Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
File:                     r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft (raw, json)
Hash identifier:          7FnZ70MzTYR9iM5ed3zT2Msq6hUCjK9fTEniG8EbJO4=
Subject key identifier:   7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Certificate issuer:       /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
Certificate serial:       06
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
Manifest number:          A7
Signing time:             Mon 23 Jun 2025 03:28:11 +0000
Manifest this update:     Mon 23 Jun 2025 03:28:11 +0000
Manifest next update:     Tue 08 Jul 2025 03:28:11 +0000
Files and hashes:         1: AGF6BVTB37rJn6cfIGftHxTXYC4.roa (hash: GYS9hhupWZxpcCNiV89CUq9c770pM3L2yY/a/3J4tdU=)
                          2: QiCXLLxeS7ZBggZKZd1pvBNt7hs.roa (hash: QUy8tKLl4dJ6Cwx6H9hlGr4TVfOPE4QAoMWud9oUpDI=)
                          3: ZxyRKq1OOfzmQ3dNbwrVH9rYoNM.roa (hash: UHN/OsvUcUKYDZem1OqbY2eQT1FPD3j8La5kPgxoWaY=)
                          4: g4sonl39UKodR8n_V9zTdkIQ5ik.roa (hash: x4vtN9KL5fTNT5U4HmEv3l8Gk4SVKwJuz12OtUbkX0E=)
                          5: r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl (hash: kRvwZY4sj1CoGGEbgNWbvXdBXh3XssHzO3PoJtm+Kzg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Jun 2025 03:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Validity
            Not Before: Jun 15 01:37:33 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=7F2070047EE2FF1A47471466D2B02BE807EA8ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:78:16:8c:d0:24:d9:f4:2f:25:6a:76:ba:
                    bd:b3:26:0b:49:14:ab:1e:af:87:19:81:30:be:39:
                    41:73:88:97:61:dc:e6:29:36:6e:3e:b7:bb:04:09:
                    69:52:66:74:19:ec:2e:1f:c9:17:d3:77:4e:1d:a6:
                    04:3c:2a:d2:c9:aa:11:72:4f:0f:5c:b4:bd:07:5b:
                    ee:02:e6:69:d1:2a:7e:bf:be:92:eb:0b:40:e0:c2:
                    24:dc:c7:33:87:2b:94:2f:71:1b:4d:b9:12:51:68:
                    ba:4f:4a:30:95:32:08:8b:ab:e3:ac:f7:55:69:bc:
                    c7:2c:46:1d:3c:cc:cc:8b:b3:c7:31:80:64:f9:e7:
                    05:4b:29:1c:63:f1:40:78:cc:d9:98:b3:8b:1a:54:
                    82:84:1e:9a:6c:22:c8:66:27:21:0b:48:65:16:7c:
                    8c:42:ad:f5:d5:21:69:5d:ca:7c:2f:48:ed:1e:e5:
                    48:15:17:5c:78:ed:ea:54:80:27:e6:22:26:28:aa:
                    d5:33:e3:8b:49:f3:7a:6f:7c:18:ae:81:04:76:62:
                    ed:45:75:ac:49:3c:bb:63:2e:3c:12:7d:14:43:f1:
                    4b:6e:f2:c0:0c:6f:e6:f3:07:e0:57:a8:df:f0:95:
                    ab:33:23:6d:d1:41:5b:7b:c9:37:67:26:64:4d:62:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
            X509v3 Authority Key Identifier:
                keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:70:8c:bc:bc:c9:4b:d5:1b:2c:f7:88:ad:be:83:07:78:
         9c:05:9d:26:2a:3f:15:2a:9b:4f:11:a0:f0:9c:ad:a4:4b:e0:
         bc:38:9b:8e:30:06:20:a4:04:1d:36:aa:14:d8:1b:d8:a6:79:
         b6:51:12:eb:62:6e:1d:ed:3e:98:09:97:a7:77:95:49:27:3a:
         98:1b:5d:f7:1d:16:d3:a7:22:5b:c1:c1:aa:1d:49:a3:97:6b:
         f8:c9:1f:d4:81:cc:d3:33:44:b8:d1:7e:23:54:6f:5c:1b:6f:
         65:3d:e4:98:fb:54:79:b2:52:43:01:40:98:23:ef:44:0d:27:
         25:e3:39:c0:ec:7f:81:52:34:74:ba:ce:6d:6c:8b:9b:5d:a4:
         d2:4f:cf:b8:fe:be:fa:07:4f:58:34:b1:bc:be:ad:1b:ea:57:
         8b:f5:d3:e8:43:10:e0:d3:88:6d:0c:15:f0:9c:1c:ad:38:6f:
         9f:b7:5e:52:4b:a8:e6:5d:35:f1:86:b4:a6:78:eb:34:6e:ba:
         60:ed:c9:47:72:05:c4:a8:ab:a5:0d:8a:59:52:46:fc:c5:22:
         7f:58:8b:db:a1:cd:d6:15:8d:0c:73:8b:d3:76:10:0f:d8:8e:
         38:5f:b6:53:3c:5b:bc:b0:8e:69:f2:a0:1a:6d:19:fe:3a:96:
         ba:3e:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:39:52 2025 by rpki-client