Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft
File:                     F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft (raw, json)
Hash identifier:          ZYKpMvpImk9sYRAvpd5hwIxdOTcSFu8d2naMALtHX7A=
Subject key identifier:   D8:A4:89:C0:BB:77:F4:E3:B5:D0:0D:D9:1D:02:0F:F4:04:EF:F1:F4
Authority key identifier: 17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01
Certificate issuer:       /CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01
Certificate serial:       2C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft
Manifest number:          040E
Signing time:             Sat 05 Apr 2025 09:20:18 +0000
Manifest this update:     Sat 05 Apr 2025 09:20:18 +0000
Manifest next update:     Sun 20 Apr 2025 09:20:18 +0000
Files and hashes:         1: F3jmsXYyXAXzoXzX2qEn9gLOWgE.crl (hash: HVIypbyVWoUP5VQBp/LtVyfQugN65EP2tewfhUJiFBE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1778E6B176325C05F3A17CD7DAA127F602CE5A01
        Validity
            Not Before: Mar 15 01:36:34 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=D8A489C0BB77F4E3B5D00DD91D020FF404EFF1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:03:49:e8:11:41:7c:af:2f:fa:4a:23:eb:7c:
                    a3:e0:e5:50:93:f2:58:db:40:29:35:ee:d1:6d:80:
                    d8:4c:12:d5:e3:48:cf:b3:ca:3f:df:f6:63:62:b6:
                    bd:81:17:59:33:ed:4e:ce:dd:fd:e8:af:b3:28:30:
                    b7:31:b6:68:63:0a:15:47:79:6f:a7:ff:49:c3:aa:
                    6e:7a:57:25:ef:02:5e:51:81:e4:08:92:02:0a:65:
                    9b:02:e5:41:4d:df:2e:d6:68:fa:1a:a5:7a:cf:ef:
                    22:3a:12:f0:5a:e8:cb:1e:d8:1c:ff:07:f4:eb:f6:
                    8c:f0:76:22:92:15:91:0b:37:f4:58:a7:fb:9b:a6:
                    a5:b3:23:16:b6:0c:f6:3d:92:8e:e1:89:6b:77:92:
                    00:4a:dd:f6:43:5e:35:6a:11:87:0f:8f:5a:a2:79:
                    7b:03:3e:c7:0d:5c:e7:26:95:bf:b3:57:71:34:4b:
                    9c:6f:8e:f5:1b:2f:5b:7a:79:8c:9a:0a:8a:c0:b5:
                    6b:61:ed:c0:10:e1:a7:f9:a8:66:a6:05:5b:85:d8:
                    c8:6d:32:f2:e0:c9:68:c4:b3:8f:f6:55:1f:6e:78:
                    e9:bb:8e:6c:31:a6:a0:d0:1e:eb:ae:3a:fc:0a:89:
                    ea:65:2d:6f:b3:d2:cb:c7:ea:54:6b:4d:b1:a2:3b:
                    81:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A4:89:C0:BB:77:F4:E3:B5:D0:0D:D9:1D:02:0F:F4:04:EF:F1:F4
            X509v3 Authority Key Identifier:
                keyid:17:78:E6:B1:76:32:5C:05:F3:A1:7C:D7:DA:A1:27:F6:02:CE:5A:01

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/F3jmsXYyXAXzoXzX2qEn9gLOWgE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30022/F3jmsXYyXAXzoXzX2qEn9gLOWgE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:45:08:59:6b:45:4c:0c:c3:53:46:50:5a:fb:ce:0f:a2:b9:
         af:a8:b4:8b:c9:5b:1d:ae:b6:e0:dd:48:50:af:89:86:88:ed:
         97:36:c8:57:d3:35:9b:e5:fb:67:cd:1b:ac:ef:d1:37:47:22:
         3d:43:44:07:6c:1b:8c:97:98:03:15:69:aa:8f:3b:70:ef:70:
         37:fd:cc:53:98:da:f3:3a:a5:d2:65:f3:2b:67:ed:08:2d:c4:
         ed:fd:da:4b:81:b7:b3:89:48:08:9e:68:b1:f0:5c:87:56:ee:
         aa:05:87:9f:8c:1d:49:b3:a5:76:cb:a7:59:f0:f0:d9:dd:b8:
         28:5e:9f:fa:e8:ac:09:78:d8:5c:77:b9:0a:cf:ba:f8:19:2d:
         5b:15:77:f5:c6:ba:53:d6:17:55:34:b7:4b:4b:00:6b:3e:54:
         93:d4:b4:67:38:de:25:20:24:7e:9b:da:3b:42:c2:45:bd:5e:
         bc:f1:c2:27:4d:ab:36:92:a5:bb:1a:39:d2:63:af:42:33:ba:
         76:fa:14:bb:89:a8:68:1b:68:f9:1d:b4:13:9c:f7:85:78:c1:
         26:a9:7b:e9:01:e9:33:95:44:de:0f:11:18:5c:a4:e3:64:65:
         56:8c:ed:84:20:c9:61:79:9c:6a:fb:e7:6c:96:5c:81:d7:84:
         f9:6f:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:26 2025 by rpki-client