Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
File:                     lhvBhRJyKq-akNiYreqa93k8JUM.mft (raw, json)
Hash identifier:          3I4bTYmY6wUnh+yt+63DCWvCOmsNJ5TEbOHxNQOAWX4=
Subject key identifier:   52:47:14:7E:C7:B1:05:0F:D9:16:07:CB:93:43:04:89:B9:7E:6D:96
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       7F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
Manifest number:          0743
Signing time:             Sun 10 Aug 2025 23:33:18 +0000
Manifest this update:     Sun 10 Aug 2025 23:33:18 +0000
Manifest next update:     Mon 25 Aug 2025 23:33:18 +0000
Files and hashes:         1: -EYPjc-1OtupKk3IkPs4aiUXmnE.roa (hash: 0DvnjSEvmbqBL+F09fNsBqbo/kjPZ18x5d0xcsQUCRA=)
                          2: -mTp7CGpaAyfGFzYPgwq3g0-0TE.roa (hash: ImaWK/Xek2iBMosBnPJ5h3LKDOSsV/w+1uM9qPRuB48=)
                          3: -t1olW9o_gUcfjcQ_szT3spKT58.roa (hash: jWOr0By/vHBBmBJO/Vp/NoL/BXo2pMyLLM9zGj20d0I=)
                          4: 08WI9jqMgxCl-aJyoyQcXodG-EQ.roa (hash: NPj+aBUn8LKwb7NVUPZ0v6c5V2jzkffYfU8Z6weaIBs=)
                          5: 0C3kwOLi_PDwYaf87r8U_reyjl8.roa (hash: 5BpyPRNwuiH0dRb74Iok8oNqyEaERIBDH1rl86U2m/I=)
                          6: 6gRM3zZltqc0O-trdPtmt0kicaA.roa (hash: aBSlh6qu3GD+NRHiQ4fGQ8rsS50ndTQ0zJx7xeNtfQs=)
                          7: CGwUkEdxHDDmFPphqwr5WfaUmXo.roa (hash: RDGVT40hiwdqqloC+wYUDuM+CtSAHdr80fY0SvKFLn0=)
                          8: KYVeAzgD9T4Ziy5Tvppks_YKaq0.roa (hash: 4XEhxO/TFxZym9g0jzbt/pZO06kn8PIYBkZSW1/okOQ=)
                          9: NTP9DNsk25m7ShZa6-5Qk1gwBdM.roa (hash: nnGwxbmOaQ2PcyIAvA38UkOG+pw6LeTpIBPHkVu8Oqk=)
                          10: Q96g01N1Ko1wcDB4imCyXf0gkvM.roa (hash: vXKSBvol47PmT9aWSbwe++omPmqyzaR6wTsbqiyLGjc=)
                          11: cz2nb9lxyWMqkzYLvtTZ9XcBJBA.roa (hash: rKKtwj25LgJU9wI6pccwOvIFlNQZXLM1B3YH42ItXFg=)
                          12: d0_fvys9RBcez5NAz4p6hFCfaLQ.roa (hash: X6ycNiBinqVQMY/T2ryDmB+usk3qUEmjYz1HU7gQOEI=)
                          13: eGd28wJPGsCW2OqH0nLvNrC7h-8.roa (hash: m7U40XEN1+JsNjnQx1ncOA83o+p72tter0VXmLzrZmE=)
                          14: gTg8A2-GjwpHrxWg3k5j8eNweyw.roa (hash: 2ZuLRBZEyVB5YzS2B6KaU1OwrkprE6GuwPdwSA7pp34=)
                          15: h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa (hash: UNvvBLc8nbMmM23sWxHwczhG6wRHOey7P8iCXoxaXWs=)
                          16: hcObqLZLO9c32KfiFmQImDC2k8M.roa (hash: +fH8UaNbBQB7H13041Eo009AFhx1Xyvia0TEmaeVPjE=)
                          17: kAYiuIuhD2hPXMFdCEp-MazuNrw.roa (hash: 9+HxG8n7pYBP4IV/JgKUi8nNQSENVBvEPivVoeqbQo4=)
                          18: l0mdJFFJMOZxnlUkv6OM0NQHxM4.roa (hash: bjijf1iNfpncFRDhQBdERDJiT76VyxEO+J8HXN4Y64k=)
                          19: lhvBhRJyKq-akNiYreqa93k8JUM.crl (hash: OHZyUO4JmdW/b7Jd3AaLb77A0WC5pYCWGlF+onGSd4s=)
                          20: p9U4HgkaF--BkNLTmH3i3rZ30uM.roa (hash: fxgpZ06Kw3FXiY9ZU/Hw7MO//Y2cp3Ui8UY/Jf5hZVY=)
                          21: q1GjCumXoBxPA-ZCcpdhqmlO3F0.roa (hash: vicASxjLvXb4Yg2fIt287rfi0eY/50Q7jdHGjdEpFFc=)
                          22: wGx8nN-QKK11yzxUXSEzmJ5CSWM.roa (hash: Vp2G1o7ihEn83AJv+NqhHBxWYcshRr3XD6GFAMzfLhY=)
                          23: wcQX41105GX6DmOLczCVYhTzx3g.roa (hash: ykjc5YWMyt8w0l9hegCdxqBLOK777khogq25fKG/Y2o=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Jul 30 06:34:35 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=5247147EC7B1050FD91607CB93430489B97E6D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:a3:1d:c3:50:c0:ff:9a:79:81:73:d9:0e:
                    60:32:22:86:ee:3f:e2:a8:00:bb:40:12:28:ec:91:
                    51:93:54:c2:35:67:e4:55:e8:a7:2f:eb:ab:5a:4a:
                    72:5f:01:b9:ee:d3:0f:90:3b:fd:12:89:77:44:4e:
                    27:88:b2:04:58:5c:6d:0c:c3:cd:45:4b:e7:36:e8:
                    bb:32:48:8d:fe:b7:22:76:ee:4c:9d:24:d3:a6:ca:
                    46:31:82:7b:25:86:66:67:04:f6:e0:b1:8a:8e:0d:
                    b9:c0:24:ec:9a:82:da:42:ee:12:2b:4e:b6:6a:54:
                    e9:e6:b7:f4:6f:52:d3:f8:8e:97:8d:07:cd:1e:76:
                    9e:3e:59:c1:ab:24:50:e1:fe:aa:e6:34:fa:94:1b:
                    55:aa:1e:2c:a0:7a:15:28:14:ff:c9:b4:9a:6e:86:
                    84:94:f6:16:fa:c3:be:e9:2d:1b:b1:26:d7:a8:1a:
                    a6:79:93:d6:aa:59:1d:89:30:fd:ce:3a:0d:27:34:
                    63:f8:e3:6c:c4:06:80:83:95:1c:b6:90:5e:db:2a:
                    26:eb:59:ac:03:45:ab:7d:ed:e1:06:e5:dc:a1:58:
                    9f:5b:37:36:ba:c3:2b:49:73:04:98:b6:46:91:59:
                    32:f0:24:ab:ec:53:86:31:87:97:89:e7:04:82:80:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:14:7E:C7:B1:05:0F:D9:16:07:CB:93:43:04:89:B9:7E:6D:96
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:e4:3d:ef:c4:e8:89:30:5e:98:0c:8f:86:36:44:a2:a8:b3:
         5d:94:20:68:fc:20:c2:b3:af:3e:1f:3c:f4:90:69:a6:8b:58:
         7e:a6:46:6c:b7:33:25:cc:f4:35:cd:00:49:63:b5:b7:9e:7c:
         3f:5a:ed:33:8d:9c:28:ca:58:a9:81:7a:84:0c:28:30:52:8d:
         95:55:47:86:99:8f:d5:a2:7b:ce:90:48:b0:76:e7:b6:24:d5:
         9b:cb:73:e7:7e:cd:20:13:bb:a0:af:70:42:79:d0:ba:83:8d:
         3e:2b:1f:c6:13:c2:62:0b:8a:9c:31:62:a4:3b:02:11:47:0e:
         40:b3:fd:46:53:0c:45:1a:04:c9:29:6a:4f:7d:71:62:b7:cc:
         ed:ac:c2:ac:8f:5c:34:cf:51:24:89:c5:d7:70:b9:71:2e:39:
         60:06:35:33:f7:46:ac:ec:06:a9:b0:1e:d0:80:9b:24:d3:7a:
         b5:fe:c1:15:24:1f:b1:9b:f2:fc:87:70:ea:ea:17:e5:08:ea:
         8b:75:e9:f7:e1:78:14:2a:98:b7:2d:c5:4f:c1:61:67:03:e6:
         6d:37:57:96:e3:e3:aa:22:b5:b4:36:12:0e:a6:ed:ba:43:60:
         25:2d:85:6e:08:5d:69:eb:af:4d:21:cc:6b:b2:5e:43:73:71:
         5f:04:13:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:44:58 2025 by rpki-client