Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
File:                     Ab5k6lGElpjv90IvaTdI0tKCnPY.mft (raw, json)
Hash identifier:          W7K3XgnI+Pd3mHIAm5GYBZ5RVIIfsygLcvmppwrzUTE=
Subject key identifier:   EA:3D:A5:EB:A9:3E:3D:A5:0B:30:47:88:47:59:B9:31:6D:5C:2F:4A
Authority key identifier: 01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6
Certificate issuer:       /CN=01BE64EA51849698EFF7422F693748D2D2829CF6
Certificate serial:       30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
Manifest number:          0421
Signing time:             Sat 05 Apr 2025 09:28:04 +0000
Manifest this update:     Sat 05 Apr 2025 09:28:04 +0000
Manifest next update:     Sun 20 Apr 2025 09:28:04 +0000
Files and hashes:         1: Ab5k6lGElpjv90IvaTdI0tKCnPY.crl (hash: 4gkjhsanOxP+yZDafl5b2MK/3wX3G2HjWXVCO5azC5E=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01BE64EA51849698EFF7422F693748D2D2829CF6
        Validity
            Not Before: Mar 15 01:36:10 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=EA3DA5EBA93E3DA50B3047884759B9316D5C2F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:07:70:cc:4d:f4:31:1c:4b:dd:92:df:93:
                    3c:86:71:41:b3:ce:17:a4:53:26:a5:b7:23:64:6c:
                    23:fa:ed:46:49:b8:4b:b0:b0:dc:2b:10:96:48:16:
                    a2:6f:d3:be:ad:54:11:44:3d:3b:d1:bf:c9:dd:cb:
                    72:70:4f:f7:7a:12:f8:e3:ba:d7:42:dc:2d:3d:93:
                    ba:7e:f5:33:d7:5f:9c:08:49:09:4b:98:fd:f6:1d:
                    ee:d2:d3:ea:e2:0f:bd:bb:e6:6c:31:42:4e:5c:90:
                    44:e3:36:23:87:f0:e7:2a:a8:4f:32:b6:a5:a4:64:
                    11:f6:df:c8:59:a2:b7:f6:05:e0:e2:15:4e:71:56:
                    90:fd:e4:db:62:34:ea:f4:25:dc:d2:3c:ca:61:22:
                    72:eb:35:8c:28:34:09:4a:97:4b:63:e8:5a:5e:9b:
                    7a:3b:a8:11:af:8d:3d:cc:e0:a4:65:1b:ff:eb:58:
                    73:fa:6a:4e:7e:69:6e:a9:81:7f:89:57:4b:ed:c3:
                    52:c3:5d:1e:aa:4b:9c:ae:d0:12:32:7c:97:f5:aa:
                    62:a0:79:5f:b5:02:95:11:10:35:56:19:0c:9b:ff:
                    9b:71:d4:60:0f:34:6d:f7:a8:39:90:a9:7f:ae:31:
                    c0:f4:39:f0:57:38:8b:f8:4f:49:ac:b9:57:dd:5f:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:A5:EB:A9:3E:3D:A5:0B:30:47:88:47:59:B9:31:6D:5C:2F:4A
            X509v3 Authority Key Identifier:
                keyid:01:BE:64:EA:51:84:96:98:EF:F7:42:2F:69:37:48:D2:D2:82:9C:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ab5k6lGElpjv90IvaTdI0tKCnPY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/491/Ab5k6lGElpjv90IvaTdI0tKCnPY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:07:91:e2:66:95:43:da:d3:2d:ac:d4:d6:43:9d:e8:47:b4:
         99:0f:94:09:4e:5d:1c:88:87:61:1f:bf:9c:43:32:f8:ae:4f:
         40:d3:a9:9e:22:3c:52:da:22:0f:2d:c0:b2:cc:14:85:fb:88:
         51:fe:ac:f2:11:af:4a:10:6c:6c:a2:90:f4:ad:64:c6:65:90:
         b6:7c:17:e4:17:b2:cd:2d:cf:02:b6:2f:9c:62:96:99:07:0f:
         81:b1:c1:36:7c:53:6d:49:39:3d:df:fa:73:c2:8c:8f:34:2c:
         0e:d9:df:78:1f:fc:31:b9:64:83:90:bc:c0:d2:61:7c:d7:3d:
         b2:c1:c2:4b:5e:08:db:e7:60:25:1e:d7:3e:59:c0:47:73:42:
         b1:5c:a7:7a:2b:b6:4a:89:46:cf:49:d5:f6:7e:b0:08:43:b3:
         ff:66:6a:bf:4e:1a:65:73:d5:8b:56:d3:85:7e:27:72:72:ac:
         da:c9:db:81:6f:75:9b:ae:ee:df:cc:a9:4f:3c:31:7f:3d:94:
         ce:6a:b0:88:22:e8:2d:b4:66:69:54:0b:ec:67:80:9b:99:c6:
         61:82:70:ae:74:67:70:aa:c6:b8:60:c8:8e:19:d8:f8:07:f6:
         10:ae:f4:3b:02:93:c8:37:05:8f:60:76:00:f9:2d:2f:3c:08:
         69:0b:ea:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:11 2025 by rpki-client