Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
File:                     xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json)
Hash identifier:          t9ZU3CLUwMWZkZMSr+jwuMBr8w47rhG9XC7JJ1cFVlY=
Subject key identifier:   70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
Manifest number:          05F1
Signing time:             Mon 23 Jun 2025 23:15:10 +0000
Manifest this update:     Mon 23 Jun 2025 23:15:10 +0000
Manifest next update:     Tue 08 Jul 2025 23:15:10 +0000
Files and hashes:         1: 7tCGDj_HwkjxzoQxPdnK6diEFCU.roa (hash: bT1jetR3igdWmDJjkidT06s86Ch24IhqmIgSvAAkBJ0=)
                          2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: RaZs/Sg+wu8BkCwttJSrvoygsn9AQph1AZA3nCfQwMY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Jul 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: Jun 15 01:38:51 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=70F776851E8F32323433068C6155794963FDEA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb:
                    7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf:
                    b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76:
                    06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01:
                    8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59:
                    8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72:
                    a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80:
                    96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be:
                    30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07:
                    c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6:
                    9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2:
                    9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24:
                    8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79:
                    4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb:
                    1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7:
                    38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5:
                    92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:4d:5d:c9:9b:ff:1f:af:28:db:9e:c7:bc:26:67:4b:55:
         cc:52:69:8d:e0:fc:c7:a2:3f:84:85:4c:48:c4:68:e0:16:db:
         53:2b:12:88:6e:2f:d0:66:29:f2:ed:c6:6e:92:74:78:ea:cb:
         42:54:ae:e6:16:b3:ed:a9:b3:e1:54:3f:40:d6:46:88:8a:9b:
         f7:d8:23:43:6f:0b:fc:ce:14:3a:d4:2c:f6:37:1e:88:c9:b0:
         2c:05:d2:eb:af:75:31:d1:fe:15:93:89:13:12:92:6d:d1:9c:
         d8:7b:1b:f7:18:c6:68:7a:12:68:67:10:70:00:50:3b:77:7a:
         1c:14:98:f8:b0:8c:3c:8c:1d:c2:d5:13:b3:fd:43:74:12:f8:
         04:23:55:2c:d9:b2:a4:f2:bf:ff:ec:c9:5f:c7:ae:50:38:6e:
         b8:44:a3:2e:1a:d6:ed:b6:95:29:b6:1e:60:51:41:9a:29:92:
         6d:8b:ee:a9:1b:d9:da:c3:4d:4a:4e:2e:2a:37:67:be:b3:05:
         e1:cf:fb:2b:c1:ea:ea:1e:22:4a:cb:68:b2:1c:aa:7d:70:3f:
         46:30:08:54:c2:7d:4e:63:02:d6:10:d7:76:e1:f5:03:cd:d6:
         9f:3d:62:d3:f4:be:bd:49:07:19:2b:bc:99:2d:92:6c:e1:a2:
         33:c3:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 24 05:32:28 2025 by rpki-client