoTWpLA.roa (hash: r9QxIkUdjbsNhyuvFXNK1Ss5cGIXrf78HuYAW1TJlBI=)
                          13: sJ4hslq0QX7dockriG5eoLmIziQ.roa (hash: GwVY9F2C2oy5dtzdEF0vj99Qf1EzRTEOSWbrXJGpCsg=)
                          14: vc7kwCToUX_kZ4XeiR-KvZQ_gok.roa (hash: nwTJlrxau38yMr/TNGSkQBJP77jYLhMjz8K441o+toQ=)
                          15: wwum9wGaJKSoab9eGlOnVWFAXHU.roa (hash: CkBWI3+wJlXXtxhze/8+YJQ8wIUnBIGSb7Vm/n0BeX4=)
                          16: xB5_lrQUeGuAk4kIX1ty3fOZZGU.roa (hash: GdHRvCdo07rHDXARu8MgdajK28LV+WlKHAHWZ9MVjPA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug 15 01:38:30 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=8805D197AF6A98C2B25425D095A14A95E2AEDF46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:67:74:e1:d8:9c:9f:ce:87:c4:34:1f:25:
                    b1:d9:4c:fb:85:a8:18:bf:28:ad:7f:24:9d:56:ba:
                    37:a4:e2:2f:34:1a:48:e2:99:e7:56:78:d7:e2:23:
                    09:f4:b1:ae:35:a2:d2:19:11:fb:87:54:8a:0d:69:
                    e4:d4:c1:8c:f2:53:c6:6d:91:4f:3a:5a:a4:cc:ad:
                    5c:16:76:0d:9e:17:f1:95:fd:bd:48:b3:b0:f3:8f:
                    e4:7d:25:3b:b1:3b:89:12:02:b9:0a:4d:da:f0:5a:
                    38:b5:ae:44:9c:53:fb:a7:58:e3:39:14:b1:2e:e5:
                    9e:e1:c6:5d:98:1b:6b:b7:02:3c:0c:ce:f6:55:4b:
                    38:36:7f:36:d3:4d:25:47:c7:65:c1:c6:bb:b5:6f:
                    ba:5e:36:9b:23:07:1a:f5:36:46:12:97:e8:a9:1e:
                    05:e8:c7:f7:02:62:53:fa:ca:18:c4:06:fa:0a:1e:
                    d5:5f:98:f5:9f:d9:f8:c9:ca:f0:13:8a:10:f3:e9:
                    65:12:a7:9f:e3:fc:0a:17:25:14:7c:1d:cb:8b:65:
                    2d:6f:95:4e:1a:a5:8d:5d:59:8a:9c:36:d6:b0:3b:
                    dd:1a:bc:9e:be:ea:aa:70:bf:3c:96:ec:29:ed:66:
                    45:92:44:08:d5:a2:9c:e6:5e:cc:7c:51:b1:d1:cd:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:05:D1:97:AF:6A:98:C2:B2:54:25:D0:95:A1:4A:95:E2:AE:DF:46
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:13:4b:8c:11:9c:46:49:ef:58:16:14:d8:56:e7:91:34:15:
         61:3d:2d:fd:98:83:22:3e:81:02:7f:a4:1e:99:7a:90:7a:6c:
         01:38:b4:c0:51:50:6c:f4:36:e2:68:f7:e7:dc:84:a0:26:2c:
         26:0a:d4:b5:63:9c:1b:8d:33:98:b8:e6:c0:c6:26:d0:82:05:
         d2:ca:53:45:71:bb:60:81:75:09:23:78:11:d5:03:68:7d:8b:
         f1:88:20:b3:52:69:85:d9:da:d9:eb:88:47:ba:78:52:54:57:
         33:c2:44:2b:8d:a9:71:52:bc:57:84:6d:03:d1:9d:7a:41:1c:
         bf:5f:e5:c9:c7:6a:c6:18:b7:af:dc:4a:a8:d3:f6:69:7a:f5:
         ab:59:78:40:35:ea:03:1d:7b:5b:97:07:c0:a5:1c:df:20:1e:
         8a:1d:72:20:26:71:05:b2:fd:f2:21:e1:10:b7:b8:8a:a2:4f:
         af:2c:69:f8:75:37:4b:5b:1d:33:c6:30:c5:43:6f:0f:af:20:
         93:97:5f:86:00:1d:1a:89:19:69:40:d5:94:8a:2f:a5:ac:0e:
         8d:db:86:2b:c2:30:9c:42:ca:50:10:17:a0:03:16:1d:04:a1:
         bd:b8:bc:09:c8:14:24:db:7a:10:b4:ea:f7:f0:59:55:0c:84:
         86:84:86:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:06:30 2025 by rpki-client