Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
File:                     BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft (raw, json)
Hash identifier:          TV1BJop3I2M1EsSurAZ9fXyyqJkYFYyUB2EUWHh/mwk=
Subject key identifier:   27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
Manifest number:          0627
Signing time:             Fri 06 Jun 2025 12:12:24 +0000
Manifest this update:     Fri 06 Jun 2025 12:12:24 +0000
Manifest next update:     Sat 21 Jun 2025 12:12:24 +0000
Files and hashes:         1: 0yO7Y9DPofFvJxywdLCmjgxvwgc.roa (hash: AhXaO70d/WfP9QnrExkd9QWfwYAxrXrg8IDuePSuGCw=)
                          2: 2zinTuMIZL5lgGAcCpLQIrNVBhg.roa (hash: /zYjlL2IN82GCgUnl+2cQ8t8MCnxRE9WWOG/cxKbkfU=)
                          3: 5u3rw1GQyWIz0eojHBEnuas7eG4.roa (hash: PYXJQ1C9TqHNcF6BOU+B+JGNiZOiqezJTiMu6/cE3bI=)
                          4: 6eHGfGLe-TqwyQKLkw1MevbIA0c.roa (hash: GGuCAFfizkKtjyvY5Dm2vwF8bBDLxRED9qBYDhj5/ak=)
                          5: 9oYd5g-qig8jdZADHL0rkSpI7yQ.roa (hash: CE+13neiAOgNEbnWmAzu/38TSXtXmAsPBex5k6JuA94=)
                          6: BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl (hash: lJkFgLYKCj8gGO4g2WVp43hu1I+dQjkHewohtUQQRds=)
                          7: BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa (hash: wkp8jCWMGS/oET4RWCnYrWZiq8mVa0AwpzDk2vd50Nk=)
                          8: FXalhLfgKMafIMjjvh9hvA2K3ak.roa (hash: iueUR+L3k7ltXc9/McKiwqwUciniGgyGyxC/BIjendI=)
                          9: G6LBSx-QZb1yFmxsv8awKmd7pKw.roa (hash: kw/IqeKsZJchdRq76UxUKxAEtYOX6Cr6rTdei9tIaGI=)
                          10: URkAARRYKF5msftEx9z2KdBUQkc.roa (hash: 4vUM/KJo7nI/bfEOT2KIsRLOC/5iw5PjR/KiPsuBzNA=)
                          11: V0lIEzUaTHmFKJEKFTuetCpJm_s.roa (hash: 6znOBloPeSZMG1ShYh79xDg4QMinRkcS2VKosfI6EFg=)
                          12: V1q3Yh-pHMsEB-xLtxVnx60RWd8.roa (hash: 2faih0O/raDLRO8TgzOgtLWo6yIhEuJOMDtn7p12A1g=)
                          13: iFI2mUdFnt87YLASDUgPPQ443P0.roa (hash: 8EhuWE8sx66/hFWLaoPBQ3mkiI+EPdGSU4gXtsAessw=)
                          14: nbJhDqh0Cp0Sh3iXEAS7-TMF9_U.roa (hash: eQcQgtf8UdsxuLrQ2Ngxm4PoA10/NI8nLPszhuZTYws=)
                          15: nh3XWMTyBfqKJZT4CJCvykqxK9k.roa (hash: fZ11XMECb73GPOOfIJejuoGsDLNytDLols9FNwZS1RA=)
                          16: nj0oETTYDBMPnBW_0OnHBHaN_3Q.roa (hash: HAesfNykLiVc03WIXob8fHJ+cx+ud5q38IbXPiSC9LI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 15:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: May 23 09:55:42 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=2715D4C764A99AAE4D95455E56664028A0E3CE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:af:95:0b:b8:b4:39:c8:7d:ce:a8:84:46:5f:
                    8a:d4:14:92:8f:67:6c:cf:ae:04:87:e8:b2:fe:0e:
                    3d:ac:96:c5:22:dc:2a:80:44:a0:79:71:f5:03:bd:
                    6c:91:d6:88:44:60:6d:4b:02:fc:b7:1a:9f:71:5d:
                    e2:58:a2:a7:5c:6f:c6:d5:55:8a:73:34:ae:fa:f3:
                    03:d9:b2:54:1c:b5:65:48:5b:bc:dc:83:6b:a0:58:
                    54:cf:b1:95:69:f7:6d:6f:e5:f7:6a:35:d0:a6:4c:
                    ac:a4:9a:45:5b:ee:09:5a:6f:50:38:71:53:d3:ba:
                    ad:d8:14:4c:a4:1a:e9:3d:60:bd:ca:44:1d:99:e7:
                    53:6b:90:f2:9c:7a:74:17:34:49:bf:6f:87:85:bd:
                    47:1e:bb:ad:41:a6:0b:64:d6:5e:d7:74:fa:eb:11:
                    63:06:02:a0:9f:55:1f:4c:72:b7:3b:9e:0b:40:ee:
                    2d:a5:2e:30:1c:27:d8:85:d9:f9:b5:17:86:81:10:
                    af:36:86:6a:27:5a:81:0e:97:b2:06:c5:2b:25:56:
                    9e:6e:9a:85:a6:57:8c:d7:19:f1:ed:6c:1f:55:cb:
                    1e:4d:81:25:4d:c9:66:a8:9f:d0:49:b2:d9:59:e0:
                    8f:cc:2e:59:f7:54:d6:76:30:04:aa:16:49:82:de:
                    d8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:15:D4:C7:64:A9:9A:AE:4D:95:45:5E:56:66:40:28:A0:E3:CE:45
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d2:f8:d0:63:b7:1b:aa:b1:57:8d:ba:c6:12:7b:46:c6:aa:
         1d:47:bd:d5:03:a1:fa:35:f9:8e:77:2b:e9:7e:1a:c3:bc:42:
         9f:05:44:b9:27:f5:8e:34:c4:34:ce:e4:9e:a7:41:e3:24:26:
         66:49:de:e8:87:17:85:3c:f5:ce:2d:8f:d6:cd:07:eb:8a:ed:
         e7:32:63:52:2e:fa:43:e5:af:d6:1a:d0:36:4c:6c:d1:90:ed:
         7f:36:50:07:85:bf:7f:d6:86:5d:c8:bf:5f:2d:f6:7c:ed:c2:
         6f:9c:60:4f:e7:cb:61:e5:2f:46:da:2c:66:63:d7:1a:bc:c4:
         db:bc:8b:42:3e:fc:06:01:2a:00:98:e5:c9:58:58:79:3e:b1:
         bf:7d:01:eb:ef:c9:12:7c:55:19:f9:97:9a:86:0d:9f:81:34:
         ed:fc:f6:21:a1:2d:42:33:c6:44:ee:a9:fd:60:ce:af:ee:52:
         ce:f0:79:c2:3a:7c:9f:9a:0e:10:0d:ec:58:5a:25:b2:5b:21:
         ce:3e:e9:8d:f2:4d:33:1f:00:7a:fb:ae:e4:d7:0f:0b:6e:63:
         f8:cb:c9:ae:d0:79:c8:be:f2:7b:c5:26:40:1f:9a:be:09:a1:
         a0:c7:00:d1:50:17:e0:a2:55:b0:f2:31:e4:9a:39:56:c5:53:
         d5:9c:94:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:26:29 2025 by rpki-client