Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
File:                     5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft (raw, json)
Hash identifier:          OiFzy0bxIkE/pAsITywwM2/z8VRbnwRthlFe7HK09VU=
Subject key identifier:   00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
Authority key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
Certificate issuer:       /CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Certificate serial:       20
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
Manifest number:          06FA
Signing time:             Sat 23 Aug 2025 20:01:53 +0000
Manifest this update:     Sat 23 Aug 2025 20:01:53 +0000
Manifest next update:     Sun 07 Sep 2025 20:01:53 +0000
Files and hashes:         1: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl (hash: 2HM1MilFwC997o+PBPhUTEt97N5U7QCyw35dpZRGyHw=)
                          2: GMGXClmRK69ssW1jL41ioZ66ly8.roa (hash: BVVU8bEQWe+xSUyemjUgQ94JI4mtxUF63WySv6Rdy/E=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 19:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
        Validity
            Not Before: Aug 15 01:36:09 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=00E74B3F7EC4135FF9161F7622E988E7DD761F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:29:8c:37:d1:91:b3:d3:f5:0f:ab:ac:e8:
                    9f:b6:2d:36:f5:12:6e:68:4f:ba:b4:7c:47:85:31:
                    a4:5c:5d:21:a1:c6:8b:19:cb:0c:f6:21:93:49:76:
                    db:cf:b1:7b:be:ef:18:3a:72:e3:bf:fa:22:f7:37:
                    43:e7:1a:af:ff:18:b0:18:52:15:52:a5:04:28:c8:
                    01:80:02:75:b6:05:89:34:19:96:c9:ec:89:73:d8:
                    d0:04:e2:81:2c:c0:9c:98:c9:e4:46:65:47:3e:7e:
                    a2:70:7d:68:09:e5:aa:75:ab:d3:65:fc:f2:c4:20:
                    0d:f9:13:a9:ba:c3:b7:43:91:1c:5b:e4:6c:5f:1a:
                    12:bd:1b:b1:2a:94:fa:bb:1d:b0:b5:4c:75:d2:98:
                    eb:38:25:39:93:03:ba:f0:9f:92:f5:3b:e9:da:92:
                    c1:13:68:b0:17:e3:4a:62:e2:ee:e0:f6:74:fc:d6:
                    7d:62:fb:00:db:e3:a0:16:31:eb:45:c4:9c:c3:af:
                    31:66:23:46:2e:59:b5:6e:70:a8:c8:36:75:f5:45:
                    6c:79:a9:af:10:86:e8:fe:4a:9c:fd:9a:73:73:45:
                    36:1d:87:6a:bd:84:5c:a3:bc:0a:6e:6c:bd:59:3c:
                    29:94:b5:c3:0b:65:17:a2:fd:22:8c:cb:bb:2c:41:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
            X509v3 Authority Key Identifier:
                keyid:E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:63:10:38:93:7a:5e:68:ba:6d:63:f3:0c:80:2a:5c:a2:6a:
         2d:87:2e:09:11:8a:c9:48:65:2c:66:54:97:fd:eb:99:9d:44:
         33:20:79:3f:21:22:20:89:e8:72:0e:5a:4f:1c:d0:c5:d8:4f:
         57:6c:b9:ca:bd:c7:1a:90:49:78:0b:57:db:20:9e:99:05:01:
         12:8b:f2:b9:0e:84:62:40:80:4d:ee:ab:c4:c4:5d:ca:16:03:
         83:1e:fd:d8:11:a4:d2:59:e2:1a:ad:5d:2c:27:3e:3b:9d:25:
         05:46:b2:9c:a0:58:08:16:29:7c:c8:fe:43:be:17:44:80:1f:
         bf:92:25:19:d0:61:e1:65:62:f2:82:69:2d:fe:b0:d9:ed:43:
         46:31:df:ef:f8:d0:9e:b9:f8:b8:03:d9:c5:c4:a4:ac:aa:37:
         d4:a0:21:de:7b:75:b1:a8:2f:bb:dd:f1:cf:1d:db:2a:93:8d:
         96:6d:ee:06:5c:1d:45:21:2d:52:6a:96:fe:f6:b4:c4:71:1a:
         b2:41:8c:9f:ed:0e:e8:63:1f:2a:0f:b8:f7:16:dc:6e:bd:c4:
         9e:7e:7b:65:da:bc:3b:c9:5f:33:26:60:e8:ed:f2:d6:7a:36:
         c1:0d:18:86:00:f3:82:24:67:de:10:e3:54:79:7e:29:dd:18:
         61:f6:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:27:39 2025 by rpki-client