Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
File:                     Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft (raw, json)
Hash identifier:          fTSaVc62WqmPszZ5trYJ8W47hUyLdOQrwqF5nPgNVEQ=
Subject key identifier:   CA:2A:07:8B:12:18:42:7D:B0:03:29:23:99:17:63:FF:9F:B9:CD:C5
Authority key identifier: 26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Certificate issuer:       /CN=26F775BAC748E9582AC68A36AF57544FD74D8525
Certificate serial:       22
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
Manifest number:          063D
Signing time:             Mon 21 Jul 2025 04:00:00 +0000
Manifest this update:     Mon 21 Jul 2025 04:00:00 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:00 +0000
Files and hashes:         1: Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl (hash: X50liQS6cdxl11KPv83wXFTf5DwOQ+ZYdgH0K0I5bOY=)
                          2: KsUr_8nqLWXuAsrqJbNJ6vgCjoI.roa (hash: Lnc3peuIjEjA6jz4kWE6eAfV4TWvoXKWvh+tgNl3Z9w=)
                          3: gAXCPWZiO-ySIbAVc8W-BgtAWsA.roa (hash: 7M6uGVELVQTJRgtcsqLNDzI//CARlbMp0yLfBWlYI8w=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 05:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Validity
            Not Before: Jul 15 01:33:39 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=CA2A078B1218427DB0032923991763FF9FB9CDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e9:57:a4:df:29:4c:0b:24:bd:6b:5e:2b:b0:
                    95:ea:11:4c:dc:62:27:bd:8c:2c:ff:66:b9:5a:d4:
                    21:0e:13:4c:97:98:74:ef:21:f0:d7:35:ce:1f:16:
                    52:d1:37:6a:75:92:9c:49:3e:c4:88:bd:86:84:37:
                    86:1b:dd:c2:45:31:4d:41:b9:82:73:9f:d9:da:f9:
                    ba:85:14:42:0e:1d:4d:e1:eb:e2:76:3e:42:39:50:
                    ce:53:a7:9d:15:f2:66:22:4f:27:98:41:1a:19:e4:
                    ca:08:b1:24:65:96:3b:f7:e9:ce:f0:43:07:e2:11:
                    93:9b:b5:a5:2f:0c:13:c6:0d:ce:4f:42:5a:cd:91:
                    d2:61:59:9c:a5:4d:42:87:98:25:31:ed:85:b6:c5:
                    d6:15:8e:73:5b:29:3b:5e:e7:06:15:2d:a0:c2:f3:
                    42:0c:65:aa:8c:a5:e4:09:ba:2b:37:69:81:cb:7e:
                    7f:03:bb:6a:bf:45:03:62:c8:8b:60:f9:20:c7:a2:
                    9e:c8:48:77:ad:a9:7b:38:8b:20:d0:96:fb:7b:6f:
                    1d:2c:2f:89:81:b7:88:d2:3b:72:0c:d1:7f:6a:cf:
                    2f:c7:60:1b:40:66:c8:62:d0:9c:c6:7f:25:6b:98:
                    49:3d:46:e6:cd:5b:eb:60:8b:55:4d:be:2e:d2:fb:
                    d5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:07:8B:12:18:42:7D:B0:03:29:23:99:17:63:FF:9F:B9:CD:C5
            X509v3 Authority Key Identifier:
                keyid:26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:51:0d:93:f8:53:ca:39:26:3a:21:75:05:a2:5d:b6:bc:ef:
         dc:f7:e4:2a:12:fc:ec:f9:a3:7d:12:c9:93:3a:3a:3c:99:d9:
         1c:40:ff:29:2a:92:07:a4:b4:f2:35:8d:60:ec:dc:d5:52:54:
         30:63:a0:af:5d:35:f4:e1:a4:2d:c3:ff:c6:3c:18:79:eb:a0:
         ef:a3:92:79:83:b8:c0:d5:6f:e5:0b:b4:3e:40:51:a1:a3:19:
         a6:5a:ab:00:ea:9b:a9:17:72:7e:16:6f:6e:88:ce:a1:55:ca:
         95:a6:84:ce:04:03:cd:67:70:8c:11:4f:7a:15:90:69:e2:d8:
         f8:76:9e:c3:17:92:51:95:5b:1d:b4:c1:bc:33:59:c4:90:65:
         92:4f:4c:af:0b:c3:53:f8:0f:7a:03:e6:9a:04:f0:3a:be:c0:
         3b:64:19:00:b5:86:f4:ec:a5:b4:e7:1b:25:28:7a:e2:3f:82:
         22:8a:b9:86:c5:47:d4:5c:99:17:f1:dc:65:66:4e:a0:6a:db:
         11:cf:40:c4:16:2e:55:2a:fd:70:3c:ca:31:50:78:a4:35:37:
         7b:82:cb:2a:29:8a:b6:f8:b1:ae:28:13:c1:46:32:94:32:b5:
         7a:b4:b9:00:8a:52:18:91:ed:8d:94:ac:3b:f0:25:39:1c:df:
         12:a0:61:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:17:30 2025 by rpki-client