Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
File:                     qggJfGBgcQKAzaqk5-BsHxPNFvI.mft (raw, json)
Hash identifier:          f/oLx0vxN3GRe6b6d/N77M3W0iA0IKce/ZrI3cEzMpA=
Subject key identifier:   DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       99
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
Manifest number:          07F7
Signing time:             Sat 23 Aug 2025 07:12:00 +0000
Manifest this update:     Sat 23 Aug 2025 07:12:00 +0000
Manifest next update:     Sun 07 Sep 2025 07:12:00 +0000
Files and hashes:         1: A2HbR0tifjK7EU0pCY-NJriQPHE.roa (hash: +OH53Uwh6adch0mud2QP58gAk+D1/9afXq0r9C5mPe0=)
                          2: FDIlRlsWFXV1vFG2giIE3uNmFL0.roa (hash: 27MxGboS4AjnaNKsIEUM/w5nqoERZ9Yz8Bgkc1wU6Wk=)
                          3: IUyLfhIPkw20z59XzKhIivWbXso.roa (hash: Iq5SYxQQBdehoAHdmMS0IumJxieG5jehySaNykurtJA=)
                          4: IrIm8x34XDiUiIc2dn1xdeYcpUk.roa (hash: gNMdZ5CyHaRpGx0yaJzupPuK/dRdc0hY2Gl1EaGsQ7o=)
                          5: JZRHJVOa8hEw3bPEbJUeTkRrGSY.roa (hash: s4dDzYW1h8Irm+ZjUSlt3YrM9ewFA/yZNLYFD4L2U6w=)
                          6: O45fiU6mXWbF8t3r8rlFEcj7B7E.roa (hash: hDZYRA9HFTSzbwx72yOKGlBAH2vbuSm2m8OIs0zIIb0=)
                          7: RK0teWnCxdWbtsDne53Vm_ITcK4.roa (hash: Aptk0zjUb7LltNEtWKz+SqxCmZiMQ9Svyz9Zcg/HM5A=)
                          8: UvfL-IJxbsXVcixKMjcvqROekHI.roa (hash: MGUK7A7OdRfkY2yoIZA5TQ9bl3fK+1t7xUNvrkm8mRU=)
                          9: iY8wxWWqnLBTx1z3zHgGnt65Mng.roa (hash: KVI/kF1AcO+x/OMCrIV8TxyM//6qQt7UHkqr9zybipE=)
                          10: lnrKeqsKIyOTGivbgELUYqOJNy0.roa (hash: p+cw/5btMqGORlUVu+D5rpYoTWjbia2QSzMpdq0tu+A=)
                          11: qggJfGBgcQKAzaqk5-BsHxPNFvI.crl (hash: 3b5uMoeIMdHHuVkTCy3lmPLAQW1fFCCnzh275FqGkPE=)
                          12: yjXljVumuFpn88V8J2PDjSR0DzM.roa (hash: +5CfFKVcgKIqXZSm6uNlLlrwPHJZGWL1QX51JCLPUmA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Aug 15 01:39:24 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=DD9C42D45F6CD31072F318A68C97E879874FD70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:88:4f:de:4c:f8:cd:cb:b0:ef:1c:d3:99:
                    d2:2a:98:49:fc:ab:51:74:68:32:52:fa:50:e8:20:
                    e5:fb:bd:dd:ba:8b:90:2e:b6:e1:bb:9c:7f:11:15:
                    97:82:5b:87:53:6a:04:68:d0:55:03:c3:43:b3:f5:
                    ec:62:c8:65:ec:c5:65:cc:f0:9b:36:b9:2d:8b:ef:
                    8e:5d:0e:d0:19:a3:35:a7:fe:29:72:06:9a:64:a6:
                    86:63:e2:fd:e5:6d:49:f4:8f:6a:43:ad:e6:52:07:
                    c4:5f:8a:2e:ba:a5:af:81:a4:c8:5c:a3:0e:0e:d3:
                    5f:45:c2:83:46:89:89:0a:0d:da:e2:9e:c9:df:e3:
                    ec:25:ab:c9:48:56:2e:79:ef:31:f2:24:48:51:0c:
                    e9:13:de:58:b2:77:8f:fa:7d:32:dd:7d:a4:ef:60:
                    89:16:a9:19:44:f9:7c:ee:fd:08:be:e9:9a:57:52:
                    17:74:ef:73:23:1a:a3:b9:ff:9f:8c:d8:7c:73:f6:
                    5d:8d:b4:c3:b8:9c:ab:73:a0:b0:fa:0c:24:b8:ed:
                    33:e7:b4:4d:32:85:73:09:23:53:75:56:6e:9e:5f:
                    91:ea:2f:48:f6:9b:c6:c4:22:68:58:d1:31:4f:88:
                    90:87:1d:0c:15:86:9a:8d:52:f8:e2:74:30:b2:0c:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fa:e7:86:c9:ea:e5:ec:d5:45:f2:ee:24:ba:ae:3b:36:39:
         04:56:f8:da:5a:93:fa:2a:61:8a:d1:7e:3b:be:d6:12:51:fb:
         27:af:bc:f5:7b:12:54:34:c5:de:96:7d:38:59:32:d6:0e:12:
         3f:cb:91:cc:9c:dc:cc:f0:86:06:b3:79:d9:36:7c:99:4d:51:
         ad:27:95:77:2b:d8:ac:d2:05:8c:6e:f3:63:bf:29:92:6a:ad:
         ea:6f:99:ba:4a:4c:a1:0f:66:f5:59:92:57:2a:aa:e7:f1:4e:
         04:29:a0:7b:77:43:2e:75:50:96:f2:d1:36:d2:c0:8a:fb:6d:
         03:a4:57:9a:51:54:b7:d8:01:1f:d9:a0:5a:b6:55:68:1a:d0:
         80:1c:1b:f4:93:1e:33:35:7a:9d:1c:48:0b:2b:b1:78:54:a0:
         24:22:76:86:e9:c7:a2:a8:76:48:15:29:d5:04:e1:c0:ec:aa:
         ce:5a:58:d1:4e:f9:c9:4f:c8:32:b3:8b:aa:0d:af:a8:a8:9e:
         27:67:7c:33:fc:11:a8:73:b9:93:91:68:ce:f6:6f:f6:54:1f:
         4e:b9:12:e3:92:e2:63:c6:3a:ed:f3:dd:95:8c:d5:d7:e0:18:
         9c:7a:68:47:9b:02:dc:04:d4:71:93:63:15:04:0c:4b:5a:e0:
         db:9a:b3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:03:13 2025 by rpki-client