Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
File:                     4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json)
Hash identifier:          So8brzBL9JyP0BXN7EYc1Mfl/9RPC3mURuIUwpUcMss=
Subject key identifier:   51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       5F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
Manifest number:          0C1B
Signing time:             Fri 06 Jun 2025 12:08:16 +0000
Manifest this update:     Fri 06 Jun 2025 12:08:16 +0000
Manifest next update:     Sat 21 Jun 2025 12:08:16 +0000
Files and hashes:         1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: U2ZA+WknO/0+gnuOYORwOz+vzYH4YMZCrdGqLpdR/+Q=)
                          2: dxr5UWXfhgYCs9g2WsrVKEZJACI.roa (hash: Xue1ueDJ8hT3OdTCJKtOaTgxXmUHlH8Nwl1PI7fvLXA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: May 23 09:53:42 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7:
                    1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8:
                    8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84:
                    5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1:
                    db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d:
                    29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06:
                    d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03:
                    38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36:
                    81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2:
                    8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1:
                    c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14:
                    ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9:
                    57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18:
                    ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12:
                    73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d:
                    d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5:
                    fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:a8:e7:c5:0a:b1:c2:a4:0c:ef:4f:43:7a:fa:58:dd:20:
         f6:b4:21:13:42:fa:c7:dd:ea:bd:cb:c9:8c:3f:8f:3b:11:8c:
         70:9b:5f:c7:4f:f5:51:41:dc:b1:b3:02:46:d9:7f:8d:47:b6:
         4a:2d:09:35:a8:4b:5b:92:d2:d6:a1:44:51:93:e2:aa:2c:cf:
         f8:72:a2:04:18:e2:f6:98:b7:17:41:06:2b:62:3f:3e:05:5e:
         52:8a:a0:32:6a:b1:7d:99:69:dc:ca:6e:a2:ec:85:aa:23:e1:
         25:01:ba:b4:14:86:94:2d:29:a2:4f:dc:6e:ee:e0:1b:59:43:
         80:88:db:c4:29:c1:05:d1:60:ba:75:ef:f2:f7:b5:f0:6f:0c:
         d9:38:08:96:be:f8:24:8a:e5:7e:a7:2b:18:9d:e3:6f:19:2d:
         63:4a:51:3e:26:a8:17:22:cc:31:c8:51:d1:c7:27:b8:ba:8a:
         09:f9:01:b2:83:6c:61:2f:c2:70:a9:5d:ea:b7:fb:e6:99:be:
         7d:92:9d:86:ad:fd:f9:8f:8b:3a:52:23:86:a8:5b:20:b4:5e:
         83:65:cd:73:7e:48:f6:7f:4d:a1:38:f5:c5:b1:b1:aa:5f:17:
         db:72:46:3b:8c:d5:cc:a0:c7:c9:4d:52:9b:fe:42:37:6b:92:
         a6:c9:b9:1f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw
QjAwNDlGMUEzRDEyM0RDQUNBNUNFQjVCNEU1RTlFQzc5NEQ3MB4XDTI1MDUyMzA5
NTM0MloXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoNTEwQkNBRjZDRjRFMTEy
QjgyREEyNzcxNDgzODRBOUQ2RkQ3MUJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBSYCI1kL24JfMAvhPnH7usiayAsOkazP80n8HIi9hOzJ0/2Z42
9ekQI9GEXhfKMXNwf1PZi+hasO3R2wfHDGyYXDSdjrAtv8VtKRMb+woSbzhrvh6e
Z8gG2ZIXL5o+mTAyAVNGoBYDOA1NP39NQ4FM5N9EFlA2gRk2SllaoE88Xk6pkhey
jGOguEDedo1LBTMUAPixwdSJCSbQqITC1pUnz44Urki1xIgcktVk194h7gL5V8Xi
+4jBlQYbg81uL7UYzrsWpAzwqnomU+9uwk0Sc5H8jXpDtWRx2z9EVYAd18Yvqnox
5AvQHEA4A6bV+oUgZnIgtF6d3vcFc+GLtv8CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBRRC8r2z04RK4LaJ3FIOEqdb9cbpTAfBgNVHSMEGDAWgBTioLAEnxo9Ej3Kylzr
W05enseU1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAyNDcvNHFDd0JKOGFQUkk5eXNwYzYxdE9YcDdIbE5jLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFDd0JKOGFQUkk5eXNwYzYxdE9Y
cDdIbE5jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwMjQ3LzRxQ3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBeW6jnxQqxwqQM709DevpY3SD2tCETQvrH3eq9y8mMP487EYxwm1/H
T/VRQdyxswJG2X+NR7ZKLQk1qEtbktLWoURRk+KqLM/4cqIEGOL2mLcXQQYrYj8+
BV5SiqAyarF9mWncym6i7IWqI+ElAbq0FIaULSmiT9xu7uAbWUOAiNvEKcEF0WC6
de/y97XwbwzZOAiWvvgkiuV+pysYneNvGS1jSlE+JqgXIswxyFHRxye4uooJ+QGy
g2xhL8JwqV3qt/vmmb59kp2Grf35j4s6UiOGqFsgtF6DZc1zfkj2f02hOPXFsbGq
XxfbckY7jNXMoMfJTVKb/kI3a5Kmybkf
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:33:02 2025 by rpki-client