Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
File:                     5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft (raw, json)
Hash identifier:          1EYz8pkOe+ynt6S667q0g9y6kG/k97CJUIK9tBFwPNU=
Subject key identifier:   00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
Authority key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
Certificate issuer:       /CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Certificate serial:       1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
Manifest number:          058D
Signing time:             Mon 23 Jun 2025 07:20:40 +0000
Manifest this update:     Mon 23 Jun 2025 07:20:40 +0000
Manifest next update:     Tue 08 Jul 2025 07:20:40 +0000
Files and hashes:         1: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl (hash: MwgWr3Opf4PRMZ7FyQ5ahRRALyx2oG8eXZ1h6ONzRCw=)
                          2: GMGXClmRK69ssW1jL41ioZ66ly8.roa (hash: BVVU8bEQWe+xSUyemjUgQ94JI4mtxUF63WySv6Rdy/E=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Jun 2025 06:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
        Validity
            Not Before: Jun 15 01:36:04 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=00E74B3F7EC4135FF9161F7622E988E7DD761F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:29:8c:37:d1:91:b3:d3:f5:0f:ab:ac:e8:
                    9f:b6:2d:36:f5:12:6e:68:4f:ba:b4:7c:47:85:31:
                    a4:5c:5d:21:a1:c6:8b:19:cb:0c:f6:21:93:49:76:
                    db:cf:b1:7b:be:ef:18:3a:72:e3:bf:fa:22:f7:37:
                    43:e7:1a:af:ff:18:b0:18:52:15:52:a5:04:28:c8:
                    01:80:02:75:b6:05:89:34:19:96:c9:ec:89:73:d8:
                    d0:04:e2:81:2c:c0:9c:98:c9:e4:46:65:47:3e:7e:
                    a2:70:7d:68:09:e5:aa:75:ab:d3:65:fc:f2:c4:20:
                    0d:f9:13:a9:ba:c3:b7:43:91:1c:5b:e4:6c:5f:1a:
                    12:bd:1b:b1:2a:94:fa:bb:1d:b0:b5:4c:75:d2:98:
                    eb:38:25:39:93:03:ba:f0:9f:92:f5:3b:e9:da:92:
                    c1:13:68:b0:17:e3:4a:62:e2:ee:e0:f6:74:fc:d6:
                    7d:62:fb:00:db:e3:a0:16:31:eb:45:c4:9c:c3:af:
                    31:66:23:46:2e:59:b5:6e:70:a8:c8:36:75:f5:45:
                    6c:79:a9:af:10:86:e8:fe:4a:9c:fd:9a:73:73:45:
                    36:1d:87:6a:bd:84:5c:a3:bc:0a:6e:6c:bd:59:3c:
                    29:94:b5:c3:0b:65:17:a2:fd:22:8c:cb:bb:2c:41:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
            X509v3 Authority Key Identifier:
                keyid:E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7e:1f:da:c0:2f:b9:e6:ac:30:cb:45:7d:48:11:58:e6:c7:
         16:97:1f:9d:7b:1d:6f:b8:f0:1c:6a:7c:f7:c8:04:3a:2c:a5:
         c8:0c:36:e8:10:33:86:a9:3f:e6:72:dc:d6:4b:bb:b5:5a:b7:
         f3:ad:c7:ef:45:82:97:32:ca:06:a7:21:de:e8:2a:06:38:45:
         40:fc:59:2b:95:f7:8e:a5:3a:46:d8:7b:3c:02:3b:28:a5:fa:
         33:33:b8:61:81:6e:28:38:43:c9:e2:63:ac:a2:03:83:8b:ad:
         67:23:ae:e7:d4:3f:16:6a:20:0e:96:b5:ea:dd:31:35:ca:37:
         f7:4b:f2:d0:bd:88:77:f7:f3:18:05:72:ff:b9:91:16:9b:a8:
         b8:22:b7:2d:1d:e9:47:a4:d1:54:80:57:ec:bb:68:1a:26:52:
         27:50:fc:af:64:54:8e:6d:9b:b1:7e:46:1a:d8:3b:36:13:a1:
         89:2d:8d:a9:61:71:72:7b:56:6b:55:27:e7:1c:9f:02:64:8e:
         47:50:c5:b3:d1:db:4f:eb:93:71:82:e0:8c:47:61:d0:a7:ac:
         7a:03:3b:29:4d:fc:f1:3a:6d:2d:4f:25:f8:02:43:bf:db:70:
         be:8b:ca:12:33:69:f8:bc:aa:18:7c:d6:88:1a:e1:bc:b0:80:
         4b:af:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 10:51:45 2025 by rpki-client