Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
File:                     rUdB8DSfvBWnCOKKLOMHkGysXeA.mft (raw, json)
Hash identifier:          AAOhlJXkdfWEvyQU3Z9pY8hviHb5rbnzYEzXEYxsfxM=
Subject key identifier:   34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
Manifest number:          06F9
Signing time:             Mon 11 Aug 2025 06:58:07 +0000
Manifest this update:     Mon 11 Aug 2025 06:58:07 +0000
Manifest next update:     Tue 26 Aug 2025 06:58:07 +0000
Files and hashes:         1: -44w3H7mHC3P6MEkJ64gddWl05o.roa (hash: ekAEa04AtpxTpm27NgIehyLMgTqp2cJO/JqEpvVq0mY=)
                          2: 6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa (hash: pGOiUwrcijbOh7s/fIQGYME7OWobKUFgc6nuexCXFrU=)
                          3: AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa (hash: nFhNzeC3riYqXxDTlr4VOWOGbXhA2ZXFzEX0CCoaAl0=)
                          4: FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa (hash: 9xIQ1aoYhLmNaKV0qTMShB6r+L42mmz0vEe1O2sJ6Yc=)
                          5: Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa (hash: iOGPOuYPj5r/cN0YDKN/ZOwI7ZDH9ZX/pSQ7K6nAdxU=)
                          6: HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa (hash: BPNwftNmWWMNHfVTqGf57CYHqCpkli1hpywyFPnsEOM=)
                          7: HoTVVuBmQz7w-_GK8A50XT-oITg.roa (hash: 2IqaLQ+EiS3PzlA9vQ01E0p37akz/m/L2FmPX9wHjo8=)
                          8: Opx5wg0WF-5E6zDseE1mZXHqzBU.roa (hash: U40LmeWNqAR/wEt5u9K0EWxKlPvgBANbRIla5GeCxNg=)
                          9: P92WSbxjaWhAzQHERNuRMhQ5dbU.roa (hash: Cpn/uQhJUzWt9TwbxpwuvPnjzxAIsEpveTtjNmwoBAs=)
                          10: bF80adSQ8vY_hSjb1MNA62WrLok.roa (hash: iSV4EUZj9O+MXJL2MLaL8et/J11m8cLRSw0AlK5YehE=)
                          11: bNZiILBQZCfv4rafHeI4ItJUj0M.roa (hash: jdkVKrogZ1Uyh/9oUzhqOvxxE7mJ5gJwFU2JiVNkTOc=)
                          12: fC50YiCiaZH3Owk7bRKOueaq30U.roa (hash: 0gp4Fc9J1EouRt/DpBNacd4J8HJztuVvZzbhlIw/M44=)
                          13: nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa (hash: IpSd49Zb/DkneMD3+fLGaMDLvRJU6gGByNvNvmvbaLE=)
                          14: plrrw1zZJMDvs5vsLiu3LSmU9So.roa (hash: En+hNR2/MWIF7+CfXeorjfU098aLo4gYHrkrOQgBa3g=)
                          15: q55W-jiXYj9pipYZ55OKoZuHUZg.roa (hash: WtoMlfuIzZFoWwxTN7NyWp1cOZIDnRLFMYfYdHslePg=)
                          16: rUdB8DSfvBWnCOKKLOMHkGysXeA.crl (hash: zCUOtlH46qFXLavm2CoYKMQkz4o8wNh0Qj4bYHZI1Pc=)
                          17: tRLeb59T51PVsvVpprenQhiMVWo.roa (hash: i4d2pqwxG4pMmE33R5zS3XsYKlS18ktc/FzQlP11Osc=)
                          18: u__x-QVW8DyyMjVXY1TmAcTdlSU.roa (hash: t7NDLgL+ywoFLnF08mgweWatFG1WCx3pBLwNDwVnD08=)
                          19: vzIlY2MXuGgxt481RgiujD6ikAQ.roa (hash: 2IiYTq1jGJTrWoyXNq4MN8AK2fBJJoSK2RkRY3pCVRU=)
                          20: x7NjzK66HD4p3HS04nvM5LzUTm0.roa (hash: vLDP5mFxGvPZahQmcUzuQcsAlkSEULfmKV5sObv+xQg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Jul 30 06:35:59 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=34B5FD0C2C7BE812B69D0B55F71081FA7DC44DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:8f:f3:8c:63:be:ff:53:17:98:39:6c:37:
                    c8:0b:65:f7:b3:52:21:ef:d1:45:fa:0e:70:d3:33:
                    42:cd:bd:2c:9a:e6:02:54:82:4f:3c:f2:ec:0b:c3:
                    79:b0:a1:89:e4:6d:97:00:85:20:65:d6:bf:01:f5:
                    69:ef:9f:f0:e6:b7:7c:b8:ea:e1:ee:01:f2:87:0c:
                    66:f7:af:f1:6c:fd:f3:54:0f:68:47:35:fa:8f:65:
                    5f:31:69:1a:e7:53:6e:80:a5:68:d7:78:3f:ef:4f:
                    08:47:b7:94:37:d1:48:88:ef:14:b8:c3:b6:f2:39:
                    b0:b5:5d:a7:43:7e:8a:84:83:32:20:ba:02:58:1f:
                    22:0b:48:a1:d5:26:d5:a7:73:9a:53:98:5d:f7:50:
                    20:ac:4a:de:bd:48:66:ce:37:42:3b:2f:80:bf:44:
                    a6:af:9c:6a:2d:97:0c:6a:6e:84:e7:70:1b:55:57:
                    bf:eb:76:a7:06:fa:ac:54:e5:42:0b:4a:1e:81:0b:
                    f6:32:99:be:f4:38:be:07:61:11:1e:1c:6d:8e:61:
                    47:c3:f6:e1:f5:16:9b:ff:a3:3c:e1:47:18:68:93:
                    a6:fd:d2:11:84:24:c3:bb:6c:b7:71:63:dc:c5:34:
                    be:31:90:24:99:85:26:cd:87:d6:f3:fb:a6:18:e7:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5c:76:20:ec:7f:83:ba:fc:8b:d6:0a:ab:cd:f4:c3:93:e7:
         c2:51:91:29:a2:46:16:17:e8:73:58:63:d0:b1:fc:8f:c8:0b:
         c2:8a:d8:35:1f:e9:b7:f6:58:7f:5a:13:d0:9b:43:da:84:0c:
         be:f2:37:ad:c4:bb:16:38:df:21:a0:f8:cb:03:cc:7c:cb:18:
         f8:90:52:6d:5c:78:c1:09:ff:54:10:82:b3:30:26:ed:fa:2b:
         df:93:a0:19:46:69:b2:e2:33:82:72:78:3e:05:3c:e0:8b:86:
         58:a2:95:f7:b5:4e:60:18:d4:de:f3:82:9d:a0:ca:0e:2d:d8:
         52:67:21:af:64:12:d7:9c:f7:0e:37:c3:5d:9b:5f:d4:e8:06:
         5c:44:e8:08:d4:4a:c3:60:f6:fb:b1:b1:27:9d:df:9c:a6:3a:
         25:57:25:49:b0:34:35:ce:1d:f0:25:fd:1a:b3:09:f8:44:fe:
         f1:7e:ed:2d:94:57:7d:64:57:6f:1c:12:d0:14:cc:2e:6d:1d:
         ac:ce:8c:6e:30:81:aa:20:2a:55:c8:80:42:61:b8:5a:bc:8e:
         f6:9a:61:8a:20:6f:eb:5d:f2:cd:73:c3:31:42:2d:e5:3a:73:
         39:6d:3f:80:bd:23:88:77:c4:7a:5f:fd:05:95:6f:58:e2:b6:
         3e:75:da:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:38:21 2025 by rpki-client