Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
File:                     EjAdQAli3Zh6PHuDozZih9R_hv0.mft (raw, json)
Hash identifier:          TEWoqNz9IQQy//gmuHq7OnVMYdMsfkCT+y+DYJdrQac=
Subject key identifier:   26:37:6F:6C:A0:B3:A1:72:5C:07:5B:55:C3:9F:C0:61:1C:34:F5:68
Authority key identifier: 12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD
Certificate issuer:       /CN=12301D400962DD987A3C7B83A3366287D47F86FD
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
Manifest number:          56
Signing time:             Mon 21 Jul 2025 08:06:00 +0000
Manifest this update:     Mon 21 Jul 2025 08:06:00 +0000
Manifest next update:     Tue 05 Aug 2025 08:06:00 +0000
Files and hashes:         1: EjAdQAli3Zh6PHuDozZih9R_hv0.crl (hash: NwrEAKgsxV0PIrstdMYQ/ewfuiJvU7sWxg4Topo1Hew=)
                          2: PSs_iPdv0kB0TeFZmmj4fb85VF0.roa (hash: 0W2n2b/omfEsy+JDCEJZ434/12q+gkCQTcWppdFIZUY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 07:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12301D400962DD987A3C7B83A3366287D47F86FD
        Validity
            Not Before: Jul 15 01:44:13 2025 GMT
            Not After : Jul 15 01:30:01 2026 GMT
        Subject: CN=26376F6CA0B3A1725C075B55C39FC0611C34F568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:b2:ae:84:fe:55:5a:4c:a4:33:ee:75:c6:
                    58:33:64:aa:59:15:6f:3e:03:12:bc:94:6d:a9:bd:
                    37:75:46:bd:a1:75:5d:d2:e9:df:40:ae:0e:97:7a:
                    fc:61:98:f8:72:22:5d:60:25:e4:44:b3:d5:d7:37:
                    9d:7e:ba:3d:73:83:c1:65:3e:bf:40:de:9a:12:d6:
                    7e:6b:66:a5:bb:b8:dc:a9:9b:12:06:27:0b:cd:dd:
                    43:99:5f:e9:f7:b7:a1:f2:9f:d6:fa:67:07:b3:bf:
                    01:94:d1:fe:97:d6:be:e6:26:ec:df:ed:c9:24:f7:
                    cd:29:09:0c:5a:7e:d4:cb:d1:11:76:72:30:fb:c4:
                    15:9b:75:7f:08:87:11:55:5a:85:0c:d2:95:20:2c:
                    e7:1b:14:8c:ad:43:ba:01:a5:ee:46:24:2e:9e:65:
                    12:82:e3:5a:19:57:57:8c:74:53:a9:91:11:8e:dc:
                    9c:d9:e2:3f:92:4c:06:d1:cc:0b:ef:3b:2b:90:80:
                    2a:49:77:a7:cf:02:64:1e:67:0d:60:f0:89:fa:f0:
                    a1:67:44:83:ae:6e:db:76:a3:ee:33:c0:c0:c1:c9:
                    07:3a:0b:6c:c3:80:0b:aa:7a:4c:70:0c:cc:44:e8:
                    12:a5:54:cc:6c:94:27:60:89:d1:80:c8:dc:51:6e:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:37:6F:6C:A0:B3:A1:72:5C:07:5B:55:C3:9F:C0:61:1C:34:F5:68
            X509v3 Authority Key Identifier:
                keyid:12:30:1D:40:09:62:DD:98:7A:3C:7B:83:A3:36:62:87:D4:7F:86:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EjAdQAli3Zh6PHuDozZih9R_hv0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1164/EjAdQAli3Zh6PHuDozZih9R_hv0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:37:26:18:10:7f:1f:d0:a9:ec:de:63:1b:2d:57:08:ab:
         e4:45:85:ce:5f:65:b3:eb:7f:c7:35:43:31:d4:79:cf:93:f2:
         a9:94:fd:14:cf:83:87:8f:e4:33:ce:02:16:52:e7:ce:02:fc:
         57:6c:2d:7d:a0:19:e0:bd:6e:e8:01:0c:a8:6d:58:36:aa:8a:
         cb:92:c0:59:52:c5:ad:65:97:de:01:f5:fe:54:d1:66:93:74:
         7f:3f:53:c5:6a:b6:64:7a:86:6a:25:8d:aa:ea:af:99:54:85:
         bd:52:ea:41:74:69:06:1b:69:66:c6:74:60:36:d1:4d:18:2f:
         2e:2d:b1:c4:f7:9b:17:b2:da:99:72:1c:d0:a4:10:46:aa:73:
         ab:30:92:af:68:ca:7e:15:d1:7c:5f:16:f5:95:ba:e6:33:c4:
         d4:b8:29:35:5f:69:3d:6e:3c:02:ce:eb:00:3e:79:ce:dd:b5:
         63:a7:47:05:7f:2f:94:d6:9a:25:af:3c:bb:57:72:37:db:38:
         b1:18:e9:15:2d:51:45:d1:6e:e3:75:95:ed:5a:33:cc:1e:84:
         f1:d9:27:d9:70:a0:9d:66:e2:bb:7f:94:61:49:5e:73:6c:23:
         92:22:05:67:5b:50:7f:10:1a:4c:dd:9c:b6:c2:81:cc:5c:9c:
         97:53:d1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:10:49 2025 by rpki-client