Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
File: ARpVb_xLo565Clkko2r9o36YGbY.mft (raw, json)
Hash identifier: U/d9oJlb6eMk7OfUcE9YfQ1tC0PIuxCHJDssYBAGZQA=
Subject key identifier: 12:17:3C:B0:F2:BA:79:59:4D:98:2B:D0:90:64:5B:6B:C4:21:7E:4C
Authority key identifier: 01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Certificate issuer: /CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Certificate serial: 0F
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
Manifest number: 03B5
Signing time: Sat 12 Apr 2025 02:47:58 +0000
Manifest this update: Sat 12 Apr 2025 02:47:58 +0000
Manifest next update: Sun 27 Apr 2025 02:47:58 +0000
Files and hashes: 1: 8jG1QtT4FPdTwC0Lp5d9RgEv2fs.roa (hash: PtvrTgRpvH+bJkUmu78U+DNl1e1D4wYfM41FlEBYtKA=)
2: ARpVb_xLo565Clkko2r9o36YGbY.crl (hash: ImRy+w2G4eNM/B5U3U5zUeCdu+q488zu8K6CJIO5hms=)
3: Y1iQqRtoIDmAaQD9Z8jsm4iNF1g.roa (hash: lcUcmR0eNlYxOdnnO+6jYJX4uPd32kCkSjntTFqmRZY=)
4: mwVQd-bjes8bYtFqztuBYJdZ3Lg.roa (hash: Cuglm+LS4FCV/d7+bQ87W1et0/HT6Hi8gsJ8Yv+rNKU=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Validity
Not Before: Mar 15 01:32:54 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=12173CB0F2BA79594D982BD090645B6BC4217E4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6a:c9:90:df:33:7b:c8:7d:c4:44:01:2e:27:
cc:05:1d:36:61:28:0d:2d:05:1a:6f:34:ce:f8:29:
ee:9e:a5:4c:82:30:df:ad:02:c6:07:8f:1e:bf:ec:
3d:f0:f1:87:e6:08:7d:a9:be:ac:57:a3:6e:30:3d:
c2:1a:21:0b:08:39:0f:13:8d:5b:a9:c5:6a:6b:d4:
1b:38:1d:b7:29:d3:d5:16:27:24:e4:f3:0d:99:b1:
2e:69:34:3e:b9:86:3c:72:57:58:90:85:94:89:f2:
10:83:1a:32:20:48:d7:4e:ca:54:83:b5:b0:96:99:
a1:49:33:01:19:a6:21:84:53:f6:e5:c6:0d:98:37:
eb:66:60:5c:0d:60:d7:b9:15:d0:36:bb:42:e4:cf:
6e:82:1e:ab:4c:46:35:fb:f7:e7:3a:61:0e:47:08:
8b:69:bd:2a:67:20:bb:36:ac:03:0a:e4:83:8c:6e:
07:47:44:0f:71:75:d3:de:a3:90:56:72:09:8c:b7:
65:fc:24:c2:2b:4b:30:7a:31:d4:03:12:49:49:99:
ab:8f:94:02:06:1b:95:25:10:c5:a5:7c:42:30:71:
0d:2f:26:f9:c9:27:70:47:c0:dc:ad:4f:32:f4:bf:
95:f2:ee:58:a9:00:83:57:ec:60:79:ba:7a:2c:73:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:17:3C:B0:F2:BA:79:59:4D:98:2B:D0:90:64:5B:6B:C4:21:7E:4C
X509v3 Authority Key Identifier:
keyid:01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:4e:33:da:5a:a4:6f:ef:c5:3d:77:0b:6b:84:30:a3:1d:c2:
24:ca:15:04:f8:be:10:42:16:bd:12:77:47:e8:00:6d:6e:32:
25:10:7d:10:c5:30:6c:51:51:22:0a:f9:22:62:6c:1a:91:1c:
93:a9:8d:24:4f:7b:e3:f7:0f:95:da:8a:54:29:fe:f5:16:a9:
29:53:57:fd:62:20:08:ef:4c:df:f7:94:3c:2a:06:83:f0:fc:
a5:06:de:d3:32:14:78:dd:7d:95:7f:04:a7:8c:18:8d:e5:12:
60:b3:45:a6:4c:3d:e1:cf:0c:fc:6f:fc:72:e7:98:12:15:24:
c9:51:89:68:9d:e7:ab:68:5e:08:f9:0d:1f:32:3f:33:ac:94:
31:f5:b3:7c:d0:0a:09:a2:ff:27:e8:d5:4d:25:b0:54:2d:e8:
95:d2:5c:0c:05:f1:3a:e2:04:1d:b3:60:3f:ea:19:29:f4:a7:
77:75:65:1b:e7:cb:c2:ef:00:a7:0a:70:e3:5c:eb:01:41:bb:
56:06:d4:c5:0b:7a:86:35:45:52:1f:dc:98:1e:57:8a:e0:43:
9b:b2:8e:1f:42:1d:6e:24:8e:63:1b:e4:fd:bd:8b:c3:88:5e:
2e:70:52:43:d7:b2:f3:74:47:d3:7f:ce:0c:19:3b:90:f4:40:
ec:ca:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:38:37 2025 by rpki-client