Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.mft
File:                     mXaQrPedxPWB6-bTUioPYlC1IEM.mft (raw, json)
Hash identifier:          cDRc25Y7ldIn4meQpjZN40cBbwyBoeFxtv+nq1pqW3Q=
Subject key identifier:   87:21:A2:07:0A:18:E4:9F:85:B8:39:A2:60:94:46:9C:AA:2E:DA:50
Authority key identifier: 99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43
Certificate issuer:       /CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
Certificate serial:       4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.mft
Manifest number:          076E
Signing time:             Mon 11 Aug 2025 08:47:57 +0000
Manifest this update:     Mon 11 Aug 2025 08:47:57 +0000
Manifest next update:     Tue 26 Aug 2025 08:47:57 +0000
Files and hashes:         1: mXaQrPedxPWB6-bTUioPYlC1IEM.crl (hash: Q3NsRhZelJFl6Fm/7SK4UjIXJtWHfzLhPEBBL/1pkRE=)
                          2: vkSuDwkDBoA7QhMXMN4Km0Bb9hM.roa (hash: jjjudYuW10M6jG3Bi5CpphP+M3Vw0QjYA8VDD7fDpNc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997690ACF79DC4F581EBE6D3522A0F6250B52043
        Validity
            Not Before: Jul 30 06:34:01 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=8721A2070A18E49F85B839A26094469CAA2EDA50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:1d:5e:65:76:89:50:6d:f3:b7:97:74:5c:
                    f5:01:50:f9:ec:aa:01:4b:8d:1c:22:cd:72:93:a4:
                    1c:5a:83:a0:90:1d:2b:60:58:af:cc:84:e4:6c:af:
                    2a:06:32:6d:64:35:63:84:02:e7:f2:d7:4d:46:11:
                    2e:b6:70:30:6f:9d:75:c2:60:e8:5a:54:df:ef:88:
                    62:9d:13:21:ff:be:ce:1e:8f:58:9e:d7:6b:fc:3b:
                    9a:bd:c5:e9:80:69:7e:a9:d6:4f:ec:90:9e:02:9b:
                    dd:7d:d2:b2:b8:66:03:43:67:03:8d:7b:d2:e2:8a:
                    b5:b2:9a:0b:2b:72:b0:31:34:27:5b:bd:75:d1:3c:
                    10:97:ca:a2:74:78:25:c4:3c:48:7e:ad:c4:1a:02:
                    9b:3e:4b:bc:07:31:14:b3:3c:49:ac:c1:02:93:6c:
                    ca:b6:4d:11:cd:4e:4c:9e:e7:1a:7b:37:37:80:02:
                    fe:ce:66:21:28:91:02:94:0b:ef:e9:4d:fd:6c:41:
                    37:c0:d2:69:e9:f3:ce:7b:a1:34:0b:d3:7d:de:9f:
                    60:80:54:fd:ce:7f:80:c3:d5:44:0f:f1:8f:1d:02:
                    45:94:05:8a:f7:98:bb:39:af:94:0d:c3:3a:04:1c:
                    e8:85:a0:d7:0e:ee:33:8d:41:b4:33:e2:07:e5:3b:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:21:A2:07:0A:18:E4:9F:85:B8:39:A2:60:94:46:9C:AA:2E:DA:50
            X509v3 Authority Key Identifier:
                keyid:99:76:90:AC:F7:9D:C4:F5:81:EB:E6:D3:52:2A:0F:62:50:B5:20:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mXaQrPedxPWB6-bTUioPYlC1IEM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39054/mXaQrPedxPWB6-bTUioPYlC1IEM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:02:53:1a:fe:3c:9b:08:8c:23:8d:f9:61:52:e1:9b:e1:
         26:e6:8d:7d:36:b2:19:29:41:84:a0:4e:83:c7:8b:91:5d:8e:
         81:af:81:e6:11:db:62:84:2c:5e:f4:82:77:ca:15:fe:66:5b:
         fe:c0:72:b2:18:e7:58:d3:8f:3c:6f:85:54:c8:a2:eb:08:2a:
         13:8d:df:03:b2:1b:cc:1d:b4:77:d9:c3:74:d1:0b:4a:2b:47:
         19:17:1d:00:59:0e:9b:a8:e3:af:44:17:c2:89:0f:2a:b2:24:
         f5:68:b5:60:3a:04:38:0b:90:ea:00:87:a6:3e:48:43:98:1f:
         9f:38:af:78:44:0a:cc:0f:e1:96:14:d2:f3:48:c2:91:c9:d5:
         61:99:6d:57:81:49:88:65:bc:03:1a:42:b3:18:b5:5c:1e:05:
         d3:11:5e:b2:81:f4:ae:f1:f7:0e:92:86:c7:c1:7e:9a:43:61:
         a6:f3:0e:d1:ba:8c:d2:b5:b2:0e:e5:62:8d:b0:a9:fe:37:a3:
         98:56:cd:f4:f3:c6:08:eb:55:07:39:68:67:78:58:6c:90:d8:
         3d:74:71:24:e2:1e:af:ea:1f:ad:96:ee:56:d7:df:b5:bd:7d:
         9d:fa:a9:3d:e8:7d:a2:6f:12:c3:b4:de:2e:03:f3:c0:c2:54:
         75:14:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:58:33 2025 by rpki-client