Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
File:                     qggJfGBgcQKAzaqk5-BsHxPNFvI.mft (raw, json)
Hash identifier:          5jsAEpI9qQC/P2sfdMVLQKkQiDfrABiq6sgtgzMqbSA=
Subject key identifier:   DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
Manifest number:          07AF
Signing time:             Mon 11 Aug 2025 07:19:37 +0000
Manifest this update:     Mon 11 Aug 2025 07:19:37 +0000
Manifest next update:     Tue 26 Aug 2025 07:19:37 +0000
Files and hashes:         1: A2HbR0tifjK7EU0pCY-NJriQPHE.roa (hash: +OH53Uwh6adch0mud2QP58gAk+D1/9afXq0r9C5mPe0=)
                          2: FDIlRlsWFXV1vFG2giIE3uNmFL0.roa (hash: 27MxGboS4AjnaNKsIEUM/w5nqoERZ9Yz8Bgkc1wU6Wk=)
                          3: IUyLfhIPkw20z59XzKhIivWbXso.roa (hash: Iq5SYxQQBdehoAHdmMS0IumJxieG5jehySaNykurtJA=)
                          4: IrIm8x34XDiUiIc2dn1xdeYcpUk.roa (hash: gNMdZ5CyHaRpGx0yaJzupPuK/dRdc0hY2Gl1EaGsQ7o=)
                          5: JZRHJVOa8hEw3bPEbJUeTkRrGSY.roa (hash: s4dDzYW1h8Irm+ZjUSlt3YrM9ewFA/yZNLYFD4L2U6w=)
                          6: O45fiU6mXWbF8t3r8rlFEcj7B7E.roa (hash: hDZYRA9HFTSzbwx72yOKGlBAH2vbuSm2m8OIs0zIIb0=)
                          7: RK0teWnCxdWbtsDne53Vm_ITcK4.roa (hash: Aptk0zjUb7LltNEtWKz+SqxCmZiMQ9Svyz9Zcg/HM5A=)
                          8: UvfL-IJxbsXVcixKMjcvqROekHI.roa (hash: MGUK7A7OdRfkY2yoIZA5TQ9bl3fK+1t7xUNvrkm8mRU=)
                          9: iY8wxWWqnLBTx1z3zHgGnt65Mng.roa (hash: KVI/kF1AcO+x/OMCrIV8TxyM//6qQt7UHkqr9zybipE=)
                          10: lnrKeqsKIyOTGivbgELUYqOJNy0.roa (hash: p+cw/5btMqGORlUVu+D5rpYoTWjbia2QSzMpdq0tu+A=)
                          11: qggJfGBgcQKAzaqk5-BsHxPNFvI.crl (hash: 3u3xX/K7qqwQuvwlpBQe88my2v+dN+4VagpZpNa8lQM=)
                          12: yjXljVumuFpn88V8J2PDjSR0DzM.roa (hash: +5CfFKVcgKIqXZSm6uNlLlrwPHJZGWL1QX51JCLPUmA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Jul 30 06:39:16 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=DD9C42D45F6CD31072F318A68C97E879874FD70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:88:4f:de:4c:f8:cd:cb:b0:ef:1c:d3:99:
                    d2:2a:98:49:fc:ab:51:74:68:32:52:fa:50:e8:20:
                    e5:fb:bd:dd:ba:8b:90:2e:b6:e1:bb:9c:7f:11:15:
                    97:82:5b:87:53:6a:04:68:d0:55:03:c3:43:b3:f5:
                    ec:62:c8:65:ec:c5:65:cc:f0:9b:36:b9:2d:8b:ef:
                    8e:5d:0e:d0:19:a3:35:a7:fe:29:72:06:9a:64:a6:
                    86:63:e2:fd:e5:6d:49:f4:8f:6a:43:ad:e6:52:07:
                    c4:5f:8a:2e:ba:a5:af:81:a4:c8:5c:a3:0e:0e:d3:
                    5f:45:c2:83:46:89:89:0a:0d:da:e2:9e:c9:df:e3:
                    ec:25:ab:c9:48:56:2e:79:ef:31:f2:24:48:51:0c:
                    e9:13:de:58:b2:77:8f:fa:7d:32:dd:7d:a4:ef:60:
                    89:16:a9:19:44:f9:7c:ee:fd:08:be:e9:9a:57:52:
                    17:74:ef:73:23:1a:a3:b9:ff:9f:8c:d8:7c:73:f6:
                    5d:8d:b4:c3:b8:9c:ab:73:a0:b0:fa:0c:24:b8:ed:
                    33:e7:b4:4d:32:85:73:09:23:53:75:56:6e:9e:5f:
                    91:ea:2f:48:f6:9b:c6:c4:22:68:58:d1:31:4f:88:
                    90:87:1d:0c:15:86:9a:8d:52:f8:e2:74:30:b2:0c:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:45:ae:b4:6e:2a:19:58:bc:81:36:79:87:45:ad:e3:04:8f:
         76:22:62:0b:5a:b5:23:b2:fb:b3:bd:f3:26:3b:8f:31:49:18:
         79:ce:0a:19:5d:f5:de:34:17:f7:72:9b:e6:17:ab:db:6e:92:
         3f:7c:6f:8e:6d:36:31:cb:95:ec:60:5a:4e:cc:98:a5:e0:f1:
         44:53:f8:1d:cb:1e:4c:ab:89:91:d4:a0:19:b2:22:ca:51:87:
         4b:65:9c:31:fd:7f:9b:ca:9a:72:fe:97:50:6e:3c:77:af:b0:
         58:ab:7d:84:ea:58:f2:a7:7c:54:96:40:47:0d:a8:8f:9a:bb:
         e8:d1:10:16:ad:ea:6b:82:b3:4d:2b:58:92:51:cd:e0:df:ed:
         eb:6f:b1:2b:66:24:13:fd:ff:a3:9f:24:3e:4e:b7:28:5f:cc:
         bd:83:e7:fd:32:2d:f9:db:15:6b:d2:07:aa:f4:80:de:cc:b0:
         14:ca:3e:02:38:c5:12:f8:c5:b9:b9:9a:77:39:35:cf:df:43:
         6e:8e:6a:dd:bd:d8:fc:ad:63:f0:ca:43:0c:65:d5:46:98:2f:
         43:af:18:f9:2b:b3:85:76:48:4e:64:ec:d1:61:c4:8c:d3:ea:
         9b:a6:ba:d1:52:79:a1:04:2c:51:28:15:e3:77:df:13:ac:6e:
         10:0a:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:39:12 2025 by rpki-client