Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
File:                     5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft (raw, json)
Hash identifier:          twKuXT+BBkfNiej7+ToG5RgCZqe8scLGElez5MhlDMw=
Subject key identifier:   00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
Authority key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
Certificate issuer:       /CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Certificate serial:       1E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
Manifest number:          0637
Signing time:             Tue 22 Jul 2025 00:09:56 +0000
Manifest this update:     Tue 22 Jul 2025 00:09:56 +0000
Manifest next update:     Wed 06 Aug 2025 00:09:56 +0000
Files and hashes:         1: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl (hash: fjXpH2C4CWser/luEIDoMVBT0O1CPbzk3HQgIC3BngY=)
                          2: GMGXClmRK69ssW1jL41ioZ66ly8.roa (hash: BVVU8bEQWe+xSUyemjUgQ94JI4mtxUF63WySv6Rdy/E=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Jul 2025 01:10:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
        Validity
            Not Before: Jul 15 01:37:05 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=00E74B3F7EC4135FF9161F7622E988E7DD761F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:29:8c:37:d1:91:b3:d3:f5:0f:ab:ac:e8:
                    9f:b6:2d:36:f5:12:6e:68:4f:ba:b4:7c:47:85:31:
                    a4:5c:5d:21:a1:c6:8b:19:cb:0c:f6:21:93:49:76:
                    db:cf:b1:7b:be:ef:18:3a:72:e3:bf:fa:22:f7:37:
                    43:e7:1a:af:ff:18:b0:18:52:15:52:a5:04:28:c8:
                    01:80:02:75:b6:05:89:34:19:96:c9:ec:89:73:d8:
                    d0:04:e2:81:2c:c0:9c:98:c9:e4:46:65:47:3e:7e:
                    a2:70:7d:68:09:e5:aa:75:ab:d3:65:fc:f2:c4:20:
                    0d:f9:13:a9:ba:c3:b7:43:91:1c:5b:e4:6c:5f:1a:
                    12:bd:1b:b1:2a:94:fa:bb:1d:b0:b5:4c:75:d2:98:
                    eb:38:25:39:93:03:ba:f0:9f:92:f5:3b:e9:da:92:
                    c1:13:68:b0:17:e3:4a:62:e2:ee:e0:f6:74:fc:d6:
                    7d:62:fb:00:db:e3:a0:16:31:eb:45:c4:9c:c3:af:
                    31:66:23:46:2e:59:b5:6e:70:a8:c8:36:75:f5:45:
                    6c:79:a9:af:10:86:e8:fe:4a:9c:fd:9a:73:73:45:
                    36:1d:87:6a:bd:84:5c:a3:bc:0a:6e:6c:bd:59:3c:
                    29:94:b5:c3:0b:65:17:a2:fd:22:8c:cb:bb:2c:41:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
            X509v3 Authority Key Identifier:
                keyid:E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:61:6a:28:6b:47:ec:78:01:a4:87:20:28:7d:86:e1:c0:cf:
         97:58:29:04:bd:15:9c:82:8f:58:22:00:d5:23:05:a2:25:41:
         e3:08:4d:2d:6a:bc:6f:83:d3:f1:f9:7c:65:b9:97:47:43:36:
         32:89:72:de:20:cf:59:c6:34:c5:b4:e3:88:79:20:1a:eb:ad:
         c0:4b:b0:0f:c0:bb:b8:24:a5:94:fa:0c:e8:76:f5:7b:a9:8c:
         53:30:2c:3e:26:6e:9e:2a:69:a6:ee:dc:68:b2:70:20:83:02:
         ad:5e:f4:08:8e:bd:9d:3e:7e:d1:fb:52:fc:93:38:4a:57:4d:
         83:1a:e8:b6:ff:80:1d:db:6d:c6:c2:4a:57:ec:18:33:c3:b8:
         2f:fd:44:c1:95:b0:76:59:24:5f:e4:81:b4:18:89:bc:e8:16:
         7d:18:5e:fb:e6:0a:2d:dc:5f:23:60:3d:ea:fd:9f:08:a8:01:
         bf:99:19:1e:20:b4:3e:28:84:37:b5:6e:dd:38:3c:6a:eb:91:
         ea:78:df:ce:27:39:b7:7b:fa:61:b0:f2:0b:76:b4:bf:b8:39:
         ff:11:6f:97:42:17:26:9b:03:ca:bb:f7:5a:5d:3a:00:7f:3f:
         dd:f8:c0:75:75:61:f0:75:f6:85:09:28:71:7e:a7:ae:08:08:
         92:52:bf:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 02:37:26 2025 by rpki-client