Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
File: EGsfPWSeWiWqE0DBi9anwkzzavY.mft (raw, json)
Hash identifier: 0WMXwDDMZHgmNziL9p1DUyiQdylkZkbXNso4lpXd94g=
Subject key identifier: 9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial: 70
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
Manifest number: 1650
Signing time: Mon 14 Apr 2025 07:24:52 +0000
Manifest this update: Mon 14 Apr 2025 07:24:52 +0000
Manifest next update: Tue 29 Apr 2025 07:24:52 +0000
Files and hashes: 1: EGsfPWSeWiWqE0DBi9anwkzzavY.crl (hash: acW8BGVuJJ37cPP+4zC9rVMlZXOcY4T6KExE/DizPCw=)
2: XkNX0El5xzR07FjbNsc0g7PrxFE.roa (hash: 6clNMHm24kJkD6tXfLLjW9b3u9pKnXzVwB29OaxWk2k=)
3: gSJzmrzjii96IsV1ZJzkpUAG5YI.roa (hash: w2W7AdYvwPJA9Q2VBPHBfydkTPuRqf/Amo+/ITsnMsA=)
4: gtQK8JECG-3DawQ4sBR8H346b_4.roa (hash: UiJpUdwK/ebHHAOpREeiNfhkvcS1zlhxLYITgAv6PtA=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Validity
Not Before: Mar 15 01:37:50 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=9F4394A17451280729796239152E4FFC37A646D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ff:8a:3d:4c:8f:7c:33:f5:32:0e:54:25:b7:
62:b1:9c:7b:f5:e0:99:fb:4b:b7:43:0c:6b:5f:9c:
3a:4f:fb:ed:39:aa:01:c6:96:1a:a6:9f:69:6b:04:
2c:6c:fb:3d:08:05:bb:4f:9b:df:b3:f6:26:fa:f0:
f2:a4:00:bf:a6:e5:2c:f3:73:13:3a:ce:25:27:3b:
39:67:64:71:bb:7d:86:36:77:79:ed:09:49:b0:e3:
1e:d7:58:49:d5:18:d1:13:1a:95:b0:ef:86:ef:e5:
42:8f:41:29:23:44:ad:64:21:29:7f:12:8a:35:5f:
f8:be:f1:1d:92:7e:83:40:6f:ad:13:7c:d5:c6:43:
b3:df:03:5b:70:58:9b:fb:b8:62:95:2f:6d:0b:41:
6f:5f:09:10:23:aa:9c:f7:0a:1c:37:a6:b5:72:99:
53:54:3f:97:f9:79:8b:d0:17:b1:dd:f8:f1:a0:e3:
cf:c3:9d:d9:d4:92:50:f4:fe:96:89:a3:6d:bd:9f:
35:55:f0:4c:df:74:1d:13:10:9a:b1:ee:d0:f4:40:
2d:6b:19:14:78:a9:39:57:3a:5d:2d:62:a5:d4:34:
88:f0:da:db:48:5f:aa:6e:d1:ec:a8:8c:48:26:b2:
c8:f5:d5:1f:66:d3:81:56:24:55:69:65:67:8d:46:
4e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7
X509v3 Authority Key Identifier:
keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ab:40:19:ce:d6:69:e1:66:20:1c:7c:20:aa:ec:25:8f:c4:2e:
81:b4:00:25:62:42:8b:a6:0d:ab:0c:d0:3c:d7:6e:0f:9b:19:
d1:3a:12:4e:23:ec:0f:b1:32:cd:82:38:09:f6:34:a2:96:3d:
24:f3:00:36:a0:05:ef:0c:d0:af:e3:ef:39:e5:8c:6c:6a:32:
83:35:1b:b9:e4:7c:41:7a:26:e5:5b:97:39:53:d9:bb:eb:40:
4f:8c:36:52:bf:c4:72:81:1a:0a:87:f3:ad:27:1f:4e:21:ce:
2b:ff:38:b4:15:a2:9f:a7:ad:b7:34:57:45:c2:74:ba:dd:28:
f9:da:50:08:47:a7:ea:68:62:67:d5:b3:95:69:6c:6d:3d:35:
fb:08:82:f9:61:fe:ed:17:7a:50:39:1f:09:10:82:d8:21:fb:
fd:7a:6a:53:fd:9d:d0:32:cb:12:1e:97:74:4e:fd:c1:52:14:
df:10:8c:1b:4e:22:e6:46:00:c7:8d:8a:15:7b:3b:b1:27:e3:
53:22:22:af:bd:4c:32:4a:eb:ba:e3:87:4c:89:dc:10:ad:a5:
ae:e8:2a:8b:96:c0:f9:da:77:75:ab:76:89:4e:de:42:02:57:
71:82:2e:94:d3:f7:6b:0d:5e:22:7b:59:31:74:eb:17:f3:48:
6a:9f:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 00:01:29 2025 by rpki-client