Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
File:                     JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json)
Hash identifier:          5e9PoZMGHP1IJpsjhBcynemBfQujDCiNuGJdQLuMR6g=
Subject key identifier:   31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       29
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
Manifest number:          05A4
Signing time:             Sun 22 Jun 2025 11:43:46 +0000
Manifest this update:     Sun 22 Jun 2025 11:43:46 +0000
Manifest next update:     Mon 07 Jul 2025 11:43:46 +0000
Files and hashes:         1: -hY0Txahey-phWtRvAvwAIYth9A.roa (hash: XBTF2xX2XSiXh35iU+RSDBwa9pjdewfeGBpMfN7D1Vw=)
                          2: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: jH1Fci7R3pULXP0WAamj6IGiDZr1vF2oQV/fLSWl7cE=)
                          3: PXGXVRY9PugPn_auWRS0jrR_ExY.roa (hash: mCzu8j4CHSQkR3klyKbwZGvNIEZQjlLoRad9h38bCR4=)
                          4: kafqO83HAVCwySc-07rlqdKTmgY.roa (hash: DFvL43vFx9bAV0wMN41/bL2NMFJruDgxGScpILO8nPE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Jun 2025 13:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Jun 15 01:35:42 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46:
                    2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15:
                    df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac:
                    c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62:
                    64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40:
                    28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2:
                    a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d:
                    4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8:
                    d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed:
                    0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e:
                    61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c:
                    e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56:
                    cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a:
                    3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de:
                    39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef:
                    a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c:
                    28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:00:fc:d8:c8:d0:54:86:ab:4f:b5:48:50:51:7a:95:4f:c1:
         d8:c9:bc:31:62:50:35:f4:ac:c5:97:84:ba:8c:d9:e4:9d:b3:
         94:28:dd:fa:84:19:55:89:3b:6c:da:2f:c5:74:df:84:ed:0f:
         e1:64:d6:9e:51:6c:19:0c:c5:27:d3:c1:6f:87:d4:f1:fe:b1:
         c0:12:0e:3b:1a:a0:cf:17:0e:4e:65:9f:3f:49:31:68:5e:fd:
         c1:1c:43:e8:9f:a7:1d:e3:4d:58:28:3e:8c:a3:58:53:88:c7:
         d1:1a:1d:0b:fe:10:5c:dd:dc:49:06:91:e5:07:9d:b4:da:c9:
         02:b8:f9:c9:0e:65:5c:b5:85:b2:07:9d:8c:7b:08:71:d6:82:
         3c:36:2c:4e:89:8c:23:59:2a:f1:c2:1b:1f:56:cd:57:11:04:
         00:9b:c9:92:4f:d3:ca:58:8d:31:8f:77:73:8e:13:1c:c2:aa:
         cd:bf:4a:bd:ea:8d:a0:fb:0a:da:36:f5:c1:24:f2:73:23:68:
         81:c6:92:83:5b:88:59:0f:e7:67:ed:28:0f:06:03:36:69:79:
         5a:7a:c5:b0:b3:10:19:58:c9:1a:ee:74:ae:85:ad:83:06:9a:
         9e:31:ea:32:18:31:90:2a:e6:c8:e8:61:e2:04:b0:0a:9d:3b:
         36:15:19:61
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTBF
ODI5NzVEODI5MUM0NEFBN0U1M0VBMTUxMjRGMEVFQTIwQjA1MB4XDTI1MDYxNTAx
MzU0MloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMzE1MDM4QUFDMjRDMTc1
NDlBODJCQUFERTJBRjQ0NjMxMkQ2RjZEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKFAkXrHfOJwkCw9u3pGLTomJJ1RQ1Vb/ZtQOPUV3ywKcmEHJUj0
0SsPIAyswsIh8G96xiBlfHuo9AFiZDEaEnLwcFMcBaB3w1xAKPfMWf7CSyTZJghY
dfXCoz+qXXSiXxVbLL9cDBldT8Mg9hZ1pU7wgjWo2vzY1n4ayr6HpsW8kKPJqhLt
Dl4dBr2U0m/INJ/qovw+YREulTaqVF2vYzoCQt8M5deg5zpagIVqDQxgU/1Wzaqx
sHfj13evx8Fb/ts6PRqpLW3MtERbW+KmK+/eOZ9EZkvWSozpXmpaDtXvqUSXE28O
vBF870FPn7OcKGv2dbIFOg0rJFMovc2BaxMCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQxUDiqwkwXVJqCuq3ir0RjEtb20jAfBgNVHSMEGDAWgBQlDoKXXYKRxEqn5T6h
USTw7qILBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTQvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4TzZpQ3dVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4
TzZpQ3dVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE0L0pRNkNsMTJDa2NSS3AtVS1vVkVrOE82aUN3VS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2APzYyNBUhqtPtUhQUXqVT8HYybwxYlA19KzFl4S6jNnknbOUKN36
hBlViTts2i/FdN+E7Q/hZNaeUWwZDMUn08Fvh9Tx/rHAEg47GqDPFw5OZZ8/STFo
Xv3BHEPon6cd401YKD6Mo1hTiMfRGh0L/hBc3dxJBpHlB5202skCuPnJDmVctYWy
B52Mewhx1oI8NixOiYwjWSrxwhsfVs1XEQQAm8mST9PKWI0xj3dzjhMcwqrNv0q9
6o2g+wraNvXBJPJzI2iBxpKDW4hZD+dn7SgPBgM2aXlaesWwsxAZWMka7nSuha2D
BpqeMeoyGDGQKubI6GHiBLAKnTs2FRlh
-----END CERTIFICATE-----
Generated at Sun Jun 22 16:06:21 2025 by rpki-client