Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
File:                     dkKgfZrJ0ifqQveebRMcsakg7c4.mft (raw, json)
Hash identifier:          wcNpWRmPwt3lq9hFm0iP9YvLJu/tTKkU2e9jQebciaE=
Subject key identifier:   7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
Manifest number:          0552
Signing time:             Tue 03 Jun 2025 20:26:24 +0000
Manifest this update:     Tue 03 Jun 2025 20:26:24 +0000
Manifest next update:     Wed 18 Jun 2025 20:26:24 +0000
Files and hashes:         1: 2VG_aLfphsV89PTsgbPEA_6iWvY.roa (hash: M9KCD3iEqdoswYXX59Ej14+CIQ8ByIq+lqv26CbAd4A=)
                          2: 58OdND_O8C7lWR9pzTn2X4yODl0.roa (hash: AdmmlDZVlk0X+mPGtU8q4VnrBwQoVrRvYyTSQBqUFq4=)
                          3: 7PH2ULD4y7iG2T26nFLSov_4rVM.roa (hash: I9XwTgKLEPTlQyUKL4p6E/zjAxXkl6kR5TjdcqYfZqs=)
                          4: Ewlj1vzQTRfcOV5ZWq1OPrg-wvk.roa (hash: MtpSQllVFCbp2hK8L+jIOy6YVK/f/DMes+TVhoUsqkQ=)
                          5: OCvbfOuYvEPCldOw4FnWc5TjMi4.roa (hash: z2a8dhskVOr2VUTK6msHUs/qUSMFiDsLY99A4fmo/vM=)
                          6: PitG_lx6KqUBvvb5zcXoUCdbuUI.roa (hash: 19Q0ibmF5w6Qtk7hXbGIpZ2KtGthi47gBoOOR/H3j3g=)
                          7: YWUIfsAXvG03GtjcY7bWgEJI3nE.roa (hash: pp8SpBzXHGnjFRvY3uePd2k0fIrvCOwgLj2mIMlDROg=)
                          8: dHTBesEK4TuQnHvw7wSgRLlsTxY.roa (hash: NdSvKoP0JBfy2p8f1Fje76rVthOAZS7uOoDeCwvB4Zw=)
                          9: dkKgfZrJ0ifqQveebRMcsakg7c4.crl (hash: RTPTWd4YnJu/7/tVBStGWdxiCndGPDwulNX2Lx75aLs=)
                          10: hLS_30fkHL4pJAcJR7vs6fBFPoA.roa (hash: 5UQlGoWh1dY4vPVgrdfqF/ERjWIJPSVgeBGERCHsGCQ=)
                          11: iKm5pvEG4ldoMjnwvvjYj-ctDys.roa (hash: /Rd/KT5Nd5Znbjc9OxbcllSzZ4s7r+ksMJA8AYoXtMM=)
                          12: owrEqEWhtw2gtbfosQWMbNarPts.roa (hash: 4B+TlJyUCduE1ardMgJhtM0DM6aLyEeraJLHhVs1TQc=)
                          13: tqLaoLKqXTnkLHrvT28ipuRzLn0.roa (hash: VuYk1hFs3rz8kI3D+t+8gl7guJmkDT8ajhjuaFCQkVk=)
                          14: vowz6qyaBzqDwhJGfsqGnltb6JM.roa (hash: zjCDxM2xmmcrM/l1eSEgScoZRugexOBWc5BZ2E1vyZc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: May 23 10:00:00 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=7BC313071AC5BD3648402A224AB2CE090A43B020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:70:28:2c:62:28:d9:7e:49:7d:82:25:65:
                    6f:2e:ed:ba:cc:77:8f:a8:f1:62:a0:1a:d5:19:36:
                    0d:6b:d2:2d:8c:4f:35:7c:3f:32:bf:0a:15:bd:77:
                    8e:d2:9e:2d:17:6d:4d:80:b8:4f:57:33:6e:8e:45:
                    a8:92:f7:af:ca:8e:20:4e:c6:90:51:13:d4:07:05:
                    44:43:74:bd:5a:c9:a0:51:20:3d:77:33:dc:32:55:
                    bc:85:10:03:4e:0f:57:54:74:44:23:d6:27:86:8c:
                    e0:c0:9c:81:9d:b5:a8:56:2c:30:07:96:5a:81:86:
                    9f:d3:84:ee:1d:1f:c7:23:d9:a4:f2:09:f9:e9:f5:
                    1a:77:dd:a1:c0:f2:40:65:87:62:99:7d:87:6b:08:
                    53:b6:95:6b:c8:e7:59:e3:32:1e:62:90:aa:41:a6:
                    30:79:56:fe:43:da:33:ec:c3:e5:c2:84:5d:4f:fe:
                    05:5d:58:fa:db:1a:7a:d0:33:8b:7e:cc:f4:10:66:
                    1a:35:6a:d3:f6:d7:35:b1:68:df:cc:af:ac:26:87:
                    10:e2:c8:c2:f9:1e:84:eb:f0:a7:4f:37:a8:7e:5d:
                    15:38:cd:bd:93:c1:82:55:56:ab:94:11:5f:2c:92:
                    5c:d4:d7:00:15:0b:86:02:54:76:91:05:0a:a7:01:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C3:13:07:1A:C5:BD:36:48:40:2A:22:4A:B2:CE:09:0A:43:B0:20
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d8:ed:f4:df:b3:ef:31:60:71:b8:12:0b:fe:93:3b:c9:b3:
         17:64:42:fb:04:27:e9:e0:07:5a:ed:43:1f:3c:5a:6e:5e:3a:
         8a:41:2e:bb:c4:99:38:b5:06:25:e4:75:27:77:f0:34:6b:e8:
         a0:08:b3:63:1b:8b:0c:92:9b:b2:36:e8:5a:b8:95:8b:80:cc:
         a4:14:d2:c6:5d:f9:65:5c:26:cf:29:a0:b5:a4:92:53:0c:cf:
         c5:55:7c:2d:73:a7:45:56:d0:3f:b0:f6:15:88:0e:52:19:9e:
         0b:9c:5b:b9:08:b0:6a:54:04:c5:2f:73:f4:01:c8:1d:94:cd:
         5a:f2:f8:8d:0a:f3:2d:aa:3d:85:50:b4:ca:01:50:ca:43:d6:
         be:67:ea:30:20:0c:bd:ff:6b:39:cb:3e:ae:54:f2:5d:65:55:
         e0:c5:c3:8c:cc:cb:35:0b:0d:e6:fa:20:e3:8e:af:d2:64:77:
         1a:94:ed:59:d6:5b:ee:fe:02:7e:e9:a0:b7:45:7a:8e:a0:25:
         35:ac:23:73:83:0a:cc:74:2b:53:87:95:3f:14:c9:4b:7f:17:
         7e:12:b4:5b:6a:e5:6a:ad:80:55:23:f2:c1:90:5f:f8:30:4b:
         18:6e:cc:0b:a7:eb:40:e1:6b:98:fc:a6:0c:cb:26:16:9c:f4:
         61:4c:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:12:44 2025 by rpki-client