Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
File:                     r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft (raw, json)
Hash identifier:          wPyacrBR8Repi9NkNhDsWj8Nn0PxrAX33of3WYZrteo=
Subject key identifier:   7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
Authority key identifier: AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5
Certificate issuer:       /CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
Manifest number:          3F
Signing time:             Thu 05 Jun 2025 18:27:06 +0000
Manifest this update:     Thu 05 Jun 2025 18:27:06 +0000
Manifest next update:     Fri 20 Jun 2025 18:27:06 +0000
Files and hashes:         1: r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl (hash: vgy+Re9ayT7+ICc81xycvfRRjsxQOP5k3JH4PyU+yMA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 18:13:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFD82477A091B17CDA61C5563BC2920CDCD7AAA5
        Validity
            Not Before: May 26 08:02:52 2025 GMT
            Not After : May 26 07:57:30 2026 GMT
        Subject: CN=7F2070047EE2FF1A47471466D2B02BE807EA8ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:78:16:8c:d0:24:d9:f4:2f:25:6a:76:ba:
                    bd:b3:26:0b:49:14:ab:1e:af:87:19:81:30:be:39:
                    41:73:88:97:61:dc:e6:29:36:6e:3e:b7:bb:04:09:
                    69:52:66:74:19:ec:2e:1f:c9:17:d3:77:4e:1d:a6:
                    04:3c:2a:d2:c9:aa:11:72:4f:0f:5c:b4:bd:07:5b:
                    ee:02:e6:69:d1:2a:7e:bf:be:92:eb:0b:40:e0:c2:
                    24:dc:c7:33:87:2b:94:2f:71:1b:4d:b9:12:51:68:
                    ba:4f:4a:30:95:32:08:8b:ab:e3:ac:f7:55:69:bc:
                    c7:2c:46:1d:3c:cc:cc:8b:b3:c7:31:80:64:f9:e7:
                    05:4b:29:1c:63:f1:40:78:cc:d9:98:b3:8b:1a:54:
                    82:84:1e:9a:6c:22:c8:66:27:21:0b:48:65:16:7c:
                    8c:42:ad:f5:d5:21:69:5d:ca:7c:2f:48:ed:1e:e5:
                    48:15:17:5c:78:ed:ea:54:80:27:e6:22:26:28:aa:
                    d5:33:e3:8b:49:f3:7a:6f:7c:18:ae:81:04:76:62:
                    ed:45:75:ac:49:3c:bb:63:2e:3c:12:7d:14:43:f1:
                    4b:6e:f2:c0:0c:6f:e6:f3:07:e0:57:a8:df:f0:95:
                    ab:33:23:6d:d1:41:5b:7b:c9:37:67:26:64:4d:62:
                    17:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:20:70:04:7E:E2:FF:1A:47:47:14:66:D2:B0:2B:E8:07:EA:8A:CD
            X509v3 Authority Key Identifier:
                keyid:AF:D8:24:77:A0:91:B1:7C:DA:61:C5:56:3B:C2:92:0C:DC:D7:AA:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9gkd6CRsXzaYcVWO8KSDNzXqqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/r9gkd6CRsXzaYcVWO8KSDNzXqqU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:2f:e9:32:95:ab:f0:41:f1:4f:e5:d0:b6:94:a7:9a:93:
         64:ed:22:93:55:61:c3:d4:61:16:f0:e5:4a:7b:d9:42:0c:3d:
         81:fd:5d:f3:ed:ca:ad:eb:8d:67:3f:e8:02:df:32:61:2e:99:
         e0:d3:d1:c3:2d:7b:4c:a0:e1:8d:d1:aa:d0:fd:70:00:53:cb:
         30:43:65:59:1f:8b:3f:4e:3a:0e:6b:0c:57:17:40:fb:bd:3c:
         31:b4:61:d9:5e:ed:67:0a:e4:07:e8:a0:25:d1:ec:07:af:2a:
         b9:ce:88:12:40:8a:0c:50:29:6b:43:8c:2c:23:9d:fb:c9:78:
         be:8c:cb:cc:1d:80:7c:3d:d2:3c:ba:9f:66:66:ec:95:50:66:
         f8:52:cc:41:60:d9:ab:e6:05:4b:76:60:9d:90:7c:5d:20:be:
         7a:29:1c:44:46:24:b1:01:9c:0d:7b:08:bb:ea:8b:21:17:93:
         3f:2a:81:e2:69:a8:9a:fa:9d:dd:be:89:cf:24:0f:bc:98:3a:
         58:89:f9:4a:6e:0b:9f:7f:60:5a:f5:94:4d:99:02:1e:a8:ef:
         26:03:63:4f:17:1a:e3:9b:f2:73:fd:b8:07:38:dd:45:da:03:
         b8:19:d4:cc:c0:b9:f2:6a:8c:9c:93:73:59:62:d1:86:a8:54:
         40:84:5e:4b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRkQ4
MjQ3N0EwOTFCMTdDREE2MUM1NTYzQkMyOTIwQ0RDRDdBQUE1MB4XDTI1MDUyNjA4
MDI1MloXDTI2MDUyNjA3NTczMFowMzExMC8GA1UEAxMoN0YyMDcwMDQ3RUUyRkYx
QTQ3NDcxNDY2RDJCMDJCRTgwN0VBOEFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMpBeBaM0CTZ9C8lana6vbMmC0kUqx6vhxmBML45QXOIl2Hc5ik2
bj63uwQJaVJmdBnsLh/JF9N3Th2mBDwq0smqEXJPD1y0vQdb7gLmadEqfr++kusL
QODCJNzHM4crlC9xG025ElFouk9KMJUyCIur46z3VWm8xyxGHTzMzIuzxzGAZPnn
BUspHGPxQHjM2ZizixpUgoQemmwiyGYnIQtIZRZ8jEKt9dUhaV3KfC9I7R7lSBUX
XHjt6lSAJ+YiJiiq1TPji0nzem98GK6BBHZi7UV1rEk8u2MuPBJ9FEPxS27ywAxv
5vMH4Feo3/CVqzMjbdFBW3vJN2cmZE1iF2cCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBR/IHAEfuL/GkdHFGbSsCvoB+qKzTAfBgNVHSMEGDAWgBSv2CR3oJGxfNphxVY7
wpIM3NeqpTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMDYvcjlna2Q2Q1JzWHphWWNWV084S1NETnpYcXFVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcjlna2Q2Q1JzWHphWWNWV084S1NE
TnpYcXFVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTA2L3I5Z2tkNkNSc1h6YVljVldPOEtTRE56WHFxVS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvzC/pMpWr8EHxT+XQtpSnmpNk7SKTVWHD1GEW8OVKe9lCDD2B/V3z
7cqt641nP+gC3zJhLpng09HDLXtMoOGN0arQ/XAAU8swQ2VZH4s/TjoOawxXF0D7
vTwxtGHZXu1nCuQH6KAl0ewHryq5zogSQIoMUClrQ4wsI537yXi+jMvMHYB8PdI8
up9mZuyVUGb4UsxBYNmr5gVLdmCdkHxdIL56KRxERiSxAZwNewi76oshF5M/KoHi
aaia+p3dvonPJA+8mDpYiflKbguff2Ba9ZRNmQIeqO8mA2NPFxrjm/Jz/bgHON1F
2gO4GdTMwLnyaoyck3NZYtGGqFRAhF5L
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:26:10 2025 by rpki-client