Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
File:                     zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft (raw, json)
Hash identifier:          JfmrlhIsncKwe4iOyuxTVd/MbdelkgyYieqGKG3ZNDg=
Subject key identifier:   EC:3A:D8:91:9A:A2:30:DA:6E:D0:64:B4:16:42:BA:D3:1E:1D:3A:38
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       59
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
Manifest number:          0CDC
Signing time:             Sat 23 Aug 2025 06:49:19 +0000
Manifest this update:     Sat 23 Aug 2025 06:49:19 +0000
Manifest next update:     Sun 07 Sep 2025 06:49:19 +0000
Files and hashes:         1: -X0jJu_8YcrgmbwcLJfL0rPbn2s.roa (hash: jtzsHUMra6xFH5FqrWEWPZJ6jLip/jyJJO//rUxrluo=)
                          2: 2BAdypjlzWGSu3yMwaRar4m91ls.roa (hash: 13tPTY8R8CxuxpHffOdqMZDVRL7Rh4d2Qs2ATXb85Ls=)
                          3: ARewXoZXPiHc8y02aocu3efdsxw.roa (hash: kCUhL2f7bttkV6TN7jtUY9QzX1U5vLP/sAZqMR7rF0U=)
                          4: EUhrVahjug953z5dDiO_W8xjkNc.roa (hash: Ex1pfHL6w+B0QUpMw6b1TKukRTx9x84h+QpTEL9k98E=)
                          5: K3lCvUdMC9WGDk2rCtLXl_RDJYI.roa (hash: pWvU+B98TJa7Ch26mHtSAEo8LtEVWEbF67GZGgQ7y04=)
                          6: QhcUKd0bb7KdwJgfb1KIB4drgMI.roa (hash: fpTI1rkfOSwA+iDd3fXH60oTMseV9PWW1yh55e0SZHo=)
                          7: TdkvpWir6dwlDu3mq22bHVwo-YE.roa (hash: U+x7oW/Nq3LwSgmxoxYhAKb4Ysm8IBqHn2PsODf8rrk=)
                          8: g5JVzJTIsfmBXLC2-U-4ne8iDIE.roa (hash: K5881Qkai8wJqAlNnP4XFjZbmxsNwLfo3dS1G1TJ/AU=)
                          9: kHn-RFmCUt59TsGwG-Rao9d0H8M.roa (hash: HO5Ff84U5NFPTW5GysrmkQQ0QSTAA51W2pKCJH83W54=)
                          10: knQr6z80JXkgtZd8Q3sz-Yjg-Ak.roa (hash: M1jqaFxbgjOSnj64nCUZBx6+OJuaa7dzTUUC4g3spxs=)
                          11: mm0Kl5q5uqT8b80N3kd4pusqKQA.roa (hash: csybzV5QKPmrwuDlZhmCwTi8GWQgsCQbSZzebWdu6A0=)
                          12: rNFthIc2J5EwX2OqVd84j_lAKe0.roa (hash: oC6+6f9YD56O4vEu0bfXIVBQWJLxCtxJlvjNuD2A5iU=)
                          13: tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa (hash: HbM/RH/MO8DTotYdnT3fKeZ01gLeG2WsqTuDMd4Bjq8=)
                          14: wqUsiGRVj4SJJ6XdhIiplhCpJBQ.roa (hash: MPJlF9nfWY+7oFYOfgsVUptVdvLDsyRHdpV3CdtMYbQ=)
                          15: zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl (hash: sARyHYyzTaLbCIqmfmRf9wGxPO1ojHzE4FpX98lKIFE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Aug 15 01:32:52 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=EC3AD8919AA230DA6ED064B41642BAD31E1D3A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:fa:f6:c7:af:5c:c3:a0:0f:6b:51:c6:86:
                    eb:fc:01:ad:74:7a:30:a4:3d:0c:22:dc:80:51:e9:
                    3a:e3:e0:6c:4c:47:21:47:15:e5:f6:e0:1f:86:d6:
                    45:77:a5:04:a2:a5:6b:8b:c8:9f:eb:ab:78:58:89:
                    f2:48:2e:e2:f2:96:e2:4d:16:98:fc:f3:07:44:df:
                    c8:f8:38:ef:12:71:b2:1c:8c:67:71:25:75:3f:e0:
                    c6:ad:e6:df:86:cc:fa:17:25:3a:e7:4d:a8:86:94:
                    b6:c2:e2:67:e3:94:f1:af:ed:b6:d0:de:c6:fe:89:
                    99:01:71:96:f8:69:f1:17:77:a6:c1:a3:ed:f9:3d:
                    e0:3f:41:7e:12:19:61:3e:4e:0e:5d:d3:41:20:32:
                    58:00:45:fa:6a:d1:3b:4a:7b:05:55:e8:45:3e:f1:
                    6f:1e:78:cd:73:d0:15:d9:4d:cd:78:66:e9:d4:db:
                    69:24:c2:55:6c:8e:12:d2:48:88:13:54:6d:2a:82:
                    a9:dd:49:f4:5f:5d:d0:ac:67:99:35:a2:7a:bd:69:
                    77:0e:ae:23:60:01:f6:b0:e9:a8:38:30:b6:25:72:
                    f1:ae:65:ff:eb:66:c0:2b:38:b4:26:4c:25:66:89:
                    80:de:23:db:89:fe:78:ca:6d:20:bb:f9:5d:7f:ac:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:D8:91:9A:A2:30:DA:6E:D0:64:B4:16:42:BA:D3:1E:1D:3A:38
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9b:e8:49:b9:59:a0:52:92:00:a1:8b:01:d1:8a:b5:51:37:
         61:10:1a:1b:12:7a:75:c7:f5:d2:73:07:11:ee:fc:d3:30:88:
         37:4a:b6:e3:4d:19:b7:8e:2f:8b:e6:72:7d:1e:e0:fc:47:57:
         ce:ea:4d:b2:80:95:5c:4c:de:ad:69:cc:41:90:0b:52:96:de:
         f0:f4:44:59:bf:e8:fb:62:0e:5e:a2:99:d1:14:de:14:3c:ab:
         77:ae:d1:b5:ab:a5:fd:24:41:02:ef:cf:c2:58:3f:d2:d3:8e:
         0e:53:f8:6c:15:56:08:11:27:35:fb:30:a9:41:88:52:53:bd:
         51:8c:a7:4b:da:ba:45:db:22:58:bc:83:f0:04:32:1a:39:86:
         11:5d:4c:c8:e2:6f:2b:70:d3:91:ad:79:fb:43:19:80:56:ac:
         8f:f7:86:ff:33:3a:12:51:7e:7c:9b:9b:8c:dc:2f:d9:07:c5:
         b0:b5:a2:f6:ae:98:35:70:f4:fe:b1:74:e1:84:28:93:02:1a:
         01:11:f2:74:d4:c4:8f:15:2d:1e:f3:16:6d:aa:c4:ba:fa:71:
         7c:f3:56:1b:90:f8:1b:d5:69:3d:7b:15:c4:77:d8:84:43:f0:
         1c:dc:23:19:e6:33:10:c3:f4:1d:bd:0b:7e:7a:c3:ea:e5:37:
         1e:72:ac:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:45:11 2025 by rpki-client