Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
File:                     XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft (raw, json)
Hash identifier:          qq598ffY3UN6yF434b2hM5MEqNV3CThrl8nZW0+j5i8=
Subject key identifier:   78:60:03:43:99:4F:DD:AF:0B:0C:6C:45:71:F9:7F:2E:C8:B1:3F:E4
Authority key identifier: 5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41
Certificate issuer:       /CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
Certificate serial:       1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
Manifest number:          0802
Signing time:             Wed 08 Oct 2025 15:39:55 +0000
Manifest this update:     Wed 08 Oct 2025 15:39:55 +0000
Manifest next update:     Thu 23 Oct 2025 15:39:55 +0000
Files and hashes:         1: 5JZEu_hg2SV1OYM68eLc5h2r3J4.roa (hash: SusOf0wIPYLRLFQK16/F7WHuSLI1pZEEfiAL9oHgtok=)
                          2: XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl (hash: TrSt0mWrQJ2mh40Yvf1ti/KHmFoUFyStAcQ8oogmdsU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C94D460126D3E224B1DBD6646FAE9243A60EC41
        Validity
            Not Before: Sep 15 01:36:45 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=78600343994FDDAF0B0C6C4571F97F2EC8B13FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:38:54:be:1c:7c:41:ed:e8:3f:2c:45:d9:
                    cc:3a:00:3c:50:ce:66:93:52:74:8c:b3:35:6d:7a:
                    09:e3:42:94:03:9a:58:9b:9b:32:d9:20:1b:e5:40:
                    22:13:3a:ec:49:44:06:7f:b1:59:f4:bc:ca:0e:fa:
                    c2:83:a9:2f:ae:33:56:3d:6d:8e:06:7e:17:0c:ed:
                    6a:0d:15:52:ce:ad:89:0f:b1:65:15:d8:06:6d:c6:
                    4a:8e:e8:23:02:a6:c0:55:06:7a:ae:b2:00:c4:68:
                    8e:fe:1e:1a:5d:8d:0d:eb:58:38:4d:0c:71:be:79:
                    2c:2b:ea:b0:2e:7e:fa:4e:e7:47:a1:09:ba:cf:d0:
                    78:b0:fc:76:c2:19:eb:04:a6:32:6f:78:64:0e:c7:
                    7c:10:13:cd:15:de:fa:2b:9d:60:e3:6b:a3:9b:e7:
                    9f:08:69:e9:7a:2e:93:b0:2e:96:a9:dd:43:81:37:
                    14:4c:32:b4:fe:84:07:9a:b3:f4:e7:88:ff:61:3b:
                    ab:91:48:10:c7:b3:5c:41:c5:e5:f1:e6:db:4e:72:
                    c2:57:a0:d3:8c:a3:7e:d8:78:58:e2:dd:fe:8d:2f:
                    32:08:67:2a:8c:75:10:5b:96:cd:58:4e:8c:34:6c:
                    49:13:fd:b7:48:91:9c:21:01:e0:e7:e0:66:8b:8c:
                    79:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:60:03:43:99:4F:DD:AF:0B:0C:6C:45:71:F9:7F:2E:C8:B1:3F:E4
            X509v3 Authority Key Identifier:
                keyid:5C:94:D4:60:12:6D:3E:22:4B:1D:BD:66:46:FA:E9:24:3A:60:EC:41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XJTUYBJtPiJLHb1mRvrpJDpg7EE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30419/XJTUYBJtPiJLHb1mRvrpJDpg7EE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:67:dd:23:f5:3c:c6:66:87:f6:bd:ff:14:7d:ae:4a:aa:54:
         e4:9d:a9:99:7b:c1:9a:2f:f0:a1:fe:a3:5a:04:22:ee:a6:65:
         35:ba:1a:63:41:33:0b:c4:d7:4d:34:8e:0d:a4:b5:66:88:60:
         e9:ce:55:e2:bd:43:2a:94:5a:12:86:30:a2:f7:a4:fe:96:20:
         e0:95:f6:ca:42:63:64:ba:2a:2f:73:1a:ce:da:05:f2:d1:a4:
         e3:87:bc:96:a6:f9:4f:50:2c:cf:fb:02:bd:22:a1:65:d3:2b:
         d5:7a:dd:a7:ff:a1:01:7a:14:66:8c:8b:44:c2:1a:24:4c:11:
         f3:fe:01:1e:97:11:8a:65:f8:b0:b4:fd:2f:78:80:a6:ec:ae:
         d2:cd:72:ad:49:16:a7:83:50:fd:25:3a:f3:59:7c:58:87:70:
         47:dc:35:5a:38:81:9d:54:bc:54:88:e1:48:e7:1d:ab:5a:c7:
         55:21:69:9c:a4:f5:1b:73:88:1d:c1:07:a4:bb:b6:ae:0b:bc:
         39:36:63:37:43:2a:9b:c4:5c:e4:f9:4e:a0:f7:fa:c5:a8:52:
         bc:e2:5b:69:74:a3:77:3d:8e:e8:68:af:8d:d4:ac:4d:d9:32:
         d2:b9:0c:3e:4e:65:c0:0c:f4:a8:43:42:ae:35:9f:ee:20:7b:
         81:9c:ab:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:17 2025 by rpki-client