Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
File:                     7HBrbRGl7MjB9otL6m6OmoKgOv0.mft (raw, json)
Hash identifier:          16sbTJdsPrDOMLJqDFsjbqRFXJVRcuOZBa08JFxL2m0=
Subject key identifier:   29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
Authority key identifier: EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD
Certificate issuer:       /CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
Certificate serial:       41
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
Manifest number:          0480
Signing time:             Sat 05 Apr 2025 13:25:49 +0000
Manifest this update:     Sat 05 Apr 2025 13:25:49 +0000
Manifest next update:     Sun 20 Apr 2025 13:25:49 +0000
Files and hashes:         1: 7HBrbRGl7MjB9otL6m6OmoKgOv0.crl (hash: 9cjZbR713NW9UpPrNMy7kzzU1Lw9cIP3odaswtzDF/0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65 (0x41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC706B6D11A5ECC8C1F68B4BEA6E8E9A82A03AFD
        Validity
            Not Before: Mar 15 01:34:46 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=2959DC4EB0C9ADEFA8D7DF7A4C54E93645BEB8EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:92:3e:f8:4b:13:2b:40:7e:43:99:98:60:d2:
                    7c:18:9a:07:55:34:4a:7f:f9:d2:d2:28:7f:e1:37:
                    41:30:58:31:63:52:0a:1c:7c:19:a0:e7:ed:fe:29:
                    80:df:cc:60:88:71:7e:ae:3c:ba:7c:23:52:d9:52:
                    9d:82:65:09:3b:84:c7:2c:24:76:3c:05:c1:db:2a:
                    56:ca:18:ed:b0:04:15:9c:08:25:7f:36:a8:e7:d8:
                    33:2f:37:39:84:71:10:9d:5e:cd:d5:89:9c:50:e6:
                    c1:57:a8:85:60:62:a3:2c:06:55:8c:32:52:51:f8:
                    98:78:c5:fe:17:9a:d4:1b:62:7d:a8:2c:57:1a:9e:
                    91:b2:60:62:97:41:1f:e7:f2:0a:8f:cb:5c:46:f9:
                    5c:40:0c:73:25:4d:c9:05:76:77:56:6f:20:02:2e:
                    f9:b9:1b:84:68:23:a3:af:68:a4:f6:28:c6:d1:5d:
                    35:12:cc:3a:0a:9e:13:d1:e5:62:8b:9a:2d:16:88:
                    a6:c3:71:3b:c2:7d:8f:69:3a:05:48:08:13:f5:1a:
                    77:26:0a:60:76:f7:fd:01:3e:08:e1:47:6a:79:67:
                    44:a3:85:e3:f1:5b:30:22:d3:f7:f6:bc:d4:56:ea:
                    0b:d5:53:5f:73:fe:af:dc:ae:f7:45:8a:40:19:e0:
                    fd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:DC:4E:B0:C9:AD:EF:A8:D7:DF:7A:4C:54:E9:36:45:BE:B8:EC
            X509v3 Authority Key Identifier:
                keyid:EC:70:6B:6D:11:A5:EC:C8:C1:F6:8B:4B:EA:6E:8E:9A:82:A0:3A:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7HBrbRGl7MjB9otL6m6OmoKgOv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1109/7HBrbRGl7MjB9otL6m6OmoKgOv0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:72:e9:2d:80:9a:2d:d8:3c:82:6b:b3:a6:f5:2f:92:65:a1:
         54:f8:bd:9c:9a:ba:33:4f:33:2e:7d:ae:8f:64:37:c3:bf:88:
         fc:b5:6f:4c:2d:fd:49:c5:27:9f:df:c6:1d:2d:ce:8c:5b:29:
         af:dd:e4:a7:e1:fb:5c:00:fd:15:a5:86:a0:84:2c:d1:c8:82:
         8d:c7:7e:4a:0d:14:fc:f7:bb:30:35:92:21:cf:8e:da:25:90:
         b3:05:eb:23:e7:a4:86:3c:8c:8d:ea:63:f9:fe:05:62:3e:2e:
         31:63:14:3c:bb:76:c7:c4:8a:d9:4a:cf:b5:b8:56:93:70:58:
         e0:af:05:46:ea:90:f1:15:ac:0c:f0:ac:22:27:8d:2c:c3:5d:
         79:a6:47:00:49:a7:2f:8c:87:24:25:ae:df:49:1a:0e:c5:33:
         70:4d:21:e0:d8:cc:8a:d2:5e:ec:bc:40:75:66:0e:d7:89:1d:
         ea:5d:45:6c:10:61:01:35:fd:9b:0d:ec:62:a9:5f:4a:b0:58:
         df:2b:9f:e8:09:6c:a8:f0:46:ef:3e:af:f4:08:a1:2d:08:f8:
         93:9e:2c:4e:da:1c:0c:39:b7:0c:8d:ed:7c:9e:50:27:2a:b9:
         0c:a9:07:0e:ca:95:34:33:86:a4:bd:e4:7b:ab:fe:f4:7c:75:
         ef:4b:e3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:17 2025 by rpki-client