Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
File:                     0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json)
Hash identifier:          bLu3P/boKC3+wY9T0LUo2hrkqgZKiW1LoEmeSF9YMVg=
Subject key identifier:   2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
Manifest number:          070F
Signing time:             Mon 21 Jul 2025 11:56:13 +0000
Manifest this update:     Mon 21 Jul 2025 11:56:13 +0000
Manifest next update:     Tue 05 Aug 2025 11:56:13 +0000
Files and hashes:         1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: SQM2amm9uquU++v7vTMNUkYI1XJwAS3+gbnONjXdR/c=)
                          2: MyckJyek9ji7eE6xv1jl26s-o8Y.roa (hash: DupaFcN1Jnb/CThzl3B54BAXvTZdDf9U0QE9+9haZEE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 12:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: Jul 15 01:40:12 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5:
                    29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd:
                    2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3:
                    f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3:
                    ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67:
                    99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30:
                    f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df:
                    ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a:
                    4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6:
                    13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e:
                    c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70:
                    82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2:
                    6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3:
                    99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c:
                    94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7:
                    a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc:
                    d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:0d:52:c9:e8:d8:19:7c:06:32:9a:1f:b3:78:ca:9c:ac:86:
         83:d6:d8:ff:4a:13:c9:29:a4:1b:99:10:9c:43:8d:20:9d:70:
         71:37:93:a0:2c:64:ab:66:6d:a1:20:af:cd:fe:0b:d4:99:96:
         93:8b:95:75:78:e5:fb:e8:c7:10:ec:97:cf:5e:ae:f4:48:83:
         d9:b3:3a:6b:c4:33:7e:fe:f4:48:db:76:eb:29:db:81:af:bd:
         32:4a:4f:a5:76:b9:1a:16:ab:a9:d8:a2:8f:a4:4f:8f:86:71:
         ab:a7:48:bf:a3:11:7d:a2:60:24:5b:69:73:f1:34:56:25:ff:
         d1:30:8b:96:03:7c:ad:bc:08:08:96:33:1d:fd:0e:8c:ef:71:
         98:eb:11:c5:d5:96:9d:83:f6:a8:ed:64:37:06:54:78:19:e7:
         10:a1:d0:19:52:98:74:a7:0f:be:37:d8:ba:3c:b3:ed:e1:db:
         9d:bc:93:6e:3e:37:8a:81:af:d5:e9:70:27:f1:b6:c7:8c:35:
         83:e4:37:7c:7c:3b:b9:a5:e5:51:cf:76:9f:de:fb:da:68:dc:
         37:fc:02:ec:9b:28:cf:f8:53:03:0f:8b:9e:66:7c:dc:28:99:
         fe:64:0f:6c:60:40:62:a3:7d:58:2c:67:b7:d2:bf:44:e2:06:
         3b:63:58:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:46:15 2025 by rpki-client