Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
File: RsHMLWUoO-OBBxn16hqHkDA6Ink.mft (raw, json)
Hash identifier: VmDjFlNaGkdBeCsdP00+3huprLtFheyRUdYmnBjPmNQ=
Subject key identifier: ED:31:59:CE:9B:5C:FA:CF:0F:C5:DC:F7:0D:BB:BB:73:06:CF:24:B9
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Certificate issuer: /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial: 1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
Manifest number: 03CE
Signing time: Fri 11 Apr 2025 07:17:25 +0000
Manifest this update: Fri 11 Apr 2025 07:17:25 +0000
Manifest next update: Sat 26 Apr 2025 07:17:25 +0000
Files and hashes: 1: HbbxFcGk6epDKfPJZ5m9QY1alNw.roa (hash: lKlh3F0/3yMbKs4okc363/DhZtNEQG231y/MjgGzjms=)
2: P0F-ckXxBE3CebHxI3EQhfXGVdc.roa (hash: LC9xjF7IZHi/dvHNstdhrypDnCfBR2i3nPQ1quLP0CE=)
3: RsHMLWUoO-OBBxn16hqHkDA6Ink.crl (hash: FMHCSGRSZrd9hqLTcLJNpb+FyityjIVr4+G5DKhLP+I=)
4: kli7G8D_2RNIBStyXSbXW8Z0zxo.roa (hash: J1zdt+NW/EjOb9UzfmJwbcSO18RsKklhwYzwL30UmM0=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27 (0x1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Validity
Not Before: Mar 15 01:32:24 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=ED3159CE9B5CFACF0FC5DCF70DBBBB7306CF24B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c5:64:0f:20:84:01:50:a1:be:7d:e4:09:b7:
88:e5:00:b2:b2:ee:01:b2:4c:ef:98:f1:d4:f5:73:
5a:c0:14:75:b2:33:c0:41:47:5e:8f:16:6a:2f:73:
18:c9:74:d6:8d:23:c0:7d:67:aa:e6:26:1d:22:d3:
72:d2:89:49:5d:33:17:4c:d3:72:71:db:0d:5b:03:
1d:48:a3:9f:77:ee:a0:93:81:f5:48:82:da:92:cf:
d6:e3:65:4f:d5:1d:83:02:0a:82:eb:42:f9:9d:19:
ce:44:b8:51:91:89:8c:36:e3:76:59:5a:c6:34:31:
d8:8e:94:c7:a2:34:48:7b:fa:a4:44:77:5e:41:8b:
0a:cf:64:0a:70:9b:37:0b:d6:a7:96:29:75:3a:49:
1a:06:b5:fa:5c:61:1e:12:8f:9d:35:f9:4a:13:b3:
f0:34:e5:67:02:ff:98:b0:b1:96:e9:7a:5e:51:a9:
89:99:a2:57:5e:6f:fa:7d:ca:6d:fb:3e:63:35:ff:
51:e0:eb:43:24:65:0c:8c:02:c5:85:1e:13:4a:86:
ce:06:b6:b7:4e:80:82:35:9e:e4:9c:0d:94:e9:5c:
71:52:b6:f7:6a:83:c5:0e:c0:ba:11:92:18:45:d8:
5a:49:98:fb:6e:f5:8d:ba:67:2f:8e:18:b7:b8:28:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:31:59:CE:9B:5C:FA:CF:0F:C5:DC:F7:0D:BB:BB:73:06:CF:24:B9
X509v3 Authority Key Identifier:
keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:84:fb:e5:ab:d6:d3:da:dc:1b:96:93:bb:82:39:dc:b0:
2e:71:50:0f:fe:f7:3e:fd:f0:5d:45:d6:7a:9f:0a:e2:be:31:
1a:fc:01:da:b5:ca:1d:d4:7f:80:08:52:02:5d:a4:7f:40:85:
03:07:e5:90:9b:a1:51:70:ad:1e:c3:c2:16:11:75:19:63:d5:
13:9a:bb:96:f9:23:fc:a5:69:55:58:cc:98:48:12:39:57:8b:
9e:ea:47:fb:23:c0:a4:f4:1c:ba:a5:3a:6c:16:88:e5:1d:a2:
07:c4:b5:a3:33:29:8b:34:30:f2:89:49:00:49:20:71:b0:28:
15:2c:55:ea:58:ae:fc:fa:8f:7b:08:ef:e5:c3:b6:eb:5c:39:
d0:71:01:ff:7a:34:8f:96:bb:21:9c:64:f8:33:ab:95:40:a4:
f9:8a:5b:f6:e1:d6:8d:71:cc:f6:2f:91:30:0f:9b:34:f9:ef:
79:80:77:5c:df:95:5f:26:3f:82:34:af:e0:70:10:81:23:d3:
23:cc:6d:36:bb:9e:a1:e9:2b:18:6b:72:a9:54:b3:a5:fa:d7:
c2:4f:28:43:b9:a3:61:b1:52:f3:30:4d:80:68:89:3c:c2:3e:
25:03:86:f8:ee:22:c1:36:b4:26:c3:62:f1:d1:81:52:43:5b:
0b:4e:b5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 17:19:35 2025 by rpki-client