Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
File:                     ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft (raw, json)
Hash identifier:          SXSPFxBnpvkcFqQr8jssuwTjqttWxxkYEBWm0gAxPjQ=
Subject key identifier:   F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0121
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
Manifest number:          0885
Signing time:             Mon 14 Apr 2025 07:39:11 +0000
Manifest this update:     Mon 14 Apr 2025 07:39:11 +0000
Manifest next update:     Tue 29 Apr 2025 07:39:11 +0000
Files and hashes:         1: 2lg-VbmJh0zvx5FO93s2avv-56U.roa (hash: FxO2grDkLehSbdZKfWIrMVBPVxzXVZN4IdTL6UrRgRk=)
                          2: 8mwKQiqCD2aXoJunjpGmiU17EpA.roa (hash: CSwaQs2LidvAm2hovappKSEI2hw1yaZKIlANNLU0UpA=)
                          3: CkNXygqC3AyDaWEcQas9Ydj0V_8.roa (hash: VMUHx0aBm+eliv6gC59f6sziaecsLoWU430wez2hoIE=)
                          4: ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl (hash: cbhuQIOwj0XdGUyEthN/JIC/yQxyBCWDYQWDWF1QYHM=)
                          5: EBMWtj6YWvjWQiC_W43-AuAbcu0.roa (hash: D1vk15EQkFu0ka+STT+7t5ZzLvjYl7Pg0lHylI9yRIc=)
                          6: Eek22GdEU2ItdKCh1YObdlsoD5k.roa (hash: gaswunDkYuZN7J6+47ouaQg3DgJOqENiCTS8u6ErvP8=)
                          7: FKtvVlASZd0A3gkoDDFhTFGcsY8.roa (hash: Rrh1Jp84uBeFLSMGZglmdW+q4BaKJImEFkNS3BN51UQ=)
                          8: G8KwsliqW15T47aiAYMnXe4jlm4.roa (hash: xn6zcq85FPyB2r5ifz93hawDmfQ82IbGy74MEiOX7Mk=)
                          9: JRa79PRv1FJrOCNeMiWpKq94Rbk.roa (hash: AneWSnVhqNrKvpS6KCh5HITray/zhE/skvZ8pVYINek=)
                          10: KCiQVuBn8IHJVws-iesLMcGRBBQ.roa (hash: POukAMGTmHMpeQO/7OmrkGtK2qqAVDbtE+M5WEAGusk=)
                          11: Kv8GOn45RM5sbdA5Zl-QN7kIZGA.roa (hash: wI6jHZQN1y9Z1KcVSqjUof63pNgfXQWw6FScIc5EAOg=)
                          12: Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa (hash: UUg9H2KIiTC6w7J2PWEZo25DEuxU4bKWhDTIMO0xoRo=)
                          13: Qm-ovxjft_ONKgVlddgYBViiXI8.roa (hash: reNHyL6JrrdFmS7tyh8caGRlR5ntXNFETd8Vu4ktyXE=)
                          14: SitDxheAMfSlRQgc01mqDiL-mfU.roa (hash: Bs/CaB9/cVEG8i9wwL4Aup/Y+iaGM5ZkYBzfSYB5hd0=)
                          15: T_31eBaEFihdMCMV6faFBqsLDa0.roa (hash: IFsJZ7Je3JKurRpwIsfwQfmVzUkHijSgyjwh2OuJ1vU=)
                          16: W-ERzt8krj8uYmR9nPsp_bw-FVM.roa (hash: PTzn1mwLEcrFNjvKFBdbw8tSBBY1xaWCqNG9Z2W6o0A=)
                          17: Zb5pMXfg--CmManj5Qwpn5CKkos.roa (hash: eIV46twY5i9xSkrwsrHFEFZ9zt5eGM2y2+fF5jawtIw=)
                          18: _2vVWVtlxiNX5IdifzTsGlLnWX0.roa (hash: p+uVz1VSXvLPtweai3CUwuWHCZq8CIc9maBVSE11k6w=)
                          19: bRwxq6NCWThnL83iQFV_HL15SUg.roa (hash: i3aC46cXL9KmCjIe66+tAM/MBKoXFW6/N3LHKukn9k8=)
                          20: knGSWmZ3k78JRwIoq7I4RG51JOs.roa (hash: i78eWNWKJfq8BhMhgx/Xy3UHuxKJwWXVNclbpllZ7Gk=)
                          21: lXon4DXniV5aKkwr9PlRXv024TE.roa (hash: sIu/V/Vpr0oGmkjOyOZYEZz+cp1x4jSy+YAqvUB+J0s=)
                          22: oEvqGdCs79vxipQ8wdUhufn5vs4.roa (hash: JjHpEZ6DVpMBvK2L41vPa5kurHWTwuK2gx7LYg+I9xg=)
                          23: rRoyRHu5-qdPMNl12CJ70QFLET8.roa (hash: 1VDKZrAJbMcfSevIl7JpTkTn432yuA09/SrCTR7dhcw=)
                          24: ra-TXYiVIOMq3MVtooBVGRWW1Y4.roa (hash: svelJ/UT0Op+w8rpWKjTWzg7DUB2LZChLSD6ZufiPdo=)
                          25: rnaO0T3Do29M9vmta4mYAana-ew.roa (hash: 8WyNhwXG0IULzVGaRAtYo8gXCYgLU0CLb47J7GdVVrs=)
                          26: uLNdVqrtM2H06A254Lmga8jPtsQ.roa (hash: 8heNLJS0Zpf9SIEd1gdJgGcIpF5JJpa+ClaqaXFXhcc=)
                          27: uiGjxLYcHAmP1EArk8lK8UmLX6M.roa (hash: m+r/NshK5m3nmSDw8sxn1h43xGX46+cF3TZ0PQNVykw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 09:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Mar 15 01:37:59 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F1517B8309F4B62E9A971015ABBBD5B21DAFA0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:ec:42:d2:1b:98:28:f4:69:bc:02:3b:04:
                    38:3a:e5:35:11:b9:c1:ea:9b:b1:5e:9f:2d:dd:29:
                    3c:24:12:c7:32:29:fb:8a:8b:25:36:09:96:92:1a:
                    58:ea:cf:b0:f7:08:b9:b2:21:cc:86:40:ed:6a:9a:
                    bf:01:be:14:44:6a:18:89:7b:93:f6:74:ff:e4:fd:
                    3c:07:ea:0f:bd:dc:05:6f:f7:31:5f:56:66:b8:5f:
                    be:b4:b3:1c:7c:c3:f8:c1:dc:be:96:b1:da:71:e4:
                    c7:b6:ac:b5:df:f8:b5:d4:4f:f0:bc:2b:80:be:6a:
                    07:9d:93:55:82:67:42:8b:09:5c:06:08:38:5b:07:
                    54:7a:9e:c8:fa:e2:f8:a1:8e:75:c7:b5:c8:58:57:
                    eb:46:68:e9:1a:b2:96:08:e8:8b:9a:52:66:23:bf:
                    df:3b:16:b9:02:41:a4:8d:7f:76:42:9c:9c:01:85:
                    18:03:b2:a7:86:a3:02:1e:03:de:78:eb:d9:94:43:
                    b2:44:92:5e:6c:d3:be:a3:fe:91:92:e7:ae:6d:3a:
                    88:75:24:00:24:16:77:06:ef:ae:96:54:af:cf:b0:
                    04:cb:c6:a9:e8:62:e3:83:2e:ec:93:31:55:10:89:
                    ab:03:50:05:f9:17:21:c9:e8:b7:0f:16:a6:4d:f6:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6e:8d:61:91:90:74:a9:29:ff:9e:96:41:10:4e:2b:8c:73:
         1a:ae:97:6d:35:3d:56:14:38:b8:fb:e2:9f:2a:a6:33:1d:49:
         9b:45:74:82:0f:5b:66:7b:95:64:2e:0b:ab:de:20:58:80:1a:
         ca:79:0a:93:a6:42:8a:80:90:ef:3b:78:d5:ea:a1:5b:98:02:
         86:24:62:38:25:1f:ed:2f:7c:89:5f:6d:85:9f:59:67:39:94:
         ba:4a:b5:33:65:ea:85:e0:0d:12:01:d1:70:1e:68:81:42:06:
         8f:20:5e:35:b3:46:57:5d:7a:2c:81:fe:f4:3e:5b:81:98:de:
         d4:41:c2:e8:5d:60:ec:fe:3a:e9:22:54:22:b7:67:fd:52:d7:
         8d:45:34:e4:31:cd:22:33:13:15:ff:fd:43:35:3e:03:98:86:
         68:b1:c8:1b:95:cf:1d:4b:4b:7c:76:4d:70:57:07:54:48:43:
         a0:da:f0:f3:eb:ea:39:f5:78:95:2d:ea:9f:e7:98:43:a4:39:
         c3:37:a5:5f:9b:59:8c:29:cb:59:a8:60:85:0f:b8:4f:22:31:
         82:e2:2b:f0:17:2f:63:c0:a2:ce:84:eb:da:1d:a2:98:4e:8b:
         d3:0e:45:bb:be:27:75:b4:e8:07:2d:b0:68:16:30:55:ed:2e:
         7b:43:df:4a
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNTAzMTUw
MTM3NTlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEYxNTE3QjgzMDlGNEI2
MkU5QTk3MTAxNUFCQkJENUIyMURBRkEwQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChpuxC0huYKPRpvAI7BDg65TURucHqm7Feny3dKTwkEscyKfuK
iyU2CZaSGljqz7D3CLmyIcyGQO1qmr8BvhREahiJe5P2dP/k/TwH6g+93AVv9zFf
Vma4X760sxx8w/jB3L6Wsdpx5Me2rLXf+LXUT/C8K4C+agedk1WCZ0KLCVwGCDhb
B1R6nsj64vihjnXHtchYV+tGaOkaspYI6IuaUmYjv987FrkCQaSNf3ZCnJwBhRgD
sqeGowIeA95469mUQ7JEkl5s076j/pGS565tOoh1JAAkFncG766WVK/PsATLxqno
YuODLuyTMVUQiasDUAX5FyHJ6LcPFqZN9i2pAgMBAAGjggI9MIICOTAdBgNVHQ4E
FgQU8VF7gwn0ti6alxAVq7vVsh2voKIwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L0Nsckt3cGtMMlBobFhBeHlHNnpfQXdwWjBmdy5tZnQw
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA
A4IBAQCSbo1hkZB0qSn/npZBEE4rjHMarpdtNT1WFDi4++KfKqYzHUmbRXSCD1tm
e5VkLgur3iBYgBrKeQqTpkKKgJDvO3jV6qFbmAKGJGI4JR/tL3yJX22Fn1lnOZS6
SrUzZeqF4A0SAdFwHmiBQgaPIF41s0ZXXXosgf70PluBmN7UQcLoXWDs/jrpIlQi
t2f9UteNRTTkMc0iMxMV//1DNT4DmIZoscgblc8dS0t8dk1wVwdUSEOg2vDz6+o5
9XiVLeqf55hDpDnDN6Vfm1mMKctZqGCFD7hPIjGC4ivwFy9jwKLOhOvaHaKYTovT
DkW7vid1tOgHLbBoFjBV7S57Q99K
-----END CERTIFICATE-----
Generated at Tue Apr 15 12:23:26 2025 by rpki-client