Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
File:                     rUdB8DSfvBWnCOKKLOMHkGysXeA.mft (raw, json)
Hash identifier:          mNOmTSVO1mVXhx25g4H1Eq1Jh6YwrI8E4FSde/3E1bM=
Subject key identifier:   34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
Manifest number:          0687
Signing time:             Wed 23 Jul 2025 04:21:51 +0000
Manifest this update:     Wed 23 Jul 2025 04:21:51 +0000
Manifest next update:     Thu 07 Aug 2025 04:21:51 +0000
Files and hashes:         1: -gS5n_OqadenVUc6YCKezO9bN0o.roa (hash: hGRwID3PJTVVc2MBpqtF8s940/B8Na0OBaNmX+P4oIA=)
                          2: 3jMwD1jqyYhHKtAFpuDkfJcIRc4.roa (hash: OD4NIu2qFuWo5/wAK8bQt6g6neTaeBhVR03Z9TGkDLk=)
                          3: 40k9HGu3ZZ2mvxUlKFC29Tc-4Dg.roa (hash: hBgWQSeBqaJ5uCYGcKo10Dn6zJBVh4prqHzT4GawwX4=)
                          4: 4mgLOFRQtsSkzDeyVVuZJlJBfGs.roa (hash: mXCVGD2lWW7KNZhNlxQtPmzsxHCx1wouCs/3w1liIJs=)
                          5: 9HhNndi5jTQ0bAO1t02O8-GvQSo.roa (hash: stTzslRfemgBc1ouLDtz1OnBysVbMBIL9kA5JkyXjvQ=)
                          6: FhdONHqlz1Ga0s8Uo9sk9cuaWz4.roa (hash: KYeCitQuMej+hUPsWxoFltZgh8s4lnJpALL6xQPb4IU=)
                          7: Frs4lTeC6J63_l2cjfGzZ0QpmS8.roa (hash: BCM0nQY2wDWVu8RU+LODuFNiunxPNbphZtRsD39RUxA=)
                          8: Gfl0t7N2mDuYfjbcq-_IlbyQ4dk.roa (hash: rXx9oM+nLfArS7FJ0YCHxlQJ65o+phLftz1ecvVY+y0=)
                          9: MY4iqpnsu_TefNaSg9FsT0Uxo8c.roa (hash: tVa5uYi6nYgaB4w//dWUNKqzEslhrxoP3rl97OFJMD8=)
                          10: P1SpxiPNPqlHpRguVcRg8ThY5us.roa (hash: eSqzJ47Ani2vJOfsqNRrvr0Y+pi83jNEedcG9xbIX2Y=)
                          11: RkYm9eFzLcWDwWxqV-pL1dO9SUw.roa (hash: pco1nvWOLf/3pHvQGeX4/fx7RMaUQki0Qc0G1xQ+HtI=)
                          12: SE_DBdPFV18Fyxe7YImPIVi35vM.roa (hash: 2thRFJOPOy2Y2OuZU47Q5IHnRzwQLQ8yi6VyLW1/a1s=)
                          13: Taj8sDzxitgd41gzD6WJbLJe-4g.roa (hash: QFNiJQRFDBuKwWzq8iwehudekQXUb77F8CmsX5+0n8g=)
                          14: cC1ejUlEz8P9EpecqlGIkyU-P50.roa (hash: qTLY5QXZjbjxwVqYsKZu5I685L6w99FaBv1U7z5lYWM=)
                          15: nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa (hash: IpSd49Zb/DkneMD3+fLGaMDLvRJU6gGByNvNvmvbaLE=)
                          16: qrhMn8YcSE7STVvLw-m4R9HD4Ac.roa (hash: 31FyKHYQ2nwtZRVBGgmoB9VCZ+D1+5OakjQorDLhXEc=)
                          17: rUdB8DSfvBWnCOKKLOMHkGysXeA.crl (hash: Mc4RFhD3can2WoOgzMV/OwPCJQNWmtQ88BfogMy91WQ=)
                          18: tLoxAoOTFYRqaHnfyHN8EGS_vxg.roa (hash: M67O/C/6UZb+ymeIzcBHufu+/OHq0XoXPuvXtBWKWDE=)
                          19: tca1mxR8IIfo00O3xbX8viCLyo0.roa (hash: bDVIXFn+no/InyNrJGb+/MA6/cUUq9KEhdnMJn+IqUY=)
                          20: x7SKEDy4ffQpG0dclfFmkZF0fXQ.roa (hash: SNxyx6TbEPm/Ewurp7FK6R0wWXFbckfjy9iPh2NCXk0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 05:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Jul 15 01:41:03 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=34B5FD0C2C7BE812B69D0B55F71081FA7DC44DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:8f:f3:8c:63:be:ff:53:17:98:39:6c:37:
                    c8:0b:65:f7:b3:52:21:ef:d1:45:fa:0e:70:d3:33:
                    42:cd:bd:2c:9a:e6:02:54:82:4f:3c:f2:ec:0b:c3:
                    79:b0:a1:89:e4:6d:97:00:85:20:65:d6:bf:01:f5:
                    69:ef:9f:f0:e6:b7:7c:b8:ea:e1:ee:01:f2:87:0c:
                    66:f7:af:f1:6c:fd:f3:54:0f:68:47:35:fa:8f:65:
                    5f:31:69:1a:e7:53:6e:80:a5:68:d7:78:3f:ef:4f:
                    08:47:b7:94:37:d1:48:88:ef:14:b8:c3:b6:f2:39:
                    b0:b5:5d:a7:43:7e:8a:84:83:32:20:ba:02:58:1f:
                    22:0b:48:a1:d5:26:d5:a7:73:9a:53:98:5d:f7:50:
                    20:ac:4a:de:bd:48:66:ce:37:42:3b:2f:80:bf:44:
                    a6:af:9c:6a:2d:97:0c:6a:6e:84:e7:70:1b:55:57:
                    bf:eb:76:a7:06:fa:ac:54:e5:42:0b:4a:1e:81:0b:
                    f6:32:99:be:f4:38:be:07:61:11:1e:1c:6d:8e:61:
                    47:c3:f6:e1:f5:16:9b:ff:a3:3c:e1:47:18:68:93:
                    a6:fd:d2:11:84:24:c3:bb:6c:b7:71:63:dc:c5:34:
                    be:31:90:24:99:85:26:cd:87:d6:f3:fb:a6:18:e7:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0d:29:f2:d3:80:ba:a9:10:40:23:f5:33:c5:37:b5:7a:f7:
         62:52:59:31:68:ab:f0:e0:bd:99:6d:69:31:b2:cb:7c:9d:5c:
         8f:d9:14:c5:0c:62:cc:2c:15:90:e4:ab:b4:08:bf:ef:e1:69:
         ba:33:ce:c3:b5:bf:d2:dc:c1:5e:21:92:02:4c:23:a3:fb:2b:
         1d:08:25:c2:82:66:75:12:0b:9f:26:73:e2:ed:54:45:3b:84:
         24:85:0c:f4:bb:5d:1b:20:3a:47:2c:10:77:8e:03:01:99:f5:
         3e:33:e6:a4:03:00:be:65:08:49:33:85:68:84:31:e2:19:ce:
         e6:17:de:f2:09:f5:bd:df:3f:77:13:41:c6:e2:fc:61:86:32:
         40:04:ed:75:94:e0:dd:3c:8c:80:3a:0a:ab:cd:84:7e:2c:25:
         d7:ea:a2:35:66:64:db:ba:df:14:e3:fe:55:d1:9e:97:cf:a1:
         0f:c3:a6:82:be:7b:f1:92:4b:68:93:49:58:bf:00:e2:25:8c:
         c8:e3:53:ed:e4:f3:34:a4:db:e9:a0:39:ad:e5:dd:b8:95:2d:
         f7:88:49:b7:23:39:84:75:5c:fd:39:05:d7:26:c4:81:09:8e:
         c1:c1:dd:46:29:55:dc:9d:cb:1a:5e:6e:58:37:38:f4:48:44:
         32:54:12:c7
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MDcxNTAx
NDEwM1oXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoMzRCNUZEMEMyQzdCRTgx
MkI2OUQwQjU1RjcxMDgxRkE3REM0NERGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALS1j/OMY77/UxeYOWw3yAtl97NSIe/RRfoOcNMzQs29LJrmAlSC
Tzzy7AvDebChieRtlwCFIGXWvwH1ae+f8Oa3fLjq4e4B8ocMZvev8Wz981QPaEc1
+o9lXzFpGudTboClaNd4P+9PCEe3lDfRSIjvFLjDtvI5sLVdp0N+ioSDMiC6Algf
IgtIodUm1adzmlOYXfdQIKxK3r1IZs43QjsvgL9Epq+cai2XDGpuhOdwG1VXv+t2
pwb6rFTlQgtKHoEL9jKZvvQ4vgdhER4cbY5hR8P24fUWm/+jPOFHGGiTpv3SEYQk
w7tst3Fj3MU0vjGQJJmFJs2H1vP7phjnptcCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ0tf0MLHvoEradC1X3EIH6fcRN9zAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvclVkQjhEU2Z2QlduQ09LS0xPTUhrR3lzWGVBLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAGgNKfLTgLqpEEAj9TPFN7V692JSWTFoq/DgvZltaTGyy3ydXI/ZFMUMYsws
FZDkq7QIv+/habozzsO1v9LcwV4hkgJMI6P7Kx0IJcKCZnUSC58mc+LtVEU7hCSF
DPS7XRsgOkcsEHeOAwGZ9T4z5qQDAL5lCEkzhWiEMeIZzuYX3vIJ9b3fP3cTQcbi
/GGGMkAE7XWU4N08jIA6CqvNhH4sJdfqojVmZNu63xTj/lXRnpfPoQ/DpoK+e/GS
S2iTSVi/AOIljMjjU+3k8zSk2+mgOa3l3biVLfeISbcjOYR1XP05BdcmxIEJjsHB
3UYpVdydyxpeblg3OPRIRDJUEsc=
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:18:01 2025 by rpki-client