Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
File:                     NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json)
Hash identifier:          d3X6prsWnmY3nUz4Er8aFMgBmjYZLHSmxMQC9U1caKY=
Subject key identifier:   65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
Manifest number:          06EC
Signing time:             Mon 11 Aug 2025 07:46:26 +0000
Manifest this update:     Mon 11 Aug 2025 07:46:26 +0000
Manifest next update:     Tue 26 Aug 2025 07:46:26 +0000
Files and hashes:         1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: Qg3PrNaqr5q9yXuS6C+fLl45mQNDmDQ5R+xy/OY1vCc=)
                          2: TzJlOK3LY0zBfBLbAaqnSIe9w3Y.roa (hash: STdnLSbbhfScoQZAi6A8jRkgnMGyOCxQDnWgT3KiPqY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: Jul 30 06:36:12 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc:
                    b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9:
                    d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70:
                    98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c:
                    89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81:
                    45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe:
                    5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89:
                    74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87:
                    0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd:
                    eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18:
                    31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a:
                    1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1:
                    d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c:
                    bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f:
                    27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6:
                    26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c:
                    62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:56:78:d6:b5:e3:78:04:81:b0:0f:e0:19:ad:7c:92:bf:7c:
         06:5b:0d:8f:81:8f:17:8c:9c:3a:7a:bd:fd:96:0c:85:ca:03:
         d6:4b:82:71:17:e4:09:f4:46:78:00:b1:26:e4:e1:b7:3b:d0:
         68:f6:9f:93:1a:81:47:0a:38:20:e1:d1:1a:d7:95:86:2e:2a:
         13:5c:d3:7a:77:51:d7:07:38:a3:03:23:e4:37:4d:a6:3d:4e:
         ec:6a:0b:eb:f2:ba:9f:fa:fc:44:e1:88:30:0e:6d:e3:b9:b6:
         36:dd:f7:fc:d0:5f:d6:d9:57:75:cd:92:6e:ee:70:f0:3c:1f:
         9f:0a:da:60:3c:80:76:89:74:18:a5:ee:85:6f:58:fd:db:8b:
         64:07:9b:c6:f8:8a:e1:29:6a:08:f9:ea:ed:b2:0e:73:ca:3a:
         2d:b2:ca:53:c8:34:30:6b:c6:f0:77:96:3f:7b:87:dd:c3:e7:
         1b:f0:75:9a:a5:bc:6f:42:bd:a5:e8:07:c8:c5:28:74:2e:53:
         15:41:2e:8c:8b:83:6b:e8:f2:0e:71:ae:41:65:2c:9b:34:21:
         5c:fd:70:7d:54:11:6d:9d:17:b7:eb:33:94:9b:0a:f1:bb:28:
         38:8a:41:11:dc:62:f1:d5:e6:b6:5f:76:9a:33:02:3c:6b:07:
         23:4a:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:49:29 2025 by rpki-client