Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
File:                     jVezuNsxhZi2b03WYYyxmghWX_0.mft (raw, json)
Hash identifier:          zGCPEL1kLCy3w3QP9aFl+Fvp44ky8f3Qrc8OFk3cuhk=
Subject key identifier:   AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
Manifest number:          0555
Signing time:             Tue 03 Jun 2025 20:26:23 +0000
Manifest this update:     Tue 03 Jun 2025 20:26:23 +0000
Manifest next update:     Wed 18 Jun 2025 20:26:23 +0000
Files and hashes:         1: LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa (hash: XRkyGpOHJUA5ShPrOxFFKDXmZrUhdl7h+5YR/70BD4k=)
                          2: jVezuNsxhZi2b03WYYyxmghWX_0.crl (hash: GdG4iMdkZZ6nwYnEwAcxCfMBbt9YTa/VXL1sQ/eBKOM=)
                          3: sgJETk3keJ3pOizZKU4YP90fO8k.roa (hash: kmzZDvB/9f0dBbwnLQQ19JkDE9LPf90HpHpz17CiRKs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 21:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: May 23 09:59:59 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=AD6EADF148C8851D6A71D73A70FB2013037772E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:1c:e7:d1:ed:95:c2:02:0e:18:6d:c9:c0:
                    b6:07:f7:70:c5:22:fc:5c:b8:aa:b2:f7:92:a2:aa:
                    b9:d9:5a:86:c7:09:fd:3a:c0:0f:0e:d6:50:8e:2d:
                    13:6a:42:68:35:5b:95:75:0f:77:60:df:d6:95:cf:
                    1e:2c:6c:56:a9:2a:74:d6:b2:92:61:5d:c2:1c:87:
                    4b:45:4d:b6:95:60:46:da:fc:1b:96:ce:2a:4b:69:
                    f0:42:de:ea:1b:4f:f3:f3:af:88:3c:2f:f8:97:1d:
                    79:f3:1a:02:c6:40:ed:39:37:2b:97:85:83:fb:15:
                    64:bd:14:01:ec:19:a7:04:7b:62:fb:fb:2a:71:68:
                    8a:7d:08:06:fa:ac:41:71:a3:12:de:44:ab:1f:17:
                    d0:02:57:2f:af:31:d6:33:6f:d7:de:9b:97:7e:06:
                    29:01:7c:01:43:63:8d:66:ca:70:39:cc:68:6c:72:
                    07:3c:77:ba:74:c4:e4:4a:79:2e:6e:6d:87:6c:8f:
                    2b:4f:38:45:d1:df:c8:5f:ca:88:47:d0:0b:b9:ad:
                    be:98:2c:31:1e:79:74:a0:15:eb:51:e0:f1:c0:4b:
                    98:04:d7:b7:a0:4a:9d:fc:6a:17:ae:22:ef:f8:12:
                    48:44:2e:3f:c2:26:c9:a0:b5:50:aa:92:5e:1b:7e:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:30:23:54:ca:db:f7:b6:3e:ed:51:49:69:09:64:1c:92:7a:
         91:12:51:3a:2a:0c:8f:be:92:62:39:4a:6e:49:f3:4d:ff:64:
         0f:8d:4d:fd:d3:91:01:cb:1a:f6:f6:39:62:09:bd:fe:b3:3a:
         f6:b0:a4:52:80:37:d1:83:fe:a7:23:bf:56:7e:d0:5a:99:5a:
         5d:ab:17:92:fe:2e:8e:3b:80:a7:4b:25:a2:fa:f0:c9:58:9d:
         5a:c0:31:07:a6:8d:a4:85:b0:c7:08:80:f7:2e:6b:da:ed:19:
         2d:aa:0c:36:3f:b9:33:e4:82:13:14:af:62:27:54:6a:28:d3:
         8e:88:16:ab:f4:7c:2f:2d:38:fc:ca:27:8e:62:e6:27:b3:51:
         d0:4f:07:23:87:2a:e1:5c:72:4b:5b:e5:14:08:d8:f0:e9:bf:
         0c:7a:26:1a:1c:92:76:9a:3d:38:bd:f3:81:7f:55:4d:2b:ca:
         e4:fe:32:24:37:25:f5:96:f7:71:ec:db:fc:36:5f:38:f8:74:
         ab:6f:6e:7c:31:d7:02:36:cf:28:ff:25:31:c5:63:bc:ed:d1:
         0e:e4:c4:5b:e7:90:43:89:f7:d0:57:73:27:c1:e8:b1:5e:86:
         16:1f:dc:7a:22:b1:da:96:9b:cf:b1:db:5a:49:79:97:3a:14:
         14:bf:1b:dd
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDU3
QjNCOERCMzE4NTk4QjY2RjRERDY2MThDQjE5QTA4NTY1RkZEMB4XDTI1MDUyMzA5
NTk1OVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQUQ2RUFERjE0OEM4ODUx
RDZBNzFENzNBNzBGQjIwMTMwMzc3NzJFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN4tHOfR7ZXCAg4YbcnAtgf3cMUi/Fy4qrL3kqKqudlahscJ/TrA
Dw7WUI4tE2pCaDVblXUPd2Df1pXPHixsVqkqdNaykmFdwhyHS0VNtpVgRtr8G5bO
Kktp8ELe6htP8/OviDwv+JcdefMaAsZA7Tk3K5eFg/sVZL0UAewZpwR7Yvv7KnFo
in0IBvqsQXGjEt5Eqx8X0AJXL68x1jNv196bl34GKQF8AUNjjWbKcDnMaGxyBzx3
unTE5Ep5Lm5th2yPK084RdHfyF/KiEfQC7mtvpgsMR55dKAV61Hg8cBLmATXt6BK
nfxqF64i7/gSSEQuP8ImyaC1UKqSXht+UV0CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBStbq3xSMiFHWpx1zpw+yATA3dy5jAfBgNVHSMEGDAWgBSNV7O42zGFmLZvTdZh
jLGaCFZf/TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxOTkvalZlenVOc3hoWmkyYjAzV1lZeXhtZ2hXWF8wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalZlenVOc3hoWmkyYjAzV1lZeXht
Z2hXWF8wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTk5L2pWZXp1TnN4aFppMmIwM1dZWXl4bWdoV1hfMC5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJMCNUytv3tj7tUUlpCWQcknqRElE6KgyPvpJiOUpuSfNN/2QPjU39
05EByxr29jliCb3+szr2sKRSgDfRg/6nI79WftBamVpdqxeS/i6OO4CnSyWi+vDJ
WJ1awDEHpo2khbDHCID3Lmva7Rktqgw2P7kz5IITFK9iJ1RqKNOOiBar9HwvLTj8
yieOYuYns1HQTwcjhyrhXHJLW+UUCNjw6b8MeiYaHJJ2mj04vfOBf1VNK8rk/jIk
NyX1lvdx7Nv8Nl84+HSrb258MdcCNs8o/yUxxWO87dEO5MRb55BDiffQV3Mnweix
XoYWH9x6IrHalpvPsdtaSXmXOhQUvxvd
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:15:36 2025 by rpki-client