Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
File:                     cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft (raw, json)
Hash identifier:          7Ro44wBVUyWUgc6MMsIr2bafiiHAJ5VKxUduKuQfxv0=
Subject key identifier:   B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
Manifest number:          06C5
Signing time:             Wed 13 Aug 2025 18:45:07 +0000
Manifest this update:     Wed 13 Aug 2025 18:45:07 +0000
Manifest next update:     Thu 28 Aug 2025 18:45:07 +0000
Files and hashes:         1: -WYlhYLrNLBpWlgsJMQR6DxLPXQ.roa (hash: k/8mcdzaASO9MFiTnYNOnKaVIuWuSncevQCraoLqD8E=)
                          2: 6oklst0zAPXz6IH2vDIaJB-kKGQ.roa (hash: CVhIIOfpa2l88bQGyfPnWSGyIlWDZfNykUILBLUgy+E=)
                          3: aXBJ9MW0sRrLmrzdGXKGgQeF6QI.roa (hash: u1DoyiQSFcZd4DRU3/9KZFlzxiDy3TaGdYesRQk4YkA=)
                          4: cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl (hash: 8UWa/PajudyObyfcjsiaxEGiYE9iknAP5bL3evSpVdM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 21:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Jul 30 06:46:56 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=B172A909F7D40F11B7C51F4D664CB8BD1864D394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:e3:98:cd:63:26:9f:84:fb:0e:e5:94:09:
                    fe:4f:f8:ce:20:98:6f:e2:fe:23:ff:d0:f8:71:d6:
                    1e:36:fd:50:1f:37:47:9e:c9:2d:f4:6a:a6:49:fe:
                    f2:cb:cd:8c:6d:dc:7a:6f:d8:e4:dc:cf:bc:f0:18:
                    30:81:1b:3d:79:a4:3e:38:a6:ef:07:c1:f6:d6:12:
                    2e:4f:3b:e9:a2:e2:96:26:26:4a:b8:ae:73:59:89:
                    9d:3c:83:0a:2d:69:bd:18:c8:ca:6e:5e:16:92:30:
                    32:2d:f6:99:2c:b1:4a:13:7f:dc:5c:28:4c:62:4c:
                    ba:9d:87:f2:2e:03:b2:d0:db:f1:e4:75:46:fc:85:
                    3a:58:dd:dc:24:00:93:0c:89:0c:83:9d:f3:2f:a3:
                    0e:08:14:28:d0:3c:4e:b4:d3:dc:36:c0:fc:d3:a0:
                    a7:a7:b5:0e:59:7e:19:86:9c:5c:13:78:85:5d:f2:
                    bf:48:94:33:cf:ba:97:0e:81:ec:49:b3:bd:ae:78:
                    b5:3d:fa:33:01:3a:c4:57:fe:b1:b0:97:3e:69:d2:
                    35:f1:49:5e:0e:c8:70:c6:9a:5e:66:57:cc:79:d2:
                    7d:42:ac:a9:38:50:c5:37:3d:dd:c4:c7:6f:64:5a:
                    f5:94:0b:c0:c0:4a:e5:eb:0c:cc:9a:ce:9e:c8:c0:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:A9:09:F7:D4:0F:11:B7:C5:1F:4D:66:4C:B8:BD:18:64:D3:94
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:77:d4:e0:d3:25:a5:28:79:7f:ac:43:bd:34:15:bc:3d:f8:
         23:f9:55:fd:e9:14:08:85:57:e2:c6:50:e5:bc:7c:60:89:73:
         d8:f3:35:2f:87:c9:c4:3f:e0:5c:1f:f0:77:86:22:80:9e:ee:
         e7:59:3e:3a:95:c8:3a:b6:eb:dc:3e:ee:80:bd:f5:8d:2a:c4:
         c9:ca:63:67:2e:56:ba:8a:a0:46:b6:23:6d:89:fa:e0:35:e3:
         91:1d:58:2e:e5:a4:7e:eb:c0:5f:55:55:bd:5d:62:ef:2b:38:
         75:17:00:33:d5:1d:d2:ef:99:82:d0:fe:67:a1:e6:57:70:d8:
         b7:8a:d3:8e:a6:8e:08:43:3f:68:4c:be:73:75:84:fc:1e:3c:
         a0:48:23:be:4a:bc:61:e4:af:bd:b1:1e:5c:ba:7c:19:97:99:
         fa:4f:7e:94:19:82:74:31:13:11:cb:92:6a:41:1a:d2:c5:d2:
         32:48:14:c2:32:f7:66:dd:dd:87:bc:3f:3a:a4:f3:3c:5e:46:
         dc:68:34:c8:d8:6c:ed:80:0a:ab:12:2e:40:24:d5:38:28:04:
         ce:2f:f2:66:cc:d3:2a:59:35:ff:0f:b0:f8:7d:26:19:3d:c0:
         b3:40:35:72:51:34:a6:c0:65:5f:e0:fc:4b:21:1a:ba:1d:9f:
         0a:ae:e8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 23:08:05 2025 by rpki-client