Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
File:                     WUsBXsmgpcA9iHlGnNp8fEuabBA.mft (raw, json)
Hash identifier:          LNVbc4jUGKvBjOXlgoUlYzn+snj8at9uybHm5Qvu7IM=
Subject key identifier:   B6:7A:0D:C7:72:01:AD:77:7E:99:FD:9E:5F:5E:4C:B6:B5:63:76:6F
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
Manifest number:          0268
Signing time:             Sat 26 Apr 2025 15:40:17 +0000
Manifest this update:     Sat 26 Apr 2025 15:40:17 +0000
Manifest next update:     Sun 11 May 2025 15:40:17 +0000
Files and hashes:         1: 46bzfyUNgikkwxJNrnJfDFOzBNI.roa (hash: j5cgXyqJMGjJdMN+BfchDcg4aAuXCXZXmdTz3gZTclw=)
                          2: 4y4M0skvmF7p7Ktvvh2MZBudjRY.roa (hash: TmpJ7tq1h0eEIKPIgzv3J9iDLGBqZa5FJ9pFsbkXdek=)
                          3: EluDhkKY91QSYHeRdXHiHzgX_NI.roa (hash: bvOrWM8yeGgiVqacebiqv7HluMUl0euucumYnt0MPGw=)
                          4: F3yiWqeXUsg_z9ayAkVK826j_VU.roa (hash: 6WCLa+h5jnkF/kNnx8Gpvvk1jozSexAWfhUnB3kgPcQ=)
                          5: Fh7N0Mvl0GZfLWDhXR409aZnmG0.roa (hash: IzFVdKmyQzOiPq3GuGb5f4K2MCxNmXxrtw27zKXNWvk=)
                          6: FwRkFlztSt3bcb43udZzSYzfAeo.roa (hash: qFnlr3EBO7mR/sZExOEeUVwLY00YzJoRmgUVDJ1CXj4=)
                          7: G2q5OKoX3tBrM67GXKppn9wzy_g.roa (hash: n/RsC2FPCvvHKrIWHb4XBiMLToo2jRiGQYuGAYlKG78=)
                          8: VC0j8VRslU0eZDGofkJY-Esg4U0.roa (hash: VjbAaaY5kE05ALSEo+QBOhsKeBWAXO2vzGSYTQk27VU=)
                          9: WUsBXsmgpcA9iHlGnNp8fEuabBA.crl (hash: YGHH8nGgugDMSB8ZZP5Rd6AUBCIGhnwQsTc3uMa8uqc=)
                          10: Z0GxNRwGz1A2HmhUKCzWAUipCv0.roa (hash: yQtpO1Gm85WuAiuyH6P6JZznSaAFchByaGIt0DPonUA=)
                          11: jHsOoHuXG5eeWqiRxrHSb7OD9dY.roa (hash: s/2RSNAIirXXklAkljgOyA/QYsu3QUcDCfAHsSr/6WE=)
                          12: lqDaril9bWlE9pdd_oh2cbiF-cA.roa (hash: zhZnCFUUDuGRztpYguypV/IoHvFgo7xguF0JFz0+xko=)
                          13: nuSgogvlrHIMmNHGV1ifOdrmfi4.roa (hash: 7UuzKedSCq4Wewj0s7R1yP6k8nxk/IQPeEV67IxZBKQ=)
                          14: ybLeipTwUFuKwHA0_2QQ6Ic5s2o.roa (hash: MFeiJVWcS3EzQGfPl16vymgXeOTxk+XlyHf/OxlpP50=)
                          15: zUKUOWbvlQEe7PN3nign3K-loao.roa (hash: SsH2BSkMhb90QWSNEs8xDnymihPVJOk2siGU8WlvNB0=)
                          16: znE4jiZavuB7zJ7Tz7jN3cUlsNA.roa (hash: HetCIEBiYqU3D9+086+xsQAZG+SmAJyi+SvEWleUUoU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Apr 15 01:38:03 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=B67A0DC77201AD777E99FD9E5F5E4CB6B563766F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:c3:bd:fb:1c:3a:8b:4e:74:50:6b:aa:7a:
                    a6:0b:22:7b:d8:44:f9:38:fc:4c:58:ca:ac:14:94:
                    4c:5f:6b:39:36:31:be:d6:93:00:a7:51:fa:f7:d6:
                    cc:33:1a:59:e0:b6:67:bf:ba:1d:d9:5d:c6:2e:4d:
                    6a:2c:43:aa:59:94:46:2b:83:70:7c:24:f2:3d:30:
                    65:1d:11:d1:de:d8:ff:12:bc:91:9d:62:83:27:17:
                    98:94:8b:48:8b:ab:7f:07:f6:c5:c9:1c:31:06:d8:
                    29:94:11:a6:b1:cd:4e:6c:05:1f:c9:00:87:fc:e9:
                    e8:b3:65:3c:6c:1c:7a:54:eb:8e:44:14:36:c0:43:
                    26:8c:d0:53:c4:0f:e2:84:52:cd:15:a2:23:e2:65:
                    80:a1:86:af:c2:e6:0a:21:89:e9:8a:3e:5d:af:f0:
                    4b:1d:c1:0c:58:2b:82:d8:75:8d:6a:53:b9:15:bd:
                    37:21:f4:53:d8:ca:e8:09:1f:20:f3:2d:1e:91:28:
                    76:d1:b6:e7:b8:51:00:1a:90:0d:cf:0f:88:03:00:
                    95:12:f7:66:c3:1d:f5:02:50:88:53:c7:a3:b8:0f:
                    9d:0c:1a:e9:67:99:96:20:eb:53:14:08:25:b2:b3:
                    3b:0a:d0:2e:6a:e2:9d:92:48:7f:d2:b8:cc:ca:1f:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7A:0D:C7:72:01:AD:77:7E:99:FD:9E:5F:5E:4C:B6:B5:63:76:6F
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2c:9f:4c:3f:17:87:4d:78:61:a7:f6:2f:8c:13:63:45:a9:
         5d:5c:c8:fd:11:21:0a:b4:7f:c8:15:4b:be:8b:4d:66:1b:af:
         16:88:06:86:fa:fa:af:a5:0d:a9:5c:45:0b:be:77:f8:b2:21:
         af:f9:4b:ed:a5:4a:67:76:ed:8c:44:32:cb:eb:22:db:3b:11:
         62:7e:2b:6c:c1:d5:22:6b:f4:7e:37:b6:76:24:26:c7:83:e0:
         b7:54:c0:5a:c1:68:3e:3e:00:6f:1e:75:a8:6e:34:d2:a2:f6:
         ca:45:e3:f0:d1:49:d9:ee:cf:a7:e2:d8:38:0b:d6:c7:50:9d:
         f1:16:b9:51:71:f4:4d:d6:4e:2c:2a:fd:6a:0e:f2:b9:46:96:
         39:32:96:77:a2:97:ae:84:36:ff:2e:8a:b0:57:80:55:83:45:
         77:2a:60:f3:de:50:d2:d4:63:23:54:96:f8:52:a2:c9:b6:95:
         53:f1:86:f8:4f:ce:a7:16:8f:b0:f3:fa:26:5a:19:e8:37:34:
         9d:6e:5a:2e:30:f9:d4:a1:b9:9b:1a:be:ca:9c:34:70:20:f4:
         f5:fd:cd:3b:90:7a:d6:37:b5:ef:48:3f:67:4e:94:fe:4a:38:
         0e:a9:3c:68:91:54:fb:e7:f6:d9:88:2f:f9:0b:7e:dc:ec:7d:
         43:ef:24:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:28:28 2025 by rpki-client