Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
File:                     FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft (raw, json)
Hash identifier:          1YtRW06AAlW80i6HSE2uCYY+AuTzvD4S29RYNiJr8HU=
Subject key identifier:   36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       62
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
Manifest number:          0ACD
Signing time:             Tue 22 Jul 2025 07:53:34 +0000
Manifest this update:     Tue 22 Jul 2025 07:53:34 +0000
Manifest next update:     Wed 06 Aug 2025 07:53:34 +0000
Files and hashes:         1: -Tm2eH07T15fThwWbWoAIMl2Hu8.roa (hash: IBwz1Qj/Aik2ymWu9GTUMZ+fdFrjOBQQqj1MWnAmqP0=)
                          2: 2tC81IRbokj814kJb6Z3e6hKKe8.roa (hash: +IdbIj0/wYv569jh3AUe7prAb/KQf9chxyc/jeH8r4M=)
                          3: 4g8gxWGk_Q1ckoP0MhvCnLThPCo.roa (hash: O5RgLGKUuyWnmyN4EXmLCYKi6/iT72o7SA6kZs4pKOM=)
                          4: 724XlhQfR2JWLPc-FU_70h77SRA.roa (hash: WgzqiM9EU/Dg7+Bc2Ke6PM33swzdt0JtOlibyzp6ueo=)
                          5: FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl (hash: m3oCpnB1O0HgvLy76wqJ9yGUx8hCA1bQV0UKvlo2it4=)
                          6: Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa (hash: x7lDtD2d742A+6rlrVTsT22y7MlHEnvvApODlMh6LrY=)
                          7: ULvjJlav04JZjWNvjDGKLErly3E.roa (hash: 0g9YqjXLfRplNEDWbycZDM8b1RoYRxoLtt5cWDOvodc=)
                          8: UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa (hash: 5eXayhtOk7VxZrMrgyp3ffNQG40LsAj2gq7UAXSZzT0=)
                          9: bxJBv8k2VP6NtPi0uL7bYEOlniI.roa (hash: d3MygnIVm3XrL/N6iQarvDuMpXAs5k50/UhR/arseak=)
                          10: ctkF571l4DKJqil-PsdPHdGDzeg.roa (hash: /RH8tJOC+ZyLaGE6OnAot1ajIEJG9h8OCH3YVRcjdmk=)
                          11: fxnmp8Tl3RX7bwn7Cq7rVDlGvw0.roa (hash: /Chvj0JSClgLoh6GomdVp/trXwDNviwULuD/WeWcQFk=)
                          12: g5yoq2sLHTv0Jhm2N6VqNU_-nRM.roa (hash: JUdJIY/M2X7OaEc4I162SaM+lhtblktli6aNkqbdPl8=)
                          13: jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa (hash: V6iMKe498tEpk1US8kZSHOyzE6oBTaO1P+La8J2BZi8=)
                          14: lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa (hash: CHLQzh5yNzBwwHryhF74708zBgk2osGRgTULI6lMHKo=)
                          15: rro_sKOWKjjK9w21SVKKovz4ZBQ.roa (hash: ezHleX2pD7fXjGwq6cpzr4uXAy0hdfdKPJG29Xr1Cxo=)
                          16: vf_VAkjaRKw-FvQayyywgGy2OnI.roa (hash: tVBoYFInXHsKvHJOPmwFcfDcnevo8m4qdXOxiNVry7Y=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 09:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Jul 15 01:38:49 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=361ED56BE231E62A63B2E44F5B0C2BD586140B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:13:f4:6d:c4:94:a9:0b:69:29:8e:de:43:
                    4e:fe:b5:c0:ac:a8:e2:48:24:9b:4d:a4:4f:87:17:
                    97:de:13:ec:1d:cf:21:6c:62:8e:4e:b2:2f:6a:30:
                    3d:f6:e6:d9:5f:d1:4d:de:70:02:d7:9f:c9:1f:59:
                    4c:bd:b4:e7:ff:1f:2e:03:c4:f7:7f:7e:4b:31:80:
                    7f:be:a7:6a:b9:22:a6:39:ae:53:8e:93:a9:f7:0c:
                    06:0b:88:7b:87:41:e5:a2:5f:28:25:cb:25:f8:58:
                    86:aa:e5:ea:23:0d:62:7a:d3:9d:2d:33:09:7b:38:
                    87:9c:bd:1f:28:4a:a6:71:33:7f:54:6f:3d:89:66:
                    43:11:ab:57:73:98:0d:ee:0e:4b:b9:8c:47:d5:c7:
                    a1:7d:d9:4f:e3:a9:9e:cd:0b:4d:3e:2b:7b:84:2b:
                    7f:73:65:35:97:3f:c9:76:d0:45:92:ed:61:d6:db:
                    dc:2f:1a:33:ea:3b:ac:32:b7:e9:0b:b2:d6:56:69:
                    f8:b6:d4:04:69:0e:ac:29:61:57:90:fe:48:36:cb:
                    5d:4b:10:86:2d:82:8c:5b:f8:95:3f:ce:bb:5e:59:
                    14:81:6a:6d:20:70:46:6f:ba:0f:7d:8f:d7:7b:72:
                    d7:f0:6f:ba:78:49:95:28:4f:10:5d:d4:d8:b9:8c:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c1:32:a1:0c:bb:db:de:3d:d3:ad:c5:5b:3f:9b:72:4a:fc:
         db:09:6b:1f:cc:21:76:e7:6a:0d:d5:0a:f5:99:24:f4:90:8a:
         90:1c:e2:dd:02:e9:02:f1:d0:1f:0e:80:fa:7e:15:ec:30:45:
         6c:e5:b7:c5:b1:5b:36:e2:97:6f:22:4e:0a:c6:ae:3d:89:36:
         1f:a2:25:73:df:bc:bb:1d:b4:2f:16:8a:f2:10:3e:99:bd:ac:
         00:ee:7d:46:9e:31:33:30:58:71:db:1a:25:95:f1:5d:3f:e8:
         d8:38:1c:27:05:8c:9c:f9:a8:46:b5:0f:68:0b:d9:ee:68:60:
         91:44:bc:d6:fd:ac:cd:ec:5c:0a:4e:f3:ff:a1:dd:47:60:32:
         ad:01:41:40:16:bc:7c:5f:65:bc:f2:54:97:99:de:8c:25:8c:
         f8:63:42:7f:4f:af:5a:59:ac:06:1b:81:68:74:d3:39:77:f1:
         cb:6b:bb:28:14:c9:4a:c0:21:94:e7:79:0a:f6:9f:a3:28:a6:
         7a:19:ed:e6:52:8c:13:e0:17:8d:b5:19:90:ea:4c:f2:97:c3:
         1e:e5:6d:91:32:e1:6f:95:2c:6e:37:9f:1c:be:d8:bf:4d:91:
         44:bf:3e:68:80:e8:24:af:91:0d:d6:a9:ef:27:8a:e0:f6:ef:
         5d:e3:6d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 12:51:03 2025 by rpki-client