Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft
File: xEEZOsVogvn9Y4tspfB4EcYfFuA.mft (raw, json)
Hash identifier: 0b/Sa/Ri8CD9nTkAWKX2fSKzP8pTfW9nBsRtIv0/d5g=
Subject key identifier: 55:89:0F:86:D9:F9:6B:3E:4F:51:0C:ED:25:AB:43:BA:14:E1:2C:5F
Authority key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0
Certificate issuer: /CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
Certificate serial: 22
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft
Manifest number: 0419
Signing time: Mon 14 Apr 2025 10:44:34 +0000
Manifest this update: Mon 14 Apr 2025 10:44:34 +0000
Manifest next update: Tue 29 Apr 2025 10:44:34 +0000
Files and hashes: 1: r7umhPD94LHQiDyR4A-OTUL7EXE.roa (hash: 047wsKda4MH7l4C4p1EdfwsMpOnRXhj5dvF4llKUdok=)
2: xEEZOsVogvn9Y4tspfB4EcYfFuA.crl (hash: SHawKdrkGpwVeNbKxyTO9ES9fSiYJSQJ6p0w5rxeXTs=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0
Validity
Not Before: Mar 15 01:30:49 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=55890F86D9F96B3E4F510CED25AB43BA14E12C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:92:5d:55:d2:56:05:d9:c1:57:36:6f:04:72:
88:b1:56:9c:fa:33:2f:1f:62:b3:0f:36:7f:30:9e:
83:3b:15:f1:a0:86:59:4d:b9:1b:4e:45:a2:02:c1:
8b:2d:bb:2d:6d:4c:8a:d6:fb:22:61:04:69:e0:e2:
12:24:ad:d2:ee:02:ee:24:18:e3:14:4f:75:65:4e:
f0:9a:c2:55:89:c3:c6:13:5f:9f:0c:b6:22:51:ed:
80:c9:35:9b:e1:29:1e:0d:d7:6f:cf:3d:c9:e3:60:
18:71:4f:34:f3:a6:ae:eb:88:d4:08:b9:96:dd:db:
dc:54:70:d2:dd:86:49:2b:3b:68:6d:1b:3b:fd:48:
eb:40:7b:d1:d7:6d:bf:5e:95:d4:44:e5:6d:a5:fe:
b7:b5:02:85:fc:65:d2:37:16:20:c5:20:ee:25:8c:
c5:48:52:b5:19:14:5e:04:0b:9c:39:7f:0e:61:4b:
a4:85:6f:e7:57:22:b6:5e:c9:01:88:66:f0:78:fe:
d3:c4:3e:3b:2e:57:8a:a9:db:6d:d2:42:8f:7c:ba:
29:ec:d1:e0:5e:09:82:56:a8:eb:23:41:37:04:48:
42:52:8a:67:1f:15:48:d8:2b:95:13:f2:25:6b:4b:
66:3b:10:9f:6b:d0:9e:30:de:8a:2b:55:81:0c:9d:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:89:0F:86:D9:F9:6B:3E:4F:51:0C:ED:25:AB:43:BA:14:E1:2C:5F
X509v3 Authority Key Identifier:
keyid:C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
43:2f:9a:a3:47:b4:f2:63:be:e2:29:0c:f4:d4:35:9a:5c:8d:
5a:80:15:85:28:b7:00:0d:5f:ed:a2:5d:23:c5:2a:a0:44:28:
c9:59:ce:d3:d8:11:18:eb:8d:81:b4:88:ac:42:57:17:cc:75:
b6:6d:82:64:0a:86:4f:9e:8e:b2:df:3f:41:f5:e3:34:de:dd:
de:a5:21:7c:6c:15:62:df:20:cf:69:0c:6b:85:89:a7:5e:92:
7c:0f:bc:ea:88:c5:c9:93:97:f1:db:ed:e7:81:a9:f8:3f:89:
81:29:5d:5b:1b:a8:e8:61:c6:55:76:0c:f6:61:c2:af:83:0d:
15:11:ed:6d:30:fd:3d:ef:80:e7:51:85:2f:8c:ff:91:0a:42:
8a:6b:bd:0c:61:29:7a:47:cf:2e:ac:3f:78:3a:3f:08:72:9b:
32:7c:54:b1:72:79:44:8a:6e:cd:b2:2c:4d:ad:80:fc:8d:4a:
59:ac:a0:84:21:1e:4d:d9:e4:1f:18:2f:30:89:31:79:29:83:
0b:f1:a0:75:21:dc:92:78:93:b0:1b:46:2a:46:f8:39:5f:8b:
30:18:b2:cb:c2:8a:0f:bc:61:22:d5:dd:58:1e:42:b6:d8:1d:
53:ce:45:f9:65:e2:08:89:e7:e2:e8:ad:0a:b9:c1:15:98:ab:
3e:ab:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 21:56:32 2025 by rpki-client