Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
File: OBzr1XGBOUGOK6UEN01SgWI06es.mft (raw, json)
Hash identifier: /2MqlVo5e/YcI7hZEnlxU4MkfSWGfb5sgHnPF6TDj5E=
Subject key identifier: 9E:4B:78:B5:26:57:AB:6A:6A:93:07:3C:E9:87:4C:34:56:3D:78:C7
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Certificate issuer: /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial: 16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
Manifest number: 03CA
Signing time: Sat 12 Apr 2025 03:29:23 +0000
Manifest this update: Sat 12 Apr 2025 03:29:23 +0000
Manifest next update: Sun 27 Apr 2025 03:29:23 +0000
Files and hashes: 1: DS-93cMsrIm3awZIi4V5jjX8-qk.roa (hash: HrOCW7TZ3YwOzeh3efsY3YaVpetAB6BfcHnERnFQD+w=)
2: GgUZEPVhyK_6FVgAf4bzt_-cLv0.roa (hash: Pp0da5eBdWHpJ4/VdoauLk5b22QSBOkR+rCNM9Mhw4U=)
3: HMF1z7XBFWxb3woLbWXsbg1Wq3Y.roa (hash: HOtMIbM/kxUqbEjceCgxJo27QyYDncqveAiwIHBs3cU=)
4: Nsvran39qENj7C6G_K2RuqN3Pk4.roa (hash: 0BJTahg3PKdwX+kqmS2cX6XxmhQPPhElhDfcIp0M5qs=)
5: OBzr1XGBOUGOK6UEN01SgWI06es.crl (hash: ugm/eCiiYD8PXmsHqvWiRnTzFMIqwgecPeYj+vyBz1s=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22 (0x16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
Validity
Not Before: Mar 15 01:32:42 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=9E4B78B52657AB6A6A93073CE9874C34563D78C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:17:cc:4e:ea:6a:1e:20:d8:aa:19:c8:98:a2:
c6:4e:28:e0:7b:4d:d7:50:fe:aa:24:5a:18:1a:ee:
92:1f:65:a3:95:7c:a2:d1:95:02:21:80:9b:67:b1:
24:18:45:d5:ff:a1:7e:a6:14:2b:f8:c1:d6:47:18:
45:e9:0c:2d:5d:75:47:c5:1a:de:bd:81:d0:76:38:
d5:8d:46:77:22:1c:0e:29:62:30:a5:44:63:8e:f1:
ef:7d:30:70:21:39:ed:09:a6:e8:24:ef:1f:12:f1:
c7:0b:7f:7a:97:0e:f7:88:39:63:11:f1:f3:10:7c:
ce:c1:52:66:da:dd:26:40:ee:ab:cc:d8:ec:73:27:
f8:e0:a7:c1:ac:82:0f:4d:dd:83:b9:d4:d2:0b:89:
c7:2a:c6:45:6f:22:57:50:8b:b5:bc:51:c2:24:3d:
c5:1d:9c:a0:46:89:a9:e4:4a:75:a5:c0:27:4d:7e:
c2:4d:91:a9:49:dc:2f:ec:ae:a8:7a:f6:4d:3f:b3:
59:11:0a:a2:12:36:dc:1d:24:df:4a:1e:b4:d1:ee:
ec:dc:54:ba:28:2a:66:1a:44:3e:67:38:36:bb:34:
6d:b2:20:39:9d:54:21:4f:28:57:c5:72:10:db:21:
c9:e9:b2:a4:56:01:8f:2e:95:10:a3:d7:bb:49:f9:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4B:78:B5:26:57:AB:6A:6A:93:07:3C:E9:87:4C:34:56:3D:78:C7
X509v3 Authority Key Identifier:
keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:83:7f:6e:d5:af:46:19:7a:b2:49:73:7a:57:81:fa:f2:67:
56:68:47:2f:38:1a:a0:4d:44:5f:31:2f:75:36:d7:11:10:62:
a5:5b:0d:40:91:0d:77:4d:10:22:21:91:f6:07:26:8a:0d:e3:
29:0b:f2:ef:d6:47:1c:77:cc:f3:50:33:eb:a0:14:ea:2c:14:
9a:50:f3:65:7f:57:0c:f0:84:3e:80:50:46:be:4e:dd:91:7d:
08:58:0f:0a:c6:78:ad:61:bd:44:67:5f:9d:4e:8a:c1:54:9b:
78:5b:31:a7:44:8d:7c:1e:7f:16:ad:e3:af:7d:2a:d9:66:66:
ba:29:1c:8f:33:7d:f4:09:fa:98:51:2f:d9:6c:13:c5:b5:e3:
55:39:10:c0:53:5b:2a:73:b1:07:7f:76:04:2a:a3:bc:ed:48:
d3:ec:04:5c:af:b3:48:a3:ef:f9:09:a5:c9:9a:5a:0c:56:4a:
96:8f:10:ce:58:15:06:71:e1:13:36:95:61:0c:48:4c:11:55:
f5:2b:a9:f2:24:cf:7a:3e:57:ae:75:91:0b:1c:da:82:32:90:
f3:92:e9:22:5e:b7:f2:da:07:4d:de:b9:a7:21:12:81:3b:68:
4a:9b:6b:53:e9:13:a9:24:8f:12:25:e6:f4:65:0a:04:36:95:
03:39:e1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:27:50 2025 by rpki-client