Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
File:                     VrJOODhFr-fapjHAHYD7UWw0i7A.mft (raw, json)
Hash identifier:          FA4kvCCAL/O50POCPBHNErg6NWGEI3fT0CRfFSo4Ddw=
Subject key identifier:   E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Certificate issuer:       /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial:       08
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
Manifest number:          016E
Signing time:             Tue 03 Jun 2025 21:19:09 +0000
Manifest this update:     Tue 03 Jun 2025 21:19:09 +0000
Manifest next update:     Wed 18 Jun 2025 21:19:09 +0000
Files and hashes:         1: K03-WjLYOd1HsPB7C9phAG2f_Is.roa (hash: AS1r+GhsGIxu7cJEOtlfjdwuvT/ekIwzgGxIvuZ9x/0=)
                          2: TpzjShFDkh5n2KnbnTSM1bc4-78.roa (hash: 9lgomC8CNJnaCGR3udsJYmIRXb/RDExg+GTPgNguKDo=)
                          3: VrJOODhFr-fapjHAHYD7UWw0i7A.crl (hash: apS6J5QHt2sQamlHT7gUwBzKadqbEyBVtBjPX9XHYc4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
        Validity
            Not Before: May 23 10:05:30 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=E2259B1529EE6A496D36569FFBCA2ECD646F56C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:4d:65:7b:41:bc:d8:34:6d:80:33:2b:d7:
                    ee:38:79:39:d0:82:10:6a:1b:e2:ee:a8:40:b4:5c:
                    44:69:0a:e6:4f:20:a9:43:33:fc:f8:ec:38:57:5f:
                    70:fd:41:9d:78:a7:44:45:69:22:9b:6b:bb:2e:d9:
                    86:3c:f2:f0:20:cf:03:7e:a3:c5:1c:19:b0:51:d3:
                    7c:20:7b:a6:5f:15:e9:03:4e:47:d2:cf:a6:32:3c:
                    e2:f8:f6:f3:14:67:d1:ce:f5:b9:51:ad:54:a8:53:
                    10:53:e3:7b:12:b1:20:87:33:eb:e0:58:45:a7:1e:
                    55:10:40:f2:43:a6:a8:a6:35:7d:2e:a6:9f:c2:cf:
                    da:b5:46:2c:98:6d:9f:77:58:ac:a4:d6:e8:d6:b3:
                    74:8e:c9:6f:94:42:ce:3f:af:d8:ed:39:39:fe:24:
                    e1:1a:6c:7a:7a:94:4a:48:79:a6:fe:b7:c9:23:fc:
                    3a:c4:40:14:5e:b3:af:e5:43:29:d4:c1:d9:47:22:
                    e9:8e:de:90:a7:77:58:7f:1d:db:1f:30:ba:84:2f:
                    f7:4f:21:65:10:7d:a2:ed:d7:20:a3:cd:ac:c0:90:
                    c1:fa:29:dd:3e:24:c0:a8:d9:74:40:26:ee:a6:34:
                    f0:06:36:91:18:61:14:6a:80:48:b5:7c:8c:c0:45:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4
            X509v3 Authority Key Identifier:
                keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:74:31:d8:0f:e7:cd:ca:99:2c:b8:f6:e0:64:1b:a3:55:07:
         57:21:c6:fa:2f:65:12:e7:e2:1d:42:73:7c:fa:7b:c0:73:52:
         41:bb:eb:24:1c:55:9f:af:5a:5c:f7:fe:e1:20:65:d2:87:0a:
         fd:aa:3f:42:c5:c6:25:41:cf:08:e9:89:cd:45:4a:84:35:e9:
         68:59:6c:79:55:f5:a8:bb:c3:57:ac:65:6f:30:44:a8:6c:ba:
         b9:95:2a:c8:80:02:fd:65:be:d8:38:92:7c:7a:e9:7a:77:8b:
         c6:4c:c8:f7:8d:35:fd:52:20:c5:c9:ca:4d:ca:b6:99:4e:56:
         63:fc:c8:69:60:d7:71:2d:5c:36:00:bf:52:c5:e6:26:09:4a:
         f5:d0:9a:a5:42:32:5e:d9:63:0f:c6:e9:f1:2a:51:ef:6b:fe:
         69:1d:65:54:3c:04:dd:4f:14:d2:6f:e9:2f:bf:b3:3c:99:09:
         9d:2f:75:67:8d:1b:1f:a3:62:38:e9:33:27:a0:3d:b9:bf:42:
         e6:c2:a0:ec:b4:c7:d1:c6:12:5f:6b:40:c8:4e:a0:75:91:e4:
         49:75:2b:48:ac:9c:12:0e:22:9f:c2:f1:d4:02:c0:72:6a:96:
         a5:e7:c5:6a:09:e6:88:71:e7:eb:43:ad:6a:d6:3c:92:34:01:
         7d:43:6b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:10:11 2025 by rpki-client