Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
File:                     O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft (raw, json)
Hash identifier:          ZpBXd2mghsvonUOL11vowKhI5Ddb8IueaVy0yH9qw0o=
Subject key identifier:   F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       45
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
Manifest number:          075B
Signing time:             Mon 11 Aug 2025 08:48:06 +0000
Manifest this update:     Mon 11 Aug 2025 08:48:06 +0000
Manifest next update:     Tue 26 Aug 2025 08:48:06 +0000
Files and hashes:         1: O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl (hash: BZaTP5BgWpNGlJc346/sgr2uvN/UfsLUzEMFTd9HfqI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Jul 30 06:45:06 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F06E8776EA62B8CDC8ACBF65C489B34409454092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:82:42:ba:96:33:b0:9b:38:82:fb:3b:e2:
                    7e:27:a4:65:5a:0a:63:af:f2:4b:54:e0:53:ac:20:
                    5c:af:a0:49:c7:41:fb:59:70:13:f3:9c:59:e6:f6:
                    fe:2a:1b:28:c6:2c:20:61:09:3b:9d:80:6b:f7:50:
                    91:83:55:0a:22:bc:54:49:13:c5:b3:ef:36:7b:5f:
                    57:6c:41:71:ad:6b:b3:92:a9:87:99:16:a7:a2:4e:
                    b7:42:64:5b:e5:9f:bb:94:f9:39:89:d4:df:b9:e1:
                    fd:eb:79:6f:e6:8d:86:f4:ad:d9:81:c7:9a:ef:e7:
                    45:6b:96:e3:ad:77:f7:59:3d:56:54:28:e0:72:b5:
                    9e:b2:4c:75:16:03:60:1b:99:24:81:e0:69:93:e8:
                    64:6a:3c:c7:96:fe:19:9c:e1:31:96:c6:62:2e:9d:
                    e7:f2:96:b5:f7:db:4e:c9:7c:43:3f:cc:2a:52:c2:
                    8c:01:17:a2:a4:b0:3d:f3:15:89:6e:71:3d:11:0c:
                    7e:7f:8b:5b:71:51:f4:03:55:31:1c:8c:4f:78:c9:
                    87:6c:3c:ab:8e:83:bf:55:46:56:c1:df:02:11:60:
                    df:c6:17:2d:9a:d1:01:59:7d:ab:e8:0a:2b:fb:bd:
                    54:ec:1a:3c:1b:30:0f:e3:13:11:a8:56:8c:d5:dd:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:8d:ee:29:c9:31:1b:0a:d7:dd:f9:b9:7b:7e:58:c1:48:6d:
         af:f8:77:04:f1:25:a5:91:9a:a2:41:55:87:42:99:f3:13:44:
         2b:e8:98:97:95:3b:2c:63:5e:0e:6f:fb:1e:3e:3d:04:01:60:
         65:bd:aa:93:8f:8d:5d:f6:ee:4f:d9:83:7e:19:39:3c:8a:94:
         7f:d1:52:84:6a:ce:83:62:08:26:56:0d:4b:25:7b:e9:78:be:
         5e:78:61:e2:89:21:52:89:e1:25:b9:de:37:2d:9c:05:01:07:
         24:96:a4:9b:bf:e0:3d:dd:e7:24:ec:19:9e:58:c6:8a:34:86:
         6a:25:08:eb:6b:86:90:b8:a2:4c:e2:bd:6c:b0:fb:b5:9c:79:
         e4:1d:23:8b:9a:90:46:19:36:38:d8:b6:37:b5:f1:ac:43:a2:
         5a:cc:e0:38:5d:ce:df:1b:55:57:79:1d:f3:d3:f7:23:3b:29:
         94:64:d6:17:66:8e:d5:a6:11:1f:45:19:da:9b:1d:a4:4b:fc:
         65:3c:98:19:54:a3:ce:f7:96:2a:97:82:06:1a:a2:12:5b:62:
         1c:2d:e6:ac:c8:d8:4b:91:f9:de:d7:34:1f:70:2a:2e:66:fc:
         9d:a0:fa:f9:92:e8:c3:35:a1:76:45:2a:0c:c7:c1:f0:fb:0e:
         a8:3b:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:15 2025 by rpki-client