Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
File:                     1TkKLCMKW2EqKT_v59qPAgwo9NM.mft (raw, json)
Hash identifier:          d0dT9ZMEpDu3lESUHAXlugUrKn9LOaS/EwEZOS2Q59U=
Subject key identifier:   A3:8A:37:F1:DE:C6:36:20:08:42:F0:09:33:F2:FB:73:50:65:89:C3
Authority key identifier: D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3
Certificate issuer:       /CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
Manifest number:          28
Signing time:             Wed 13 Aug 2025 18:15:37 +0000
Manifest this update:     Wed 13 Aug 2025 18:15:37 +0000
Manifest next update:     Thu 28 Aug 2025 18:15:37 +0000
Files and hashes:         1: 1TkKLCMKW2EqKT_v59qPAgwo9NM.crl (hash: J7REPy8vh1JMr0mE342DPSimj8DpO+wR8hvk+fzHxdw=)
                          2: KAkvCm1Si0s6WCgmUX5TVBI3Z-8.roa (hash: KHep59T5CVdF5TU0IYl97FEIx0T9mytxg55/06uDWGc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5390A2C230A5B612A293FEFE7DA8F020C28F4D3
        Validity
            Not Before: Aug  7 06:05:41 2025 GMT
            Not After : Aug  7 05:59:43 2026 GMT
        Subject: CN=A38A37F1DEC636200842F00933F2FB73506589C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0c:24:9d:d1:14:a1:71:c3:b9:b4:5b:97:7f:
                    11:0d:fe:4a:64:8a:38:d9:bc:a5:f6:ca:c2:00:6a:
                    8e:7d:3a:e4:3d:7a:df:76:af:c3:8b:ec:b3:01:a3:
                    29:a9:40:11:cf:a0:25:83:16:c0:1c:b7:2f:73:28:
                    42:67:8c:08:c6:53:7f:32:35:dd:2f:37:fe:08:23:
                    82:d0:e2:1e:af:6b:8d:51:c6:37:a4:a1:60:b5:e8:
                    c4:a2:de:bf:3c:87:4e:bd:b5:42:f5:e3:84:ce:3a:
                    4c:02:6a:35:c7:46:71:83:cb:0e:cc:06:b2:47:db:
                    af:29:07:9f:50:e7:94:23:01:d5:13:7f:b5:5b:da:
                    8c:6a:57:83:16:d1:66:bf:69:3b:a8:8e:b8:4a:15:
                    30:26:30:65:b1:d2:7e:e0:f4:37:5d:2a:7c:99:cd:
                    15:70:d7:83:cd:e5:fc:59:3b:95:63:30:bb:40:41:
                    40:07:c4:cd:01:ec:35:f9:2e:d8:1d:4b:d4:b1:7a:
                    81:15:46:8c:71:8c:d1:8c:90:48:ec:f2:cf:bf:69:
                    e1:75:d1:d3:14:17:03:6d:48:f8:a2:68:85:fb:64:
                    5a:c4:5a:e3:5c:76:2f:06:e3:d0:b4:5d:0c:c4:83:
                    01:2c:12:42:06:4e:a9:7b:90:8c:bc:6f:2c:52:bf:
                    8d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8A:37:F1:DE:C6:36:20:08:42:F0:09:33:F2:FB:73:50:65:89:C3
            X509v3 Authority Key Identifier:
                keyid:D5:39:0A:2C:23:0A:5B:61:2A:29:3F:EF:E7:DA:8F:02:0C:28:F4:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1TkKLCMKW2EqKT_v59qPAgwo9NM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5736/1TkKLCMKW2EqKT_v59qPAgwo9NM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a0:ad:5a:d0:71:fd:20:ff:9e:b6:2b:02:fd:b8:02:b0:f4:
         57:5d:93:7c:c9:c1:b7:9c:d2:5a:ad:cd:3f:74:2b:d0:58:94:
         c8:18:85:18:0d:f9:07:91:07:54:24:4d:6d:d5:63:b0:36:83:
         b8:b0:c5:4a:fa:e7:f4:25:71:9d:1e:12:80:23:ea:c8:e7:5d:
         3c:96:88:98:51:73:5a:8d:68:10:97:f4:54:29:57:96:3f:26:
         35:37:d2:3a:95:d8:f5:26:5d:1b:3a:c9:f3:a8:1a:c4:88:2c:
         80:e1:2e:b8:3f:68:fb:60:62:31:2a:0c:99:84:c2:e6:49:43:
         11:94:3e:b6:a7:7b:ab:e2:98:df:d9:f9:61:e4:f5:7a:bc:77:
         4e:8b:0d:48:53:34:67:81:d3:ca:fc:6c:38:af:25:c4:2e:16:
         4a:34:ea:18:45:0a:8d:93:fa:bf:b9:5a:d5:9a:cd:54:b1:5a:
         50:c4:78:4e:87:4b:03:cc:91:a4:4a:0c:ee:bb:e6:fb:ff:43:
         05:69:04:47:42:d8:df:43:32:c3:e0:2f:92:0f:df:b6:87:a1:
         e8:cf:05:1a:1b:84:d0:22:18:51:97:0a:82:2d:69:b2:0c:a7:
         20:bd:fc:46:0c:a2:06:e9:4b:fd:fb:fb:ce:eb:b7:f1:8b:33:
         94:2f:33:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 22:08:47 2025 by rpki-client