Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
File:                     6ESHjyExP90FqcNFb_9ImIXcqmU.mft (raw, json)
Hash identifier:          aTj8CB9+hfkSZQSdsizL0XMms/aGRBgDxBofhkxE03I=
Subject key identifier:   AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Certificate issuer:       /CN=E844878F21313FDD05A9C3456FFF489885DCAA65
Certificate serial:       1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
Manifest number:          069A
Signing time:             Mon 11 Aug 2025 09:45:20 +0000
Manifest this update:     Mon 11 Aug 2025 09:45:20 +0000
Manifest next update:     Tue 26 Aug 2025 09:45:20 +0000
Files and hashes:         1: 6ESHjyExP90FqcNFb_9ImIXcqmU.crl (hash: qUALtJOcgJRBO6lFLF8nacrh36vJYDhZos1IaWKO8O4=)
                          2: j5NlJ0VrmIclkfgLd_-j51w1G20.roa (hash: WdXn0L7OLssxTE5Ao/XuguozaQUV9PsHEr8f8RZDhKA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Validity
            Not Before: Jul 30 06:32:18 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=AE2F860913AE68A889E4537453BF9E0CE2F53C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:80:a7:3d:3d:f5:9e:99:b0:98:7c:15:2c:
                    a1:11:4b:6b:bd:9a:f2:d8:08:68:81:78:7a:74:f4:
                    9b:82:91:0d:98:8b:8b:ce:89:61:91:46:a7:59:45:
                    5d:d3:bb:37:0a:aa:03:19:f7:82:e0:da:8d:89:2c:
                    d0:69:4b:81:98:21:8c:d4:a8:c3:ac:f7:1f:df:13:
                    23:63:06:67:61:81:2a:61:d9:f2:e0:c9:aa:f3:3e:
                    76:b0:48:1c:0a:12:cb:d8:e3:3d:c2:81:1a:13:1b:
                    4c:3e:b3:e3:89:d4:e6:95:35:86:59:92:64:69:f4:
                    02:3d:5b:ae:36:52:ba:a8:12:36:dc:22:f1:17:17:
                    54:fd:94:13:a7:e7:6c:22:78:90:10:37:77:c1:29:
                    93:e8:0c:e5:84:84:15:72:63:79:e3:8a:25:8d:70:
                    80:b1:ec:e7:d5:14:e6:28:3c:c9:3e:23:6e:3f:cf:
                    3f:eb:88:9f:0c:76:3c:86:2e:07:b7:97:1b:c5:d1:
                    d5:b2:85:d3:81:ec:75:b7:04:a5:a2:98:58:4b:0c:
                    8b:26:99:77:37:89:f0:8e:be:77:3f:50:8e:3e:53:
                    d8:5d:e4:7c:71:d3:ac:84:c0:24:6d:f5:67:ed:b5:
                    9a:f6:08:6d:b2:d9:28:b8:ec:b0:1c:5e:21:ce:f2:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
            X509v3 Authority Key Identifier:
                keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:b1:93:e2:c4:29:78:6e:57:dc:98:b5:df:98:c6:2f:1d:
         f6:79:75:80:60:b8:f3:a3:3c:8e:51:96:1b:b6:d5:8b:f9:99:
         08:ac:bb:93:c7:4a:b1:75:83:37:49:9e:2d:38:30:88:59:44:
         1d:f3:75:00:74:cf:0b:a8:33:7b:b0:bc:ff:6d:ab:92:38:3b:
         e0:3f:11:c6:fa:33:9b:76:a8:cb:ef:75:b2:a9:d1:37:fb:76:
         d8:9e:4f:82:23:2e:12:48:bf:99:53:a2:50:cc:02:1b:38:f2:
         cf:9f:7c:5f:2c:62:eb:7a:0e:32:63:1a:63:61:44:02:b3:cc:
         51:12:2c:dc:ef:8d:c5:93:cc:f7:0a:2b:b0:1b:46:a0:09:27:
         1c:bf:d0:57:de:88:0e:5d:a0:a6:23:5d:35:bf:f5:4d:3b:f5:
         6f:55:7e:b3:e8:9c:6c:82:df:22:c8:f7:ef:c1:72:cc:cb:25:
         3f:f4:01:08:c8:ee:c2:84:7b:d4:18:2d:b0:72:13:07:5c:68:
         1a:ff:f9:30:1e:36:45:39:ce:83:25:32:94:c1:5e:ac:76:22:
         c2:38:ef:25:bb:b6:5b:cf:5f:8a:5d:b9:ef:26:f9:5c:d8:7b:
         90:9f:e7:7c:9b:da:28:3b:5a:bc:58:28:fe:15:2b:9e:94:93:
         6e:8b:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:33:47 2025 by rpki-client