Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft
File: D-3U0xDJUGjIfi3mvwcZutmsCkM.mft (raw, json)
Hash identifier: QGre+p2uyXSfhbCJh/AQ7O9Xiuh9KvEfL3hkSlhDNmk=
Subject key identifier: EC:FA:67:E1:E7:D8:FE:85:6D:00:89:B8:52:49:8C:B9:28:6E:37:55
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Certificate issuer: /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial: 51
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft
Manifest number: 04CE
Signing time: Fri 11 Apr 2025 06:56:25 +0000
Manifest this update: Fri 11 Apr 2025 06:56:25 +0000
Manifest next update: Sat 26 Apr 2025 06:56:25 +0000
Files and hashes: 1: CJjdJ4n_cqS5GQZRS1R5v-k4SzA.roa (hash: iy/Jl3ntmYApcenK+e2g/PfFe/3+lbPGYcyDfLMbApg=)
2: D-3U0xDJUGjIfi3mvwcZutmsCkM.crl (hash: zQ8GEhCyxU4GiImpiqpR34uOrGaD7/9/lDvYKBd/VC0=)
3: OU-F77FW_ZlCp2oD4Omv4EJZUjo.roa (hash: ouKzaQjodoGzm2dYsB3pPID1BskNOP3G9Yg6VLKBA58=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Apr 2025 02:50:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Validity
Not Before: Mar 15 01:34:34 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=ECFA67E1E7D8FE856D0089B852498CB9286E3755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:35:6d:94:c4:ae:00:ae:d1:b9:12:0a:96:
21:58:dd:27:90:19:d6:a4:d1:48:55:8e:df:b4:95:
cf:78:35:e3:53:13:10:63:ee:64:34:2a:c3:77:aa:
a8:82:96:94:ac:fb:d2:60:b6:e2:b4:67:ca:e0:7a:
68:5d:98:a4:6e:1f:ab:56:5a:82:83:5d:cc:08:d2:
f3:6b:49:83:38:3b:52:7b:a2:44:b6:eb:a3:7c:35:
8f:f2:71:61:b7:8c:22:e6:ae:bd:63:b1:96:95:a4:
5a:04:0b:58:91:e2:04:94:fe:c9:b8:cf:14:f5:00:
9c:2f:e5:f8:af:68:8a:ae:4e:1d:cb:32:6b:52:45:
18:70:7e:1e:a3:b0:21:ff:02:c2:48:13:36:1b:8d:
38:a2:1f:21:5e:0d:49:00:18:e2:05:82:60:b9:0e:
1c:17:aa:d0:b6:74:aa:af:07:27:6a:ac:6a:27:3b:
64:00:9a:a1:94:72:1a:f9:73:63:ae:35:63:18:32:
9a:cd:90:d0:19:74:db:5c:73:98:e5:d5:fd:d5:de:
df:e7:e6:ee:2a:55:29:ef:23:cc:9b:f6:7c:0c:a1:
57:12:cb:06:84:ab:74:e6:84:1f:aa:49:28:59:b9:
f8:87:3d:64:93:39:cf:e5:0f:0c:e6:23:82:60:dc:
d5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FA:67:E1:E7:D8:FE:85:6D:00:89:B8:52:49:8C:B9:28:6E:37:55
X509v3 Authority Key Identifier:
keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5c:03:c6:dc:57:f1:0f:4d:72:72:18:b0:56:43:6c:fb:b9:
3c:ff:56:b6:4f:5d:23:bc:a1:0e:cb:a0:dd:9e:0d:76:71:81:
07:6b:51:21:e3:e4:9f:e6:e3:a4:93:6f:a7:66:7f:37:e0:24:
e0:b1:1d:05:fa:fd:b5:1b:ae:7b:4a:43:b2:54:f3:fb:ae:4c:
c4:fb:fa:f3:69:9c:5c:c4:72:f2:0c:e0:8e:7c:e7:ad:59:8c:
f8:dd:7c:86:24:4b:d9:1b:0b:c0:42:d0:48:31:a4:f4:8c:93:
cc:4a:46:ab:ae:24:f8:5a:62:dd:c2:1e:e5:40:db:c6:2f:79:
a0:85:1f:69:a3:14:3a:2d:bf:72:82:4a:b1:40:6e:7e:ac:7a:
ad:07:ad:83:18:18:fe:8b:7b:de:fa:5d:b7:65:90:15:65:83:
cc:98:ed:89:14:d7:06:7a:90:67:99:ee:b4:35:82:b8:32:3e:
dc:86:66:5c:7a:7a:4e:79:c8:ed:00:d7:d1:b3:a7:ce:55:47:
7c:45:de:e0:96:6f:d7:a0:f8:b7:5c:d6:8c:e5:72:75:c4:d7:
e0:de:3e:fa:13:f8:55:3d:5d:ad:81:c1:ad:7b:cc:3b:fa:58:
2e:45:df:6c:94:96:97:9b:33:5a:c0:2d:08:4d:14:12:bf:70:
6a:35:2a:32
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRkVE
RDREMzEwQzk1MDY4Qzg3RTJERTZCRjA3MTlCQUQ5QUMwQTQzMB4XDTI1MDMxNTAx
MzQzNFoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRUNGQTY3RTFFN0Q4RkU4
NTZEMDA4OUI4NTI0OThDQjkyODZFMzc1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALVANW2UxK4ArtG5EgqWIVjdJ5AZ1qTRSFWO37SVz3g141MTEGPu
ZDQqw3eqqIKWlKz70mC24rRnyuB6aF2YpG4fq1ZagoNdzAjS82tJgzg7UnuiRLbr
o3w1j/JxYbeMIuauvWOxlpWkWgQLWJHiBJT+ybjPFPUAnC/l+K9oiq5OHcsya1JF
GHB+HqOwIf8CwkgTNhuNOKIfIV4NSQAY4gWCYLkOHBeq0LZ0qq8HJ2qsaic7ZACa
oZRyGvlzY641Yxgyms2Q0Bl021xzmOXV/dXe3+fm7ipVKe8jzJv2fAyhVxLLBoSr
dOaEH6pJKFm5+Ic9ZJM5z+UPDOYjgmDc1ZMCAwEAAaOCAjswggI3MB0GA1UdDgQW
BBTs+mfh59j+hW0AibhSSYy5KG43VTAfBgNVHSMEGDAWgBQP7dTTEMlQaMh+Lea/
Bxm62awKQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvRC0zVTB4REpVR2pJZmkzbXZ3Y1p1dG1zQ2tNLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRC0zVTB4REpVR2pJZmkzbXZ3Y1p1dG1z
Q2tNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzQzL0QtM1UweERKVUdqSWZpM212d2NadXRtc0NrTS5tZnQwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB7XAPG3FfxD01ychiwVkNs+7k8/1a2T10jvKEOy6Ddng12cYEHa1Eh4+Sf5uOk
k2+nZn834CTgsR0F+v21G657SkOyVPP7rkzE+/rzaZxcxHLyDOCOfOetWYz43XyG
JEvZGwvAQtBIMaT0jJPMSkarriT4WmLdwh7lQNvGL3mghR9poxQ6Lb9ygkqxQG5+
rHqtB62DGBj+i3ve+l23ZZAVZYPMmO2JFNcGepBnme60NYK4Mj7chmZcenpOecjt
ANfRs6fOVUd8Rd7glm/XoPi3XNaM5XJ1xNfg3j76E/hVPV2tgcGte8w7+lguRd9s
lJaXmzNawC0ITRQSv3BqNSoy
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:20:10 2025 by rpki-client