Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
File:                     4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json)
Hash identifier:          HFu8jnsJQC4QzygOWA3VV2ZK9s0CYjhpS9hbWxzt3cY=
Subject key identifier:   51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
Manifest number:          0D30
Signing time:             Tue 22 Jul 2025 19:38:51 +0000
Manifest this update:     Tue 22 Jul 2025 19:38:51 +0000
Manifest next update:     Wed 06 Aug 2025 19:38:51 +0000
Files and hashes:         1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: qRjLqjFMEOUZKJ+2WkADQORjGMtki0XFn8yc1aeY6ys=)
                          2: dxr5UWXfhgYCs9g2WsrVKEZJACI.roa (hash: Xue1ueDJ8hT3OdTCJKtOaTgxXmUHlH8Nwl1PI7fvLXA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 19:10:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Jul 15 01:39:10 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7:
                    1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8:
                    8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84:
                    5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1:
                    db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d:
                    29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06:
                    d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03:
                    38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36:
                    81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2:
                    8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1:
                    c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14:
                    ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9:
                    57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18:
                    ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12:
                    73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d:
                    d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5:
                    fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:dd:11:3f:41:9b:1d:be:08:17:d6:f7:d1:48:98:08:13:cb:
         73:66:7b:f9:5e:de:5b:46:e2:83:b3:74:12:72:80:fd:94:cc:
         30:4d:70:a2:a3:c6:01:85:9f:aa:14:d9:20:f0:16:18:7a:78:
         9a:dd:d8:4d:9c:e3:ce:2e:76:14:af:a4:36:13:a6:d1:46:9a:
         84:0c:c3:6e:53:51:74:bb:56:cf:d3:fb:1f:21:ea:de:07:ee:
         dc:4f:06:a0:dd:93:6e:2b:ad:87:5e:67:43:a1:5e:10:cb:41:
         cb:67:09:2b:2b:a3:22:47:2a:72:9b:07:e2:10:af:a4:a4:eb:
         e1:55:45:b7:f8:5e:58:a1:f5:3a:78:ac:1a:6d:83:da:2a:12:
         b1:a1:90:99:9c:0e:bf:99:b9:7b:72:f5:6f:ae:6c:47:3a:75:
         a4:43:5a:11:80:2f:e6:dc:b9:23:43:47:ab:10:89:e5:bc:f4:
         1e:95:e7:2b:e5:ae:d4:6a:42:46:ec:98:24:9c:43:57:a0:7d:
         9b:25:d9:88:e0:c3:e7:6e:f5:5b:75:53:3c:d6:ad:be:1d:ae:
         e1:09:e0:45:3d:4e:b1:b0:00:96:22:c2:86:19:df:e4:a9:5f:
         8e:a2:ca:e4:76:22:d2:02:eb:00:3b:15:a9:c2:1c:3a:7a:cc:
         a4:05:a6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 20:42:08 2025 by rpki-client