Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
File:                     FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft (raw, json)
Hash identifier:          i+LA6nc+Y7yeP5iXA/bIswiPud72CwQhz17LzQF/THg=
Subject key identifier:   36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
Manifest number:          09AC
Signing time:             Tue 03 Jun 2025 19:49:20 +0000
Manifest this update:     Tue 03 Jun 2025 19:49:20 +0000
Manifest next update:     Wed 18 Jun 2025 19:49:20 +0000
Files and hashes:         1: -Tm2eH07T15fThwWbWoAIMl2Hu8.roa (hash: IBwz1Qj/Aik2ymWu9GTUMZ+fdFrjOBQQqj1MWnAmqP0=)
                          2: 2tC81IRbokj814kJb6Z3e6hKKe8.roa (hash: +IdbIj0/wYv569jh3AUe7prAb/KQf9chxyc/jeH8r4M=)
                          3: 4g8gxWGk_Q1ckoP0MhvCnLThPCo.roa (hash: O5RgLGKUuyWnmyN4EXmLCYKi6/iT72o7SA6kZs4pKOM=)
                          4: 724XlhQfR2JWLPc-FU_70h77SRA.roa (hash: WgzqiM9EU/Dg7+Bc2Ke6PM33swzdt0JtOlibyzp6ueo=)
                          5: FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl (hash: IwzYLhG76zR2kg6VX3A24+B9IBF4lc674uj/tlXZBZo=)
                          6: Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa (hash: x7lDtD2d742A+6rlrVTsT22y7MlHEnvvApODlMh6LrY=)
                          7: ULvjJlav04JZjWNvjDGKLErly3E.roa (hash: 0g9YqjXLfRplNEDWbycZDM8b1RoYRxoLtt5cWDOvodc=)
                          8: UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa (hash: 5eXayhtOk7VxZrMrgyp3ffNQG40LsAj2gq7UAXSZzT0=)
                          9: bxJBv8k2VP6NtPi0uL7bYEOlniI.roa (hash: d3MygnIVm3XrL/N6iQarvDuMpXAs5k50/UhR/arseak=)
                          10: ctkF571l4DKJqil-PsdPHdGDzeg.roa (hash: /RH8tJOC+ZyLaGE6OnAot1ajIEJG9h8OCH3YVRcjdmk=)
                          11: fxnmp8Tl3RX7bwn7Cq7rVDlGvw0.roa (hash: /Chvj0JSClgLoh6GomdVp/trXwDNviwULuD/WeWcQFk=)
                          12: g5yoq2sLHTv0Jhm2N6VqNU_-nRM.roa (hash: JUdJIY/M2X7OaEc4I162SaM+lhtblktli6aNkqbdPl8=)
                          13: jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa (hash: V6iMKe498tEpk1US8kZSHOyzE6oBTaO1P+La8J2BZi8=)
                          14: lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa (hash: CHLQzh5yNzBwwHryhF74708zBgk2osGRgTULI6lMHKo=)
                          15: rro_sKOWKjjK9w21SVKKovz4ZBQ.roa (hash: ezHleX2pD7fXjGwq6cpzr4uXAy0hdfdKPJG29Xr1Cxo=)
                          16: vf_VAkjaRKw-FvQayyywgGy2OnI.roa (hash: tVBoYFInXHsKvHJOPmwFcfDcnevo8m4qdXOxiNVry7Y=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: May 23 09:52:45 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=361ED56BE231E62A63B2E44F5B0C2BD586140B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:13:f4:6d:c4:94:a9:0b:69:29:8e:de:43:
                    4e:fe:b5:c0:ac:a8:e2:48:24:9b:4d:a4:4f:87:17:
                    97:de:13:ec:1d:cf:21:6c:62:8e:4e:b2:2f:6a:30:
                    3d:f6:e6:d9:5f:d1:4d:de:70:02:d7:9f:c9:1f:59:
                    4c:bd:b4:e7:ff:1f:2e:03:c4:f7:7f:7e:4b:31:80:
                    7f:be:a7:6a:b9:22:a6:39:ae:53:8e:93:a9:f7:0c:
                    06:0b:88:7b:87:41:e5:a2:5f:28:25:cb:25:f8:58:
                    86:aa:e5:ea:23:0d:62:7a:d3:9d:2d:33:09:7b:38:
                    87:9c:bd:1f:28:4a:a6:71:33:7f:54:6f:3d:89:66:
                    43:11:ab:57:73:98:0d:ee:0e:4b:b9:8c:47:d5:c7:
                    a1:7d:d9:4f:e3:a9:9e:cd:0b:4d:3e:2b:7b:84:2b:
                    7f:73:65:35:97:3f:c9:76:d0:45:92:ed:61:d6:db:
                    dc:2f:1a:33:ea:3b:ac:32:b7:e9:0b:b2:d6:56:69:
                    f8:b6:d4:04:69:0e:ac:29:61:57:90:fe:48:36:cb:
                    5d:4b:10:86:2d:82:8c:5b:f8:95:3f:ce:bb:5e:59:
                    14:81:6a:6d:20:70:46:6f:ba:0f:7d:8f:d7:7b:72:
                    d7:f0:6f:ba:78:49:95:28:4f:10:5d:d4:d8:b9:8c:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:38:83:37:5d:0a:15:18:78:d2:63:f1:47:aa:d3:47:56:60:
         49:16:43:67:16:8c:54:51:d1:33:e6:23:a3:71:e1:0e:17:75:
         f2:1b:57:b7:46:bb:36:33:31:d4:e9:5d:33:c9:26:73:b4:4d:
         68:39:44:73:d7:f4:01:12:a6:3b:9b:52:db:a6:ac:dc:13:d7:
         8b:f7:80:cf:ff:10:48:56:b6:7c:ce:a8:ac:47:98:82:52:af:
         bc:38:75:e1:91:09:77:64:d9:79:b4:69:74:77:77:89:bc:9b:
         4f:95:a7:ff:3c:66:ed:fa:29:f2:c7:32:7d:41:e8:b1:36:9e:
         bc:b0:27:27:03:d2:49:a1:f6:0e:f1:41:fb:67:5d:91:b8:25:
         09:93:0c:b4:bd:7f:1f:18:35:08:76:12:83:da:b6:66:cd:de:
         fa:c2:1d:e7:4d:b2:70:3a:c1:ba:23:8e:f4:a4:cd:f4:4e:89:
         9d:db:90:0e:fb:3a:57:1d:36:46:5c:70:53:ea:3e:85:e3:aa:
         88:54:d2:f5:a3:4b:0e:a2:90:e2:ec:f4:85:87:e0:db:e2:a7:
         28:c0:5e:0f:15:57:1f:e8:e6:13:55:28:f0:c2:76:5d:fe:6a:
         41:46:3e:20:46:36:21:54:b2:ca:c7:47:cd:0d:19:df:5c:c1:
         64:29:c4:02
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5
RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI1MDUyMzA5
NTI0NVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMzYxRUQ1NkJFMjMxRTYy
QTYzQjJFNDRGNUIwQzJCRDU4NjE0MEIyNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALOKE/RtxJSpC2kpjt5DTv61wKyo4kgkm02kT4cXl94T7B3PIWxi
jk6yL2owPfbm2V/RTd5wAtefyR9ZTL205/8fLgPE939+SzGAf76narkipjmuU46T
qfcMBguIe4dB5aJfKCXLJfhYhqrl6iMNYnrTnS0zCXs4h5y9HyhKpnEzf1RvPYlm
QxGrV3OYDe4OS7mMR9XHoX3ZT+Opns0LTT4re4Qrf3NlNZc/yXbQRZLtYdbb3C8a
M+o7rDK36Quy1lZp+LbUBGkOrClhV5D+SDbLXUsQhi2CjFv4lT/Ou15ZFIFqbSBw
Rm+6D32P13ty1/BvunhJlShPEF3U2LmM/dsCAwEAAaOCAjswggI3MB0GA1UdDgQW
BBQ2HtVr4jHmKmOy5E9bDCvVhhQLJDAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S
xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2
dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEyL0ZZbnV6TVp4akdVbU9NOU9rc1lBQThWdnRwYy5tZnQwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBbOIM3XQoVGHjSY/FHqtNHVmBJFkNnFoxUUdEz5iOjceEOF3XyG1e3Rrs2MzHU
6V0zySZztE1oOURz1/QBEqY7m1LbpqzcE9eL94DP/xBIVrZ8zqisR5iCUq+8OHXh
kQl3ZNl5tGl0d3eJvJtPlaf/PGbt+inyxzJ9QeixNp68sCcnA9JJofYO8UH7Z12R
uCUJkwy0vX8fGDUIdhKD2rZmzd76wh3nTbJwOsG6I470pM30Tomd25AO+zpXHTZG
XHBT6j6F46qIVNL1o0sOopDi7PSFh+Db4qcowF4PFVcf6OYTVSjwwnZd/mpBRj4g
RjYhVLLKx0fNDRnfXMFkKcQC
-----END CERTIFICATE-----
Generated at Wed Jun 4 02:04:44 2025 by rpki-client