Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
File:                     wJhsDy2y1P5wdnLCJ5N76qn114o.mft (raw, json)
Hash identifier:          9nYOn8zCx/UTNL54owMKeiFqTfBJjhvOLaLp9lrdzzE=
Subject key identifier:   54:9A:D3:CE:ED:C8:CA:8D:B0:0E:67:10:49:51:5A:E5:B1:C0:36:C4
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
Manifest number:          0402
Signing time:             Sat 26 Apr 2025 07:34:06 +0000
Manifest this update:     Sat 26 Apr 2025 07:34:06 +0000
Manifest next update:     Sun 11 May 2025 07:34:06 +0000
Files and hashes:         1: 0xqgt5AXzM4eWGjHIU1qrU_1YNU.roa (hash: 1HZXkrRvVTNGWRNf/wmsXZqojQjT203BWxInh/bOWv4=)
                          2: 1eHVdLVaWqh8WZ5jz1f_6r6rbtA.roa (hash: c+5Z1+DGfo98Jx6rnYM3QEiqqWLg6fRrk00IP8lnaqk=)
                          3: 4kEs6vWluo2N1wpJ78Lh5mxGjHc.roa (hash: YCryPSf/HNPIuCsFTtk9tZYe0Uil1GRVQG5Xj1pIm6I=)
                          4: CnBSaNfmxnFKTICqyPeQ6BXXEOc.roa (hash: xgzgfxwOWdiHmDupgyy6NClc8s7VXX7ZfDd9inRi14k=)
                          5: FT8t-1KfxEFL6xHmz8Ek6OPtCCE.roa (hash: QlTwaJ1kYmYPGkK1V+SJZPIf3q4n1eg6QOW0VV4gMS8=)
                          6: G8PGL6GGZ3aocSrFyDvwCScYhRs.roa (hash: Lyz2ZBbsFqAEZlJTXwdmVy2E8wI3SFqb1RRrpElm7RY=)
                          7: GBZDpBDFsMvFkKNr8OglDeW0-xI.roa (hash: oa24dBFsXavTXwL7zvItk7PH3hg3HrfstcX2ZpE5yos=)
                          8: QLMQgXsb79aATcgOWY6EBpN_hJ8.roa (hash: 2WYNrF5aCk0J5Sn+LFdLWdhWn+A5QbLbRnUAt6lXZ+g=)
                          9: RgN8C-ClMmg-8hztoq-ggmTETTU.roa (hash: Yfku1KcS5Dx7WGp1PinzJ9icsa2b0oP+QIRuM8paYdo=)
                          10: U-GuS64ziTI8SUJ8t_FAvgcwAtI.roa (hash: yO0qF1s2UQCQlNVXx8dVZMeUCJ9kB4g/nHrmU6Fkrj8=)
                          11: VDWZzlgQB-a_Q1ot2Dklv5Kwt1M.roa (hash: Z7i2xoh0ZnFnpmREMTs2irt7cjtDiMBFv2q1dkp5G44=)
                          12: foP0f7o82UD9edqf2MuGVX1Z2b0.roa (hash: ePaGBZSx9ym6l2MJZy2KvnqxHPoTRxHF94s1rnpD4Zw=)
                          13: lrIqjvg92w1Ao4QYO0KPJzHywME.roa (hash: VU9yMNKcIcbbeKJjjHUrc9RbtTebw5sIwsNNWX6TTKs=)
                          14: mf2yCSuHR3bo4xSkwSwrHW7W0AA.roa (hash: GDWkb9LpWNzbb7xtHHsVIgqfH7IKc3HSmKPmuEvdleg=)
                          15: tVkXzCx120TubVLOQu-dA2COanw.roa (hash: I2nRkgGKDFngySdqdi5SE7ZbX/3ycgLYZUdJY36Kcf4=)
                          16: uIY3pU6MKHJfteZEwdHxe9TKD9M.roa (hash: cDJsDvIVBRKbfiFU2O7+3ZhXwIVI/sDAP96eItEpqjc=)
                          17: v_I-tBsbZ6CykYERN84vXotzuh0.roa (hash: ZUlb6vWGWuARhbmhKYMsZL9x6apkDe67s4OcIN68uUU=)
                          18: wJhsDy2y1P5wdnLCJ5N76qn114o.crl (hash: PlyKXo7F6bnCWDHnPz03GfUoDiaRQNLvQpeua2Tymws=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Apr 15 01:32:28 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=549AD3CEEDC8CA8DB00E671049515AE5B1C036C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2f:ae:83:9b:c4:39:d9:ee:5f:84:f2:a3:d1:
                    63:a2:7f:b5:41:6a:d8:1b:83:0b:ca:38:12:46:6f:
                    90:f3:c3:e6:91:44:3f:e3:f3:12:e4:e5:4c:d7:45:
                    81:34:b7:69:70:0b:1c:e5:c2:ef:52:69:c9:dd:36:
                    83:15:dc:72:94:ba:2d:e3:58:c2:99:be:f5:b2:f7:
                    8c:f5:50:8e:04:f7:9b:9c:d1:a7:dd:a3:d3:f1:37:
                    9b:63:f4:93:cf:0c:8a:a6:84:99:3c:1a:45:ac:5e:
                    be:b1:e7:ea:66:7a:6a:73:9f:e5:a6:49:d7:01:01:
                    84:78:88:8f:14:61:69:11:e2:96:d2:26:a8:5d:93:
                    d7:aa:fc:38:17:45:aa:47:58:f0:69:91:9e:73:07:
                    af:5b:ad:47:32:51:86:dd:a9:64:d1:22:31:79:a5:
                    00:c8:99:a9:c4:35:e7:6b:62:c4:ad:e9:54:81:e7:
                    73:d7:b9:84:51:0d:ff:5a:3f:d9:e1:8f:56:14:95:
                    f5:9e:38:1f:42:9c:a4:ef:fc:50:e7:cc:4e:ef:4c:
                    13:9b:b1:33:64:e1:55:d7:12:b8:65:11:f9:74:36:
                    6e:3f:08:d8:c6:10:dd:9f:ac:d8:c9:ac:02:9d:f3:
                    30:ec:86:d0:7d:e7:15:2b:46:89:ad:b4:78:d4:54:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9A:D3:CE:ED:C8:CA:8D:B0:0E:67:10:49:51:5A:E5:B1:C0:36:C4
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2b:14:45:2d:fa:5e:97:d0:b5:32:9e:58:25:7a:3e:45:7f:
         2b:7d:91:d4:eb:75:4d:4a:53:f4:08:c2:ce:04:2a:6b:37:41:
         5e:0b:1e:ab:83:1f:31:d3:00:69:65:00:c7:c9:53:9f:3a:3a:
         c1:a5:62:3b:30:36:53:44:34:51:a6:10:2b:4e:77:3b:bb:ee:
         03:a0:a2:a5:7e:f5:4d:85:a0:b3:02:a9:1e:89:71:79:5e:36:
         58:ed:a2:51:a6:46:9e:45:6b:81:a5:54:c9:ce:b3:dd:86:5c:
         6e:29:2f:f3:aa:cc:1f:ef:78:d6:3d:b9:42:51:e4:29:7d:0e:
         47:85:d4:58:93:4e:82:7c:a6:7b:93:49:7f:a7:f1:42:1e:1b:
         84:95:ac:ee:e4:1e:9f:8d:f1:21:cd:bc:a1:be:68:37:34:bd:
         c8:ec:91:cf:1c:c6:b0:7a:45:76:ab:78:4a:e6:6f:1b:b3:5e:
         2f:01:39:7a:40:a3:b2:2e:45:d9:45:4a:a9:c3:b0:b1:9a:10:
         7d:61:9f:ac:dd:04:f0:15:89:6b:ac:18:d5:12:56:2a:a2:f0:
         25:92:9e:23:27:27:e7:b0:bd:f4:4b:d2:c2:e9:a1:78:13:d4:
         4a:76:1b:e5:39:40:1c:b7:fa:de:59:52:52:b6:ea:3a:9d:db:
         3d:da:17:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:33 2025 by rpki-client