Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
File:                     FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft (raw, json)
Hash identifier:          zxXj5mkpv+rjZWlph1EwOr5b0fyNz5A+o41yHTotDhg=
Subject key identifier:   C7:73:81:B2:0D:31:62:4D:07:B2:5B:87:85:A9:58:F3:91:A9:FA:7A
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Certificate issuer:       /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
Manifest number:          020E
Signing time:             Thu 05 Jun 2025 17:19:06 +0000
Manifest this update:     Thu 05 Jun 2025 17:19:06 +0000
Manifest next update:     Fri 20 Jun 2025 17:19:06 +0000
Files and hashes:         1: DgDKCG3ePf5gsklz245ibQDkhgk.roa (hash: ad3/kFuQ3Mdl3T1nM415+/Dr5KL43HWHojsdnNCX1tQ=)
                          2: FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl (hash: eEA41fr5jDzgaEtgtrQ7Scd/KPEvuZEYql0Bi/4VlXI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 17:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
        Validity
            Not Before: May 23 10:05:21 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=C77381B20D31624D07B25B8785A958F391A9FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:e9:10:ca:34:0d:1f:a4:71:8b:e6:6f:5a:
                    0a:b3:38:1c:87:4e:fe:41:26:59:ef:6b:c7:8f:01:
                    de:d9:ea:75:2d:35:2b:a8:ae:7a:96:5e:05:bc:42:
                    dc:be:4c:9e:fc:7f:cf:44:f0:2b:c0:d0:2e:14:21:
                    a9:32:a4:6b:bb:39:e2:b5:09:06:fb:fd:f2:b3:57:
                    f8:51:2f:4b:dd:4c:62:d1:11:0f:e1:cf:38:89:02:
                    93:d7:1a:2a:fa:b3:bc:dc:07:56:af:55:88:f5:9f:
                    32:9d:91:34:3b:dc:3d:35:57:18:85:09:40:bb:c1:
                    9c:97:99:c3:f9:94:2b:90:d9:69:84:38:1b:ce:2b:
                    b8:84:4d:53:c2:78:6a:1a:c8:da:75:30:8f:b9:05:
                    23:c0:5b:da:51:36:9f:4d:51:36:18:62:04:99:2d:
                    a2:59:6f:ae:6a:5a:54:04:12:73:1b:14:e8:e0:91:
                    b1:2f:73:eb:46:a0:16:74:d4:f0:2d:d3:3b:00:ff:
                    a8:85:45:0c:56:21:8b:8b:c6:d6:44:17:c7:18:23:
                    98:b3:8d:42:a4:6b:7b:5b:ba:98:a3:0f:61:1a:29:
                    60:ba:c2:e0:fb:bc:28:20:60:f2:ba:e4:65:86:b9:
                    e8:17:6a:95:06:db:7b:82:e2:58:02:2d:e3:04:17:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:73:81:B2:0D:31:62:4D:07:B2:5B:87:85:A9:58:F3:91:A9:FA:7A
            X509v3 Authority Key Identifier:
                keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1d:e5:2e:18:3c:13:9e:b7:25:76:54:ec:46:7f:58:57:fa:
         2c:bb:a0:12:39:8e:dd:72:46:7b:97:10:11:5c:55:f4:29:65:
         7e:d9:82:e8:ab:4a:69:63:1b:bb:67:a8:c1:8a:ba:c5:dc:a0:
         08:46:39:2f:70:a6:44:89:68:5e:92:52:fb:60:87:c1:54:f1:
         f4:fe:7b:08:34:f8:04:f3:e7:4a:8e:18:6a:3a:03:d9:1b:aa:
         94:26:fb:2e:1b:f5:61:a3:ab:a7:81:0e:8a:85:a6:0c:54:62:
         31:32:56:31:36:a8:2c:ba:ce:b9:f8:94:f0:5c:95:d0:0d:35:
         2f:fe:c2:47:f6:7b:c0:4a:06:53:ee:47:3e:d9:2f:26:1c:ba:
         86:79:79:f9:ea:3c:0f:9e:ef:4d:4d:ae:ed:73:24:1a:65:9e:
         b7:68:6a:82:16:23:10:66:dc:20:fd:67:f5:da:a2:f8:7a:0f:
         9b:80:83:97:fb:82:11:31:06:fb:31:1e:c5:96:aa:3a:f3:b8:
         85:34:85:5e:ce:2a:9b:b8:82:04:01:4f:c6:6f:be:5e:f6:62:
         99:d5:d1:4b:25:6f:75:da:ec:75:22:e3:4a:27:a4:11:dd:02:
         4f:97:c5:66:a5:88:c1:62:25:33:17:9b:ec:dd:1d:cd:5a:2a:
         43:ec:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:30:33 2025 by rpki-client