Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft
File:                     NcTtJfIkvDcozOF3pTQ5TgyFw88.mft (raw, json)
Hash identifier:          dU1p3R+w6W0F6Gmyh2okr9SI8oUJ6C1a4LU+0jURdq8=
Subject key identifier:   AF:F1:4E:8C:8A:EB:53:EF:B4:B3:7F:49:63:6D:5A:52:E5:40:A8:B7
Authority key identifier: 35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF
Certificate issuer:       /CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
Certificate serial:       26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft
Manifest number:          03F6
Signing time:             Sat 05 Apr 2025 09:21:54 +0000
Manifest this update:     Sat 05 Apr 2025 09:21:54 +0000
Manifest next update:     Sun 20 Apr 2025 09:21:54 +0000
Files and hashes:         1: B6GoN6ip25aK0Kzov_Fx0cW0h9w.roa (hash: epIKAs6u6h5aLoBUgopXRivTqReJ/G9zPami1vfnGS8=)
                          2: NcTtJfIkvDcozOF3pTQ5TgyFw88.crl (hash: X5S2tRPpzP6NgHvc92byNX5TkZUAHnEQj/50puuF1dM=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35C4ED25F224BC3728CCE177A534394E0C85C3CF
        Validity
            Not Before: Mar 15 01:30:12 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=AFF14E8C8AEB53EFB4B37F49636D5A52E540A8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:4f:cf:d0:74:ce:36:8a:44:52:5a:3c:fd:
                    ac:1a:d3:d0:4d:ca:bd:be:27:5d:83:e8:88:8b:56:
                    d9:67:5e:8e:36:0e:ad:7c:0e:c9:86:64:a7:42:78:
                    e8:ef:a3:ad:5e:54:3e:97:67:0e:97:0f:b1:90:cc:
                    63:ee:08:3d:d3:8d:06:85:7a:a1:74:37:37:11:8e:
                    41:45:1d:58:42:14:3c:a5:ca:5e:97:8f:a9:65:f4:
                    ec:b2:44:a5:10:e8:7b:a4:3a:93:e9:3c:79:b9:ca:
                    a0:72:77:34:b3:07:a8:8c:99:fb:6f:ea:7e:36:a3:
                    ba:6b:74:6f:a4:8d:b4:dd:dc:ee:1c:30:9b:f4:15:
                    45:a1:44:47:28:b2:f6:13:33:70:4d:29:1a:0c:ee:
                    92:20:e1:99:3d:37:27:c4:33:11:73:a1:70:61:43:
                    33:d7:65:f2:8c:b6:f8:1c:2b:f8:fe:64:a8:c8:aa:
                    fb:4f:14:15:d1:a8:68:0c:69:16:01:58:69:fe:8d:
                    99:e7:77:dc:fa:c4:d4:9d:59:4b:03:26:ea:d2:fa:
                    af:2f:92:a2:9c:6b:ba:72:b1:1a:bc:ff:72:b0:54:
                    23:2d:b4:ce:e0:ed:93:17:bf:d2:e3:c6:b1:1e:69:
                    47:f0:8a:8a:b2:2d:3c:9f:1c:f6:1d:4c:2b:4d:5c:
                    bb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F1:4E:8C:8A:EB:53:EF:B4:B3:7F:49:63:6D:5A:52:E5:40:A8:B7
            X509v3 Authority Key Identifier:
                keyid:35:C4:ED:25:F2:24:BC:37:28:CC:E1:77:A5:34:39:4E:0C:85:C3:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NcTtJfIkvDcozOF3pTQ5TgyFw88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4722/NcTtJfIkvDcozOF3pTQ5TgyFw88.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:4a:c1:db:57:df:e8:f9:65:fe:c4:f8:1c:68:67:82:bd:30:
         8b:bf:5b:55:f2:24:0a:da:df:a9:bb:1f:23:5e:69:4a:1c:83:
         10:61:ed:9f:8c:ce:ef:67:61:90:5b:46:8a:26:c7:6f:b1:89:
         20:e6:d3:68:bf:86:cb:80:f0:be:28:c9:0a:b6:06:b1:44:70:
         18:4c:cc:1c:f2:e9:9e:fc:14:6c:6b:a6:a3:7c:aa:fd:6f:04:
         56:f5:c5:0d:08:5a:a2:6f:b7:2c:44:9d:a5:30:fa:21:a5:ef:
         12:b9:37:5e:98:68:45:36:e8:85:9b:23:65:4c:67:15:6f:ac:
         73:39:02:5a:51:a5:13:04:91:16:08:a5:9b:95:a4:aa:65:7f:
         cd:8f:d6:5f:69:cd:b9:c5:38:66:20:34:11:3e:ac:1d:c8:ab:
         35:6a:78:dd:bb:bd:a4:fe:78:78:a7:95:df:e2:8e:7b:32:fc:
         f9:49:cc:8c:94:3e:27:5a:77:b1:3d:74:7a:e1:30:56:5c:65:
         da:4c:7c:3f:f4:17:b6:2e:32:c1:d6:a8:37:9a:38:22:3d:1b:
         86:d7:8d:a9:b9:7a:47:31:64:17:6b:11:30:01:f8:0b:74:cd:
         8e:0b:6f:57:c8:00:32:6c:f1:51:8a:6e:9e:2c:b0:b9:f9:e9:
         94:f6:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:12 2025 by rpki-client