Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
File:                     kaykQnXsBXK8aSFQKyQcFNRKmqE.mft (raw, json)
Hash identifier:          4tudxRAEBdHx7lBT9MkrsIggPlvANibjboEJC76/95I=
Subject key identifier:   F3:DF:8B:FA:A8:1D:49:6D:D5:CE:EA:74:9F:35:4E:A6:BD:F4:E2:48
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
Manifest number:          0A8A
Signing time:             Mon 11 Aug 2025 08:34:56 +0000
Manifest this update:     Mon 11 Aug 2025 08:34:56 +0000
Manifest next update:     Tue 26 Aug 2025 08:34:56 +0000
Files and hashes:         1: 2-EkZjEi3i8c37lBeFuu1PWdVD0.roa (hash: 3f453nhalmEDhf8JYid2g/oi1p3j6+qnbje7NEbaIkY=)
                          2: 32UhHM1VRvzI7-zy8SyLqgSyrIQ.roa (hash: HoRNVbZ3XrrAy9z1Wzrd8xTKEIGshon24119qW3d+nM=)
                          3: 6TjpPH0mjsx85XRkLxbgPKav7nU.roa (hash: 8SManJWsl4BJ4v85mpdveP73JWatOLtWNYQoqzlaA+E=)
                          4: 7IDOuq1ekfaeusbbbUhyEp_Ocv4.roa (hash: PoWU+RvFlkdhjgxWEftf6F9MA/AspUgQTdLqFcwb9Ds=)
                          5: A3K_9Br11-5LJJUshf-zWCh0QTA.roa (hash: JybwjWw55zeJJ9cIOFQ1W1t+DiG1BSvlaaiBZViLfMg=)
                          6: HThTrM-OshlfMJKG8ce5iQc6_EY.roa (hash: haobxgyha2qsMngHFnY1MmwtQpEEHt1TII5RQqftDj0=)
                          7: LOHQFI8LajI-vAI5r3OX8mgcp84.roa (hash: EM/cO8HsTA/KouBC7ShGxK329TEdDeFAUMY9LU+pVgY=)
                          8: MakVcSCEkhvZbOko1mVlZergt28.roa (hash: 3uKvu+daJUrYC6uZIzcGIcwF9m/wvYCTiTmSXgsHnn0=)
                          9: Mw_bgBkSYQHoGGMSZHbhkCpGgDU.roa (hash: zFGjxr4k2ZR6qXkTAnXpZ+4sp3XofO5goqYgUHKNKC0=)
                          10: QQ8rbCc8LymZuqgpcIn13iGyY50.roa (hash: xRmQnBt3eC9ky8XlpU8pWu94V615KmN4C8/ElybwKyo=)
                          11: WVSwumDTrNWujFjSNNtFiSfG7nA.roa (hash: JRSnwMV3KOqMq1ERaeWemoxI7bE3idIxYcwgs/hN3Ok=)
                          12: ZtCdtaLAbK0Yu6CkPOLtf8kV3Vc.roa (hash: gyHLf7zDdM44vrDyKIUqjcZStkbZECJjB243Wk+vCuc=)
                          13: bN4smDOPbCKwvJXr8LDRV9GyqgE.roa (hash: CaJ1Qt9rFgBjVD0r++k3nCYunHCx1TT+Z8KcSDHC9UM=)
                          14: jEk1WYH5tgrvihy7WBisDdFF-FY.roa (hash: N599OQjbA1mo75s6VAEWYnhHF2eTV+KrS4KzB/vhghY=)
                          15: kaykQnXsBXK8aSFQKyQcFNRKmqE.crl (hash: LdcRcav2+TITMAD4lSGI2rhxQkPuLDXvB3POCp/4n70=)
                          16: kue_m323lBAJEfPSCR95BAziN_s.roa (hash: 4EuL5YYSSIAxFsGJO/5QU9Bbs/s3lb+uaSPcnI0MhqA=)
                          17: lof-KaZZZAFtPncj0lSE4fUkIAE.roa (hash: 0ittgjk0jExufrZy9VsQUfmpa9OpV6EDGTABDcFTU/U=)
                          18: mhoLMc2Xrb5ELbyW2mXsYQPtmjk.roa (hash: TbHef7aE90gYMHw8WZmZDGZADoKCg1KAofXjSKfPlf8=)
                          19: qn33yC4MdMQz26GNTbkrlbsJJiU.roa (hash: fOm0tjGKeUjHvipxM+EIdBdWFLNQqHvvcwMdw/dYhe8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Jul 30 06:38:21 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=F3DF8BFAA81D496DD5CEEA749F354EA6BDF4E248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:2d:a0:6a:cd:db:74:87:e6:8b:d4:46:7c:
                    5f:dd:2e:8a:62:c8:bb:db:3c:31:e8:14:e4:38:3f:
                    a2:63:da:f9:a2:f7:90:56:03:c2:2b:73:cd:d2:14:
                    58:6a:e5:0c:4a:4a:53:be:a8:a7:39:3b:1c:9e:c8:
                    ab:da:eb:c1:42:93:76:8e:0a:11:2e:80:f4:03:7f:
                    e5:91:ca:9f:0b:23:d6:a9:f4:9a:cc:b7:a6:bc:49:
                    87:3e:ce:32:fb:16:41:ed:01:21:40:39:b4:28:59:
                    8d:00:f0:f6:09:4e:39:26:86:03:48:d1:2d:39:f0:
                    15:69:a4:38:33:21:dd:ef:1b:39:8e:33:dd:df:7e:
                    05:08:2f:05:24:8c:12:df:39:b3:68:b1:f1:38:e5:
                    60:7e:7e:fc:c3:55:e7:d2:a1:4e:a2:f4:f4:86:9e:
                    1d:74:02:2c:bb:89:bd:73:5e:a0:1b:79:cf:07:e9:
                    62:a1:c4:52:0b:18:b8:b2:42:94:68:cd:44:ed:d3:
                    13:67:a2:58:f8:b0:2f:fd:ae:c3:c4:a2:1d:23:12:
                    b4:15:24:c1:e0:1a:5c:80:75:16:c9:ca:9f:4d:e6:
                    89:8f:ee:d2:1d:b5:83:68:ba:b6:4a:77:a4:f8:d7:
                    9f:de:d2:7b:9b:f8:7b:40:f6:30:74:88:be:39:6b:
                    80:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:8B:FA:A8:1D:49:6D:D5:CE:EA:74:9F:35:4E:A6:BD:F4:E2:48
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:62:15:19:c7:5e:f7:0f:c9:72:3d:94:f0:a7:16:a0:fc:
         9e:5d:73:7c:f3:60:65:bb:df:88:2d:be:90:b9:17:22:3f:09:
         20:39:36:b6:27:43:1f:33:e1:60:c6:51:55:0b:e7:18:21:ec:
         0b:97:58:7c:5a:66:4b:52:b3:8f:e7:ac:2b:71:c1:00:8b:6c:
         e0:5a:25:fa:f3:06:1b:7b:38:1c:00:32:9f:28:07:75:0d:93:
         2c:23:90:76:e9:91:9c:e3:80:db:03:b9:2c:d7:68:f5:f1:c0:
         2f:db:7d:9c:b4:85:82:fd:cf:3a:9a:3b:b7:e9:5c:8d:5f:db:
         74:cc:be:c3:81:ee:fc:67:4d:3f:7a:98:16:b5:f4:e1:30:f8:
         f7:2b:cd:93:99:7b:ee:79:7a:58:f7:c5:d1:6d:c8:9e:4f:9c:
         97:2f:73:b1:dc:f8:87:f3:52:ba:57:ae:94:b8:5c:63:1d:32:
         22:1e:a6:a3:8a:62:4b:7b:1b:88:a4:6f:5b:cb:a4:a4:15:04:
         7c:ca:10:6e:7b:06:e2:d0:44:d2:18:d7:50:a0:1b:05:e9:ba:
         e8:ad:27:87:99:84:f6:d2:b1:e0:be:bd:2f:e8:ee:04:19:e6:
         44:15:15:0c:59:97:68:dc:b7:3d:95:38:08:8d:29:ff:6d:bf:
         9b:c0:67:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:39:07 2025 by rpki-client