Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
File:                     xcyVkpEJeSOm9C2PZXuQugMuX28.mft (raw, json)
Hash identifier:          foWLSJgVvuzjXX//Pw52aBMBaxr5gOO5dAFZAmKZy3U=
Subject key identifier:   70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
Authority key identifier: C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F
Certificate issuer:       /CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
Certificate serial:       36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
Manifest number:          0579
Signing time:             Tue 03 Jun 2025 20:10:01 +0000
Manifest this update:     Tue 03 Jun 2025 20:10:01 +0000
Manifest next update:     Wed 18 Jun 2025 20:10:01 +0000
Files and hashes:         1: 7tCGDj_HwkjxzoQxPdnK6diEFCU.roa (hash: bT1jetR3igdWmDJjkidT06s86Ch24IhqmIgSvAAkBJ0=)
                          2: xcyVkpEJeSOm9C2PZXuQugMuX28.crl (hash: 8Z8pdW0x539jZ3F43d2GB57wwLNFMTSKzOD2s/8hD7g=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CC959291097923A6F42D8F657B90BA032E5F6F
        Validity
            Not Before: May 23 09:58:08 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=70F776851E8F32323433068C6155794963FDEA70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:9b:1d:ee:bb:69:c6:3b:dd:9c:ae:d4:eb:
                    7a:e2:eb:8d:70:03:58:c6:73:74:45:08:36:28:bf:
                    b7:4b:5e:de:21:b7:87:e6:e3:fc:78:6d:f0:d0:76:
                    06:1b:58:6e:22:ba:88:e3:d4:b3:ce:9c:17:ac:01:
                    8e:6c:5c:45:b5:a0:26:3f:d6:6d:d4:42:88:b1:59:
                    8d:82:c3:14:6b:62:16:19:47:b2:a9:4e:e6:84:72:
                    a0:ce:87:9f:13:91:28:4b:fb:a6:90:1c:d2:b2:80:
                    96:60:be:9d:19:1f:27:c1:cd:34:34:3d:e3:d0:be:
                    30:92:aa:9e:0c:d4:96:10:23:0d:ba:8c:54:d1:07:
                    c8:ec:60:06:41:11:3b:ab:3d:86:fe:f9:89:7a:c6:
                    9c:d2:af:c3:60:2b:32:6d:ef:e0:8a:2a:26:25:d2:
                    9b:57:ea:d9:08:e1:ee:a6:a8:c5:b9:46:cc:c7:24:
                    8d:91:63:3a:eb:a5:7d:f0:4d:c6:44:b8:86:8f:79:
                    4b:ce:8a:7f:61:db:7c:05:5f:2e:7c:77:2b:7c:eb:
                    1b:f3:c5:25:bd:a4:aa:5f:7b:34:b6:60:e9:a7:b7:
                    38:24:1b:31:51:22:80:84:3b:94:e7:5f:b0:b3:d5:
                    92:80:e6:88:2a:b8:fa:84:15:64:6e:6b:e3:24:b3:
                    f8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F7:76:85:1E:8F:32:32:34:33:06:8C:61:55:79:49:63:FD:EA:70
            X509v3 Authority Key Identifier:
                keyid:C5:CC:95:92:91:09:79:23:A6:F4:2D:8F:65:7B:90:BA:03:2E:5F:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xcyVkpEJeSOm9C2PZXuQugMuX28.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30060/xcyVkpEJeSOm9C2PZXuQugMuX28.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f5:e4:72:cf:5f:96:15:2a:65:d9:cc:fb:ae:a8:8d:a6:b9:
         53:0b:52:06:f6:6d:98:7d:02:c0:0e:8a:aa:07:8a:00:ba:3b:
         c7:f8:89:35:b9:f6:3a:a4:a5:77:0f:de:47:41:4d:49:42:8b:
         2a:1b:19:82:05:64:e1:b9:dd:f4:ac:f5:00:b3:16:29:ec:f1:
         d1:73:7c:7d:cc:02:97:63:35:69:ab:80:6f:2c:de:7e:7b:5c:
         fd:b0:ec:93:c9:2c:3f:7c:54:3a:4e:55:cf:95:e5:7a:00:4a:
         db:72:67:6f:47:f0:90:35:d1:de:95:87:70:b2:fc:47:fa:f5:
         f8:a2:c7:40:9f:7d:21:22:84:f5:52:2f:d8:50:96:46:70:d4:
         a4:75:22:b9:fc:1a:29:80:48:b1:fa:f3:b2:19:d1:49:ba:bc:
         2c:58:0a:2a:a8:85:f0:4d:79:4b:a0:69:56:2a:11:f4:29:30:
         fb:3a:44:04:87:7b:53:28:95:77:c1:ad:ea:9f:df:24:9f:0f:
         98:a4:51:94:cb:6b:64:d4:73:67:fd:76:ef:c2:fc:6e:4c:49:
         74:38:56:af:50:52:aa:ba:72:e5:7c:70:6a:a8:1d:79:74:e8:
         6b:e3:97:af:7e:21:d5:c3:1b:78:bf:36:5d:1b:1f:d7:a5:34:
         bc:e4:32:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:27:41 2025 by rpki-client