Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
File:                     5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft (raw, json)
Hash identifier:          SHuOJztuHGUEYJujz8O8gSwEHRHp/W3+/9avjwD3Dhw=
Subject key identifier:   00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
Authority key identifier: E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A
Certificate issuer:       /CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
Manifest number:          0519
Signing time:             Tue 03 Jun 2025 21:03:01 +0000
Manifest this update:     Tue 03 Jun 2025 21:03:01 +0000
Manifest next update:     Wed 18 Jun 2025 21:03:01 +0000
Files and hashes:         1: 5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl (hash: pzl7kipOCxSC11aVOAmcTX/h50sX0oXPGUO/M9rQcvI=)
                          2: GMGXClmRK69ssW1jL41ioZ66ly8.roa (hash: BVVU8bEQWe+xSUyemjUgQ94JI4mtxUF63WySv6Rdy/E=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E54D0A732CE1C6514A34A3D06E916B1C4FB8AA0A
        Validity
            Not Before: May 23 10:02:01 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=00E74B3F7EC4135FF9161F7622E988E7DD761F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:29:8c:37:d1:91:b3:d3:f5:0f:ab:ac:e8:
                    9f:b6:2d:36:f5:12:6e:68:4f:ba:b4:7c:47:85:31:
                    a4:5c:5d:21:a1:c6:8b:19:cb:0c:f6:21:93:49:76:
                    db:cf:b1:7b:be:ef:18:3a:72:e3:bf:fa:22:f7:37:
                    43:e7:1a:af:ff:18:b0:18:52:15:52:a5:04:28:c8:
                    01:80:02:75:b6:05:89:34:19:96:c9:ec:89:73:d8:
                    d0:04:e2:81:2c:c0:9c:98:c9:e4:46:65:47:3e:7e:
                    a2:70:7d:68:09:e5:aa:75:ab:d3:65:fc:f2:c4:20:
                    0d:f9:13:a9:ba:c3:b7:43:91:1c:5b:e4:6c:5f:1a:
                    12:bd:1b:b1:2a:94:fa:bb:1d:b0:b5:4c:75:d2:98:
                    eb:38:25:39:93:03:ba:f0:9f:92:f5:3b:e9:da:92:
                    c1:13:68:b0:17:e3:4a:62:e2:ee:e0:f6:74:fc:d6:
                    7d:62:fb:00:db:e3:a0:16:31:eb:45:c4:9c:c3:af:
                    31:66:23:46:2e:59:b5:6e:70:a8:c8:36:75:f5:45:
                    6c:79:a9:af:10:86:e8:fe:4a:9c:fd:9a:73:73:45:
                    36:1d:87:6a:bd:84:5c:a3:bc:0a:6e:6c:bd:59:3c:
                    29:94:b5:c3:0b:65:17:a2:fd:22:8c:cb:bb:2c:41:
                    82:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:4B:3F:7E:C4:13:5F:F9:16:1F:76:22:E9:88:E7:DD:76:1F:12
            X509v3 Authority Key Identifier:
                keyid:E5:4D:0A:73:2C:E1:C6:51:4A:34:A3:D0:6E:91:6B:1C:4F:B8:AA:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5U0KcyzhxlFKNKPQbpFrHE-4qgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/96/5U0KcyzhxlFKNKPQbpFrHE-4qgo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:24:08:b3:6a:bc:29:71:a9:51:71:05:e5:94:2e:15:0a:3c:
         39:14:bf:11:39:e9:b4:77:05:42:60:b0:6f:d1:94:40:b1:e1:
         9f:19:7a:2b:88:8e:c2:4d:e1:b6:b0:e6:a4:e8:af:d6:ce:81:
         dc:86:02:ad:e3:cd:fc:b9:44:0c:a5:5a:0d:8b:bd:e5:77:1c:
         22:ee:fd:a3:98:cb:98:b0:91:cc:20:81:6b:76:97:cf:fd:47:
         40:b2:19:e8:fd:36:2d:47:7d:07:85:4e:64:07:da:9f:26:24:
         dc:12:4d:ec:4c:f7:a9:b0:b5:8f:14:3d:b2:fe:4f:33:bd:9f:
         16:ff:60:15:e4:4d:d4:23:19:87:dd:56:4f:77:7d:49:c4:d8:
         9e:f0:19:38:e6:95:df:92:30:f3:66:33:83:56:6b:ca:27:f1:
         4f:7a:da:7d:1c:b5:1f:ec:df:eb:ec:5f:3a:33:97:6e:e1:76:
         c3:44:f9:a6:30:58:9a:7a:fe:06:ae:77:65:3c:a2:04:7e:e6:
         15:a7:2f:bc:2d:79:d4:e4:d0:89:f7:e2:96:32:7e:e4:dc:51:
         25:67:cc:cd:42:c5:94:0a:dd:01:32:03:31:62:32:94:86:27:
         c4:1f:6e:9e:63:64:4d:03:0f:dc:5f:8f:da:3d:c6:61:bf:21:
         d6:d6:09:ff
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNTRE
MEE3MzJDRTFDNjUxNEEzNEEzRDA2RTkxNkIxQzRGQjhBQTBBMB4XDTI1MDUyMzEw
MDIwMVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMDBFNzRCM0Y3RUM0MTM1
RkY5MTYxRjc2MjJFOTg4RTdERDc2MUYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALsEKYw30ZGz0/UPq6zon7YtNvUSbmhPurR8R4UxpFxdIaHGixnL
DPYhk0l228+xe77vGDpy47/6Ivc3Q+car/8YsBhSFVKlBCjIAYACdbYFiTQZlsns
iXPY0ATigSzAnJjJ5EZlRz5+onB9aAnlqnWr02X88sQgDfkTqbrDt0ORHFvkbF8a
Er0bsSqU+rsdsLVMddKY6zglOZMDuvCfkvU76dqSwRNosBfjSmLi7uD2dPzWfWL7
ANvjoBYx60XEnMOvMWYjRi5ZtW5wqMg2dfVFbHmprxCG6P5KnP2ac3NFNh2Har2E
XKO8Cm5svVk8KZS1wwtlF6L9IozLuyxBglcCAwEAAaOCAjswggI3MB0GA1UdDgQW
BBQA50s/fsQTX/kWH3Yi6Yjn3XYfEjAfBgNVHSMEGDAWgBTlTQpzLOHGUUo0o9Bu
kWscT7iqCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTYvNVUwS2N5emh4bEZLTktQUWJwRnJIRS00cWdvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNVUwS2N5emh4bEZLTktQUWJwRnJIRS00
cWdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzk2LzVVMEtjeXpoeGxGS05LUFFicEZySEUtNHFnby5tZnQwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAZJAizarwpcalRcQXllC4VCjw5FL8ROem0dwVCYLBv0ZRAseGfGXoriI7CTeG2
sOak6K/WzoHchgKt4838uUQMpVoNi73ldxwi7v2jmMuYsJHMIIFrdpfP/UdAshno
/TYtR30HhU5kB9qfJiTcEk3sTPepsLWPFD2y/k8zvZ8W/2AV5E3UIxmH3VZPd31J
xNie8Bk45pXfkjDzZjODVmvKJ/FPetp9HLUf7N/r7F86M5du4XbDRPmmMFiaev4G
rndlPKIEfuYVpy+8LXnU5NCJ9+KWMn7k3FElZ8zNQsWUCt0BMgMxYjKUhifEH26e
Y2RNAw/cX4/aPcZhvyHW1gn/
-----END CERTIFICATE-----
Generated at Wed Jun 4 02:00:15 2025 by rpki-client