Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
File:                     78FWSaglf2T8lCFn4xCtOK0Czbw.mft (raw, json)
Hash identifier:          t6ZxpJ7dqREap2Ed2bHH+wWl4CW/n4VoVIcS/i7gY5k=
Subject key identifier:   B3:B5:32:B8:6E:E9:80:26:97:CC:91:0B:24:B4:0A:21:1A:54:2E:50
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
Manifest number:          05D1
Signing time:             Mon 02 Jun 2025 11:32:46 +0000
Manifest this update:     Mon 02 Jun 2025 11:32:46 +0000
Manifest next update:     Tue 17 Jun 2025 11:32:46 +0000
Files and hashes:         1: 3XNgk9D8niEZun3P5MDcRa-L9Sg.roa (hash: 0mG9TmAEGhR7CH5TtWCkV1tZrZG17+5UG8gRTkiMgxM=)
                          2: 78FWSaglf2T8lCFn4xCtOK0Czbw.crl (hash: 6wjSwC+2FDL2Q1GZ7xDAAgWnCQY3v3qgmvtNEemubfg=)
                          3: M37slby-n8A6np0ruNzU5MwPoOU.roa (hash: pAqyXnitAh6UxJxUbWcFxDYFRWT0igLdQBMrp025JFU=)
                          4: TuyFxiKsEDyX5GgDtgGG75pHnqg.roa (hash: w681eDhAQ6RgwU34gDsIHOE+sGoGTxTMSHn+xtMojAw=)
                          5: UjDCLBxPadE1KOh0ygTV-OBMmJw.roa (hash: YRT12OX/+K+jqBtp2TM5ikbb7UKbwAzRH0N6mQg/eGQ=)
                          6: aMfgqUWSOLem_rTjo-oDig2GNEU.roa (hash: dcfLgfzfVJM3EPhFOGl+cCPZg1mXUSlz78+zOqPlrYw=)
                          7: atYYF6xa-5XhCb99_svb7ujnR4s.roa (hash: FjScNVbUM7ylJZw2OZLX6RxOL7CbCrX19B8Y6oQxGX4=)
                          8: bo0fDaQoBfxlIjaD9vgJbSA9Aa8.roa (hash: DBO6wgJmqWRjYb0SIm66etjj9xZ6fzF5siWh6ih11qU=)
                          9: f6D2qy6c1M1G3F2cYJqBKFl9O0s.roa (hash: DRPQJR78++xNk40Os1gQevyHq1DKsHQ6iaxCYGNr4RQ=)
                          10: flacSQbCKzhgD7iq2_gsEX8j5Ms.roa (hash: cqr+1jtZQ87Ezm3rPuibCYDK5ucJemaltZvrt2wU/Vs=)
                          11: jDSFh8EiU5N_JFpfZvZnB30Te9A.roa (hash: /IDq3TpyD7UdXMgGh1X+SPjIU8/1so8Ugfo5ElJia/U=)
                          12: k0pBlOeuHG6k7bxJ8YyONF7RRSo.roa (hash: 4XlRWInGiV6PHqviuURQl/zuT8Qo0HNfojPbqcxKiwQ=)
                          13: sVR65t-bPNhidf2hi83lbwtAPA0.roa (hash: MD81EtYZVjeXc7xCVP2/U1JpOGAl1Vm1mSCTi8wJiqg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 23 09:53:53 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=B3B532B86EE9802697CC910B24B40A211A542E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4c:99:98:50:c3:70:4d:0e:95:20:77:2e:30:
                    fd:74:50:dd:47:d6:b2:22:ef:10:3d:c7:02:6c:ec:
                    42:a3:b3:d3:5e:bc:ba:79:5a:21:d5:62:05:5a:69:
                    17:8c:34:d7:6f:c1:1f:2a:28:18:d9:8f:1e:c1:4c:
                    6d:60:45:94:58:f4:7f:fc:3a:31:36:b8:89:22:51:
                    fc:89:1a:e7:90:06:01:12:6e:69:f0:ad:08:a5:3e:
                    8f:aa:33:5a:35:03:4a:00:5e:21:49:28:99:a7:ea:
                    fc:c3:c9:bc:f6:14:f7:ac:29:a6:63:2c:92:25:70:
                    a5:56:91:ba:52:d8:64:07:73:14:03:9a:be:0f:cb:
                    39:af:b1:a5:f6:07:63:b8:16:24:d3:20:8f:e1:6e:
                    7f:ad:94:d4:c0:43:13:40:12:4f:03:ac:60:de:32:
                    e9:e0:47:dc:38:da:1a:51:3b:af:9c:09:27:46:9f:
                    b8:c4:6e:03:e9:66:4c:77:04:e4:16:a0:8f:e7:54:
                    d2:86:01:68:93:15:ad:c4:27:f7:b7:88:2a:be:c2:
                    c8:3d:6b:c9:03:85:54:e8:b5:86:7d:42:dd:00:61:
                    fa:68:3a:ef:b3:4d:6a:c6:99:7f:c1:f5:8b:df:71:
                    b0:e3:27:06:bd:2a:52:87:d6:68:35:87:af:a0:35:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B5:32:B8:6E:E9:80:26:97:CC:91:0B:24:B4:0A:21:1A:54:2E:50
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:48:ed:cb:ff:ce:20:4a:6f:4a:33:58:98:a1:11:5f:ad:05:
         7a:61:8f:e4:45:19:bf:b3:44:3b:4b:7c:a5:15:45:3b:8e:13:
         74:8d:63:2f:ea:6a:fb:4a:49:ab:e2:a7:88:15:d7:9c:35:1b:
         81:35:71:58:48:7d:58:f5:c9:dc:6f:d4:47:3d:b4:bd:e6:01:
         9e:31:e0:d6:1b:e1:90:fc:23:d3:58:84:d1:51:b1:c8:f2:f2:
         7e:0a:b5:90:f5:40:54:27:c6:69:16:bb:33:a7:f1:5e:ba:11:
         08:96:9d:53:e7:0a:e0:e9:66:da:45:96:0b:ca:14:25:d9:21:
         3e:82:d1:d2:bc:2e:6f:4e:97:ab:56:35:a5:b0:8c:60:30:03:
         94:ca:f6:7c:e1:ce:c9:42:a1:66:53:78:52:ed:e1:7f:96:74:
         f6:ba:42:66:8f:15:5e:95:e9:1e:ba:9a:9a:07:e8:49:9f:75:
         27:70:b0:5d:81:d4:16:83:c4:15:ad:cd:5b:53:3b:d8:34:96:
         3f:3c:66:c7:75:c3:32:b5:2b:d8:15:f0:6b:e9:e9:f2:5b:7d:
         15:00:b8:f1:bd:4d:ef:b4:89:32:e2:dd:ef:63:8c:53:8d:74:
         45:b7:02:de:bb:ca:ea:19:49:d6:38:f1:e9:ac:7f:12:b9:37:
         cf:76:80:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:12:16 2025 by rpki-client