Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
File:                     EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json)
Hash identifier:          tsyXO0G/E+ZODE4PrzxattYb4iGNrFiIgQWAZwjsK7U=
Subject key identifier:   A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
Manifest number:          17E1
Signing time:             Sun 22 Jun 2025 18:49:28 +0000
Manifest this update:     Sun 22 Jun 2025 18:49:28 +0000
Manifest next update:     Mon 07 Jul 2025 18:49:28 +0000
Files and hashes:         1: 0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa (hash: TBfXVVvl+I0JOMNOaqJ2W8PgyyEjUUuyDsyxlWdqHQ8=)
                          2: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (hash: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc=)
                          3: 9xscJtcTW-WeHnNRVY5DMCVbbPE.roa (hash: zksblTLVuKotYLK7oArWGaAO8yzsfbDfhbrvdg5mY84=)
                          4: AQTDxTcTCI45hOxBEWNl9A73EE4.roa (hash: VDyCiePXtRnfNcZR9iXhw09mC6UtKgholnIkcdgrcWk=)
                          5: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: MRMDqnjTHZZngRbZcyAGP5wBeo10PWx7QwkfLz+E3w0=)
                          6: J5Rz8oXbQEJk8gssAfFbzH27kWE.roa (hash: /NvhgjAlB+2N48IuXxAhT1RxoomG+cancg5GOevnSpk=)
                          7: Muz4veYwYMXngxvdeFbGQkfqNzU.roa (hash: 9ktCjshvkIjF784V91Opr/PUKTq9lV72q0Qty0VQTlM=)
                          8: NAMn1afCARECE5vUVMtAYD75tTI.roa (hash: Rx5R0Q3ISExp8EqhSw0eelilGT5MkxakecoZB8o5nro=)
                          9: aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (hash: gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y=)
                          10: b5b-aW5uwh5i28IiNA7cctuW7DE.roa (hash: HWEP2PDQOID+gOurylLkMhJOtRgCxlzrSon9J10JluM=)
                          11: dlqlP92ne5iXEr_Jps1uHbvFaho.roa (hash: f3GSmSdhBD6ujxXoBZu17In7bwsMfVTCYKMhuNl4Ofs=)
                          12: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (hash: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ=)
                          13: rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa (hash: Gs930vS1gAJpIdv986KapZr9qmnD8HKt/jvA2d7np90=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 18:17:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Jun 15 01:32:11 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7:
                    5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26:
                    90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14:
                    12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4:
                    63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00:
                    ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b:
                    c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14:
                    8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d:
                    a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17:
                    b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a:
                    b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a:
                    40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f:
                    55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1:
                    49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81:
                    d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e:
                    fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64:
                    51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:35:ad:bd:a1:3c:c5:0f:0f:c5:b6:28:fd:24:41:4a:71:cd:
         07:ce:30:6c:da:a2:14:56:e5:22:07:58:4b:96:f4:28:a1:74:
         03:54:a0:53:5d:ae:b8:70:20:26:58:03:d1:6d:92:ee:b9:0f:
         5d:86:97:cb:66:8f:df:db:6e:5f:8e:7c:75:88:a7:98:5a:e2:
         0c:d7:ae:96:e2:3f:99:eb:3d:78:39:1d:b3:41:65:0a:e2:db:
         d6:20:e7:c5:81:7c:ac:83:c9:f1:ed:f1:94:ad:55:68:9b:59:
         51:0b:5a:75:53:e1:03:b7:eb:e0:5b:9f:ad:4e:6e:89:11:da:
         b0:75:c0:16:64:3a:fc:28:af:c3:5e:20:7e:43:05:e6:c3:74:
         6b:60:2e:48:33:1c:84:84:4e:a9:cb:77:e9:ed:36:fc:6d:9a:
         f5:53:ef:f5:a9:5d:e2:db:a0:18:d8:f3:bf:8c:5c:14:d9:73:
         e9:de:df:36:9e:ab:01:86:8b:6a:fe:6c:ff:eb:77:37:70:d7:
         80:18:44:d7:fe:71:a2:64:39:07:ea:39:00:26:11:4d:1c:de:
         f0:12:30:e7:1a:82:08:69:6f:b9:fa:2d:1c:48:b3:62:64:fb:
         36:cc:3d:fd:76:c9:f5:d3:c3:c5:ba:3e:76:62:81:6a:65:b3:
         ba:e0:0d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:07:51 2025 by rpki-client