Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
File:                     piJKoaybMP-6N30uvrl5ocN-0gI.mft (raw, json)
Hash identifier:          GZy/dMTTPY0jZfCcCgxzFexfhbwLSvrcervlcjTzjBg=
Subject key identifier:   6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
Authority key identifier: A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02
Certificate issuer:       /CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
Manifest number:          0305
Signing time:             Fri 25 Jul 2025 13:56:35 +0000
Manifest this update:     Fri 25 Jul 2025 13:56:35 +0000
Manifest next update:     Sat 09 Aug 2025 13:56:35 +0000
Files and hashes:         1: E7wiPInEht-zu-gG_gy_Z9sDius.roa (hash: bh0mazX8O8HzyFGyAfuLAkAaIyxr79ZBjlP4kagXbYE=)
                          2: piJKoaybMP-6N30uvrl5ocN-0gI.crl (hash: 3ynFIiqOlQhyaw/nWM+1qdJnyn17GP3kz2QwxKwiVy8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 14:48:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6224AA1AC9B30FFBA377D2EBEB979A1C37ED202
        Validity
            Not Before: Jul 15 01:43:28 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=6AD98EBBEF0D0366E1134D5010C37168DBA0EC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:11:91:b3:d8:d1:dc:2e:fc:1c:58:ae:12:
                    01:58:b6:17:88:68:3b:1f:29:42:12:66:9f:cf:ff:
                    21:44:9a:84:bf:89:6b:62:6b:ed:f3:4c:d2:93:79:
                    fc:2b:12:73:9e:d1:b2:23:ec:87:bb:b5:27:7b:d7:
                    79:de:f8:51:f3:e5:3a:f3:e1:56:07:5e:9f:35:c7:
                    88:64:95:96:fe:a9:3f:05:13:6b:a4:5e:54:d6:53:
                    49:5c:30:94:a9:3c:fe:eb:a2:d8:d4:34:6a:7a:fc:
                    54:6b:68:c4:65:bc:9d:b6:af:1d:71:b0:76:36:98:
                    42:f0:00:d9:34:75:33:b0:e2:3c:ad:55:ec:eb:5e:
                    3f:d0:ca:a5:76:76:19:8a:bd:4b:53:b1:3b:c2:47:
                    a5:cc:01:75:e2:fe:71:10:72:36:b3:51:58:78:69:
                    54:0a:b0:0d:cf:46:f3:65:a7:3d:93:51:40:7e:23:
                    e8:15:59:fa:5c:07:cd:d2:ce:03:e7:76:35:01:1f:
                    f2:95:75:ac:02:14:af:86:f9:d8:76:f2:10:2b:59:
                    17:6e:71:8a:b1:cb:25:94:df:54:b1:64:85:67:38:
                    eb:3a:b2:4f:c1:a4:17:16:73:4b:f2:dc:a6:d2:24:
                    fe:ec:a7:5e:2a:b5:f1:24:41:96:21:03:3b:83:6a:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D9:8E:BB:EF:0D:03:66:E1:13:4D:50:10:C3:71:68:DB:A0:EC:92
            X509v3 Authority Key Identifier:
                keyid:A6:22:4A:A1:AC:9B:30:FF:BA:37:7D:2E:BE:B9:79:A1:C3:7E:D2:02

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/piJKoaybMP-6N30uvrl5ocN-0gI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30300/piJKoaybMP-6N30uvrl5ocN-0gI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:6c:9b:16:16:b3:38:f4:c3:72:b3:ce:7a:57:a6:a0:ca:
         86:7b:8b:d9:5d:b8:c5:f6:83:ed:a8:cd:72:67:fe:e5:a7:47:
         52:4a:7c:ff:bb:05:d4:ee:7f:68:dd:bc:13:6f:e6:6f:53:77:
         4f:97:c0:d7:7c:01:48:c1:af:fe:e7:95:23:e2:ee:ca:c3:74:
         99:c7:48:40:61:95:37:1f:bc:de:dd:01:f2:3b:ab:7c:81:21:
         e1:54:af:7f:14:ca:c2:ce:d3:0f:be:d1:df:3d:e5:a8:9c:3e:
         2d:28:7b:b9:ae:94:8a:01:82:b2:8f:22:f3:3e:05:46:d8:f0:
         cc:58:56:18:6b:55:84:06:91:69:0f:41:52:69:2b:a2:46:36:
         9f:43:e5:f6:1d:f1:2e:6f:56:fa:10:a3:0b:42:7c:95:af:1c:
         9b:f4:28:cc:94:59:d0:ec:ae:b9:ea:9b:7c:a6:39:81:a6:cc:
         41:b7:50:59:10:b1:50:93:9f:fc:1e:c8:fa:ad:16:9d:de:32:
         0f:30:17:88:90:b0:8b:76:4f:35:3e:0d:fc:d8:06:45:69:c6:
         08:6e:db:5e:32:49:77:77:73:bb:01:61:8a:23:51:8d:d7:33:
         f8:e0:f6:b1:5c:3f:45:09:41:5e:6d:8c:49:21:55:6f:9a:7e:
         14:7c:1b:36
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjIy
NEFBMUFDOUIzMEZGQkEzNzdEMkVCRUI5NzlBMUMzN0VEMjAyMB4XDTI1MDcxNTAx
NDMyOFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoNkFEOThFQkJFRjBEMDM2
NkUxMTM0RDUwMTBDMzcxNjhEQkEwRUM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMMxEZGz2NHcLvwcWK4SAVi2F4hoOx8pQhJmn8//IUSahL+Ja2Jr
7fNM0pN5/CsSc57RsiPsh7u1J3vXed74UfPlOvPhVgdenzXHiGSVlv6pPwUTa6Re
VNZTSVwwlKk8/uui2NQ0anr8VGtoxGW8nbavHXGwdjaYQvAA2TR1M7DiPK1V7Ote
P9DKpXZ2GYq9S1OxO8JHpcwBdeL+cRByNrNRWHhpVAqwDc9G82WnPZNRQH4j6BVZ
+lwHzdLOA+d2NQEf8pV1rAIUr4b52HbyECtZF25xirHLJZTfVLFkhWc46zqyT8Gk
FxZzS/LcptIk/uynXiq18SRBliEDO4NqOhMCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBRq2Y677w0DZuETTVAQw3Fo26DskjAfBgNVHSMEGDAWgBSmIkqhrJsw/7o3fS6+
uXmhw37SAjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDAvcGlKS29heWJNUC02TjMwdXZybDVvY04tMGdJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcGlKS29heWJNUC02TjMwdXZybDVv
Y04tMGdJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzAwL3BpSktvYXliTVAtNk4zMHV2cmw1b2NOLTBnSS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBgyGybFhazOPTDcrPOelemoMqGe4vZXbjF9oPtqM1yZ/7lp0dSSnz/
uwXU7n9o3bwTb+ZvU3dPl8DXfAFIwa/+55Uj4u7Kw3SZx0hAYZU3H7ze3QHyO6t8
gSHhVK9/FMrCztMPvtHfPeWonD4tKHu5rpSKAYKyjyLzPgVG2PDMWFYYa1WEBpFp
D0FSaSuiRjafQ+X2HfEub1b6EKMLQnyVrxyb9CjMlFnQ7K656pt8pjmBpsxBt1BZ
ELFQk5/8Hsj6rRad3jIPMBeIkLCLdk81Pg382AZFacYIbtteMkl3d3O7AWGKI1GN
1zP44PaxXD9FCUFebYxJIVVvmn4UfBs2
-----END CERTIFICATE-----
Generated at Fri Jul 25 17:26:15 2025 by rpki-client