Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
File:                     FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft (raw, json)
Hash identifier:          /agU4DQZJPb6UtlBppUxq9cS8z9PyZ8qyV0riJIwvJg=
Subject key identifier:   C7:73:81:B2:0D:31:62:4D:07:B2:5B:87:85:A9:58:F3:91:A9:FA:7A
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Certificate issuer:       /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
Manifest number:          011B
Signing time:             Sat 26 Apr 2025 07:19:54 +0000
Manifest this update:     Sat 26 Apr 2025 07:19:54 +0000
Manifest next update:     Sun 11 May 2025 07:19:54 +0000
Files and hashes:         1: DgDKCG3ePf5gsklz245ibQDkhgk.roa (hash: ad3/kFuQ3Mdl3T1nM415+/Dr5KL43HWHojsdnNCX1tQ=)
                          2: FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl (hash: kgAq9TXYu9myqarAFp3Wx2UU9SO7jvYcaQKaYdopuhE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
        Validity
            Not Before: Apr 15 01:38:14 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=C77381B20D31624D07B25B8785A958F391A9FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:e9:10:ca:34:0d:1f:a4:71:8b:e6:6f:5a:
                    0a:b3:38:1c:87:4e:fe:41:26:59:ef:6b:c7:8f:01:
                    de:d9:ea:75:2d:35:2b:a8:ae:7a:96:5e:05:bc:42:
                    dc:be:4c:9e:fc:7f:cf:44:f0:2b:c0:d0:2e:14:21:
                    a9:32:a4:6b:bb:39:e2:b5:09:06:fb:fd:f2:b3:57:
                    f8:51:2f:4b:dd:4c:62:d1:11:0f:e1:cf:38:89:02:
                    93:d7:1a:2a:fa:b3:bc:dc:07:56:af:55:88:f5:9f:
                    32:9d:91:34:3b:dc:3d:35:57:18:85:09:40:bb:c1:
                    9c:97:99:c3:f9:94:2b:90:d9:69:84:38:1b:ce:2b:
                    b8:84:4d:53:c2:78:6a:1a:c8:da:75:30:8f:b9:05:
                    23:c0:5b:da:51:36:9f:4d:51:36:18:62:04:99:2d:
                    a2:59:6f:ae:6a:5a:54:04:12:73:1b:14:e8:e0:91:
                    b1:2f:73:eb:46:a0:16:74:d4:f0:2d:d3:3b:00:ff:
                    a8:85:45:0c:56:21:8b:8b:c6:d6:44:17:c7:18:23:
                    98:b3:8d:42:a4:6b:7b:5b:ba:98:a3:0f:61:1a:29:
                    60:ba:c2:e0:fb:bc:28:20:60:f2:ba:e4:65:86:b9:
                    e8:17:6a:95:06:db:7b:82:e2:58:02:2d:e3:04:17:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:73:81:B2:0D:31:62:4D:07:B2:5B:87:85:A9:58:F3:91:A9:FA:7A
            X509v3 Authority Key Identifier:
                keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:e6:3e:b4:1a:46:42:e7:b4:7d:24:4d:cf:33:eb:55:7f:
         ea:41:41:5f:a5:47:e1:8a:19:3c:b7:7d:99:90:26:d6:4b:e9:
         dc:55:3e:5b:b5:d8:9e:08:c4:12:b7:84:54:f4:41:cb:ad:36:
         15:9a:06:b0:e3:15:61:0c:c0:07:15:b4:8a:c2:02:c9:2a:03:
         94:a1:6d:70:16:34:59:60:cb:9e:20:cb:94:56:8b:52:49:18:
         98:1c:9f:b2:2b:f3:1a:63:46:56:d2:55:73:0f:a2:8e:d0:6c:
         cf:e9:08:72:6d:3b:cd:91:4d:b5:0c:e7:2a:ad:3b:24:4a:a6:
         06:48:4d:f1:1d:1c:d4:3d:8a:95:10:e7:6b:71:d7:ce:1d:7f:
         92:24:7f:1a:c8:b4:bb:f3:7e:ba:cf:6b:6b:c6:3e:28:b4:23:
         a2:06:9c:da:93:8d:b0:d9:98:54:b5:3b:da:c2:d3:29:c7:ca:
         64:cd:bf:e4:f0:a1:14:e9:dc:a6:a3:c5:47:3e:fd:ca:08:53:
         b5:c4:9f:0b:8d:08:66:74:bd:c5:f2:89:3f:33:c8:d0:2a:39:
         0a:11:32:0d:49:2e:21:b1:77:ac:a8:cb:69:4f:8c:59:10:3b:
         46:97:af:30:30:f6:0e:55:93:64:35:1f:55:dc:f9:f2:50:43:
         0f:ee:c1:0f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDdF
QjMzMjgyM0UxQzEzMjlEQ0U3NEFFOEVEN0QyNjBDQThGRDgyMB4XDTI1MDQxNTAx
MzgxNFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQzc3MzgxQjIwRDMxNjI0
RDA3QjI1Qjg3ODVBOTU4RjM5MUE5RkE3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKwj6RDKNA0fpHGL5m9aCrM4HIdO/kEmWe9rx48B3tnqdS01K6iu
epZeBbxC3L5Mnvx/z0TwK8DQLhQhqTKka7s54rUJBvv98rNX+FEvS91MYtERD+HP
OIkCk9caKvqzvNwHVq9ViPWfMp2RNDvcPTVXGIUJQLvBnJeZw/mUK5DZaYQ4G84r
uIRNU8J4ahrI2nUwj7kFI8Bb2lE2n01RNhhiBJktollvrmpaVAQScxsU6OCRsS9z
60agFnTU8C3TOwD/qIVFDFYhi4vG1kQXxxgjmLONQqRre1u6mKMPYRopYLrC4Pu8
KCBg8rrkZYa56BdqlQbbe4LiWAIt4wQXSS0CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBTHc4GyDTFiTQeyW4eFqVjzkan6ejAfBgNVHSMEGDAWgBQUfrMygj4cEync50ro
7X0mDKj9gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0NDAvRkg2ek1vSS1IQk1wM09kSzZPMTlKZ3lvX1lJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRkg2ek1vSS1IQk1wM09kSzZPMTlK
Z3lvX1lJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDQwL0ZINnpNb0ktSEJNcDNPZEs2TzE5Smd5b19ZSS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALxeY+tBpGQue0fSRNzzPrVX/qQUFfpUfhihk8t32ZkCbWS+ncVT5b
tdieCMQSt4RU9EHLrTYVmgaw4xVhDMAHFbSKwgLJKgOUoW1wFjRZYMueIMuUVotS
SRiYHJ+yK/MaY0ZW0lVzD6KO0GzP6QhybTvNkU21DOcqrTskSqYGSE3xHRzUPYqV
EOdrcdfOHX+SJH8ayLS78366z2trxj4otCOiBpzak42w2ZhUtTvawtMpx8pkzb/k
8KEU6dymo8VHPv3KCFO1xJ8LjQhmdL3F8ok/M8jQKjkKETINSS4hsXesqMtpT4xZ
EDtGl68wMPYOVZNkNR9V3PnyUEMP7sEP
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:42:40 2025 by rpki-client