Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
File:                     NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json)
Hash identifier:          FWp/CKTrGMEAoA/vCMO4ZDdqi6694Dl32IIrfRlJIkY=
Subject key identifier:   65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       2C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
Manifest number:          066F
Signing time:             Mon 21 Jul 2025 08:25:09 +0000
Manifest this update:     Mon 21 Jul 2025 08:25:09 +0000
Manifest next update:     Tue 05 Aug 2025 08:25:09 +0000
Files and hashes:         1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: boqm4rZ91hlJ0kEjJR8hWykF07o91S8x8XCGNfUDsv8=)
                          2: ZbP_Zfa2mwHq82S6XSeyWX_NCCE.roa (hash: ThE65gZNrtvB6ORxoBbpvsXbWhOf17z9TZN9IB4gOGU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 11:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: Jul 15 01:41:15 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc:
                    b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9:
                    d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70:
                    98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c:
                    89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81:
                    45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe:
                    5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89:
                    74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87:
                    0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd:
                    eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18:
                    31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a:
                    1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1:
                    d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c:
                    bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f:
                    27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6:
                    26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c:
                    62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:13:7f:08:84:0a:6d:16:74:51:67:5c:2e:92:7e:c7:75:17:
         66:82:a5:55:07:f4:d3:99:aa:38:2b:6b:80:a2:4c:db:b7:5c:
         e6:bc:a5:ec:df:fa:c3:ba:f1:8a:91:a7:b3:5d:62:40:97:36:
         e3:aa:b7:3c:1e:8e:ee:bc:be:43:29:c5:fc:1c:93:d2:58:9e:
         75:af:54:b4:d9:d4:ce:28:fe:e3:eb:80:f3:cf:fd:b3:bc:93:
         09:de:24:d1:9a:f5:a1:41:3b:a1:92:a3:77:0a:13:69:45:4a:
         86:d5:9b:d8:ea:67:68:40:3e:68:7c:ad:2a:b4:a4:02:d5:d9:
         3c:8c:ea:7b:84:f7:b3:4d:cd:a5:21:bc:9b:e3:ee:bb:7f:ff:
         a4:6a:0b:88:da:f3:ef:bc:e7:e8:86:53:9d:9f:d7:33:0c:c6:
         9f:3f:ef:94:ce:58:92:84:86:41:5f:4b:78:a6:68:ad:09:13:
         bc:64:89:5f:1f:65:1c:32:2d:c9:cc:48:5b:04:35:c7:35:67:
         54:79:3d:1c:0d:9c:ef:80:c5:fc:08:92:bb:60:df:42:e8:a7:
         c4:e2:2e:66:49:e6:aa:2b:2a:61:1c:59:c4:01:e5:35:ce:96:
         fd:39:1a:cf:1e:8a:cf:22:e0:c5:44:ba:83:93:dd:a3:58:0a:
         12:d6:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 13:27:29 2025 by rpki-client