Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
File:                     7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json)
Hash identifier:          7iAlt/k1teeaRLXZvwX2sexe2u81MpXkU1qABFKxJq4=
Subject key identifier:   A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
Manifest number:          0670
Signing time:             Mon 21 Jul 2025 11:42:27 +0000
Manifest this update:     Mon 21 Jul 2025 11:42:27 +0000
Manifest next update:     Tue 05 Aug 2025 11:42:27 +0000
Files and hashes:         1: -PNhwY-CTFXNbkCw5hJCg2ul2vY.roa (hash: UlEsdIoEBg/ozDa6A5PrkMwysa3z6Udu3mvwhAghppM=)
                          2: 0-lo3vDW5MFUxpJ61I9Fn9oL790.roa (hash: c4cQFL1RLjPuB3yrsUTE6nO13Wpu9CleUZrgO/EtNmo=)
                          3: 1SJbYUd8p8oMen6RPa00IOWV9mE.roa (hash: UDpcHQ+0Abc5mWmR8ULJBoE8aKN+3NO2e+ukT6tgxHE=)
                          4: 2tfCUV_uz9A4cuYQPukBhWSb95s.roa (hash: rLb9OLvnUAWM0boRqUkiI5TRFDZgMEpErnM1W8cSidY=)
                          5: 7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa (hash: 3LyiamrnzDGpP8Svs8FK2CISDqoO7UiQPpQOYaoqlPA=)
                          6: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: lT5gDxB2oi1TPZNDYwBljIPGxrp18hHbiuAPgofOPms=)
                          7: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=)
                          8: HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (hash: 3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=)
                          9: JZs_gJSmFUdRrEPINLNMDeQ5mfg.roa (hash: qPAfdnse695pbwQEURXXN8DSAMJizwjYaZsxcXgu79U=)
                          10: PlXujQnIvaBVcgfdZUzMCXjJkDo.roa (hash: aCxl5jvQ7JXLWmmFHmSbXTq8loJZ9FyWSuvvPH4W5oM=)
                          11: aAiPFOXOtgBnt9tATwCsOIScD2Y.roa (hash: 2otb2/fXwO3ZDqK7Ed2Qum2SCLHUMKjtXEfj64hwARQ=)
                          12: hHFuTlwo7DH4aE2NTwWoalMa1Gs.roa (hash: P5cSelIHfRErRfSAuqmJayW7X02Wo8RLt7hbsLvmeKs=)
                          13: x6pG1mwUhjl1eXAI4SzzBTtrKYE.roa (hash: xmXXGF3m6vOT9UuakmjGH1Irfq6dmU5Vkvj3cV5HVnc=)
                          14: xQ6bWu0BKuQdAIJZG2MMHBdF130.roa (hash: /WO6GXJacN59MeJ391bnvIF+h3itO5C1k1hfLLl8ke0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 12:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Jul 15 01:41:46 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e:
                    85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf:
                    b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7:
                    45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9:
                    fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff:
                    f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed:
                    fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89:
                    af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe:
                    13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f:
                    56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac:
                    80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef:
                    2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22:
                    eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85:
                    a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3:
                    c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9:
                    38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d:
                    f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7c:41:ef:64:09:4e:78:44:0f:86:b2:90:4a:f8:dd:23:c6:
         35:eb:3c:27:2b:f4:77:19:bd:60:54:d5:63:e8:e0:44:db:5e:
         6d:18:c6:d7:2c:24:cc:1f:b1:16:e5:c9:16:6a:2f:a9:4d:ff:
         57:3a:6c:b5:6b:a8:d3:84:75:5a:d0:d8:78:3b:1d:0f:87:e7:
         a5:d4:0e:4d:fe:f9:c9:50:d3:52:90:7e:11:e8:06:9e:86:ba:
         34:87:28:c3:a7:82:2f:b5:de:3d:65:2b:6f:1e:ad:00:0a:4e:
         97:83:53:89:6f:a9:7d:37:31:ca:95:3c:84:d9:9f:9b:e2:69:
         58:08:3c:cd:4a:6f:14:0c:e4:27:bc:82:66:cf:1f:f2:8f:be:
         a6:5b:45:d6:86:df:b5:89:39:0a:b1:33:be:cc:b1:a5:2f:02:
         b2:23:04:aa:b8:4a:8e:76:ba:62:db:f3:34:3b:bb:44:ba:11:
         56:a1:2b:d5:fb:ac:fd:ee:34:6e:0f:d7:a7:bc:cd:04:1a:d3:
         80:6b:19:ed:9b:82:4c:54:1a:c5:96:e9:d3:fd:7d:c9:ac:49:
         91:34:7a:d8:75:4a:ae:47:77:0a:b3:12:1e:15:8e:83:0f:51:
         a2:f3:63:a9:82:f6:97:ab:31:8f:b7:31:a3:f4:75:0c:de:ae:
         59:14:2b:18
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI1MDcxNTAx
NDE0NloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoQTE1NzJFNjA1OUFBNTkw
NjBFODFBNzk1ODUwREEyRjAwN0MxM0FBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK4pO/SM1wQlR+0NRGU+hVRImg63TDxaLjt7Laq/uCQBFn57dfqa
Nm1eR4TXRaLiYBQgGiwLp3cDCLO5/DIDJiMu3ePo7fnP8J//8n3Q6Fe6vAMF1Hyv
wTLt+7LPAfE5WKuqbd9NVnmJr3o3RLR8eB4wZnXTznP+Ey+wOg/iKKoU+JdmeMwv
VolrWPgVJMfxL98RN6OsgEgduKRN+//MJzQfxLLvLOVjtO0wXqwLijjJyKwi67JD
pBh9pc+WN+SzV1SFo5jnBKQTaXSLJClL+inzwB+YbAeWzJDUNRSq8vHZOAfTH05X
shpGyK0+roiN+TaIhRyrxg49f/b074dPOK0CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBShVy5gWapZBg6Bp5WFDaLwB8E6pDAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MjQvN2hPc3ozNTNzQ2txNFhzRk5BSVJ5UGx4ZGdzLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACl8Qe9kCU54RA+GspBK+N0jxjXrPCcr9HcZvWBU1WPo4ETbXm0YxtcsJMwf
sRblyRZqL6lN/1c6bLVrqNOEdVrQ2Hg7HQ+H56XUDk3++clQ01KQfhHoBp6GujSH
KMOngi+13j1lK28erQAKTpeDU4lvqX03McqVPITZn5viaVgIPM1KbxQM5Ce8gmbP
H/KPvqZbRdaG37WJOQqxM77MsaUvArIjBKq4So52umLb8zQ7u0S6EVahK9X7rP3u
NG4P16e8zQQa04BrGe2bgkxUGsWW6dP9fcmsSZE0eth1Sq5HdwqzEh4VjoMPUaLz
Y6mC9perMY+3MaP0dQzerlkUKxg=
-----END CERTIFICATE-----
Generated at Mon Jul 21 13:29:23 2025 by rpki-client