Manifest
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
File: KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft (raw, json)
Hash identifier: rJ0wiU7ystenbIaRYrZ85eFcnF0mjJ5iSgjIfiL3J/E=
Subject key identifier: F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 79
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
Manifest number: 0C63
Signing time: Mon 14 Apr 2025 13:03:30 +0000
Manifest this update: Mon 14 Apr 2025 13:03:30 +0000
Manifest next update: Tue 29 Apr 2025 13:03:30 +0000
Files and hashes: 1: AOFhkipnxKTAp6Y0XGszOGLsf6E.roa (hash: x9h3xZpgrJWQRStm5lG5TxdPd5yqULuAs1H6X4b6nGs=)
2: BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa (hash: Gu9Euv8qQPFKbirJ2sdIn0U9waJ9P8x0vSmO5/F4VSI=)
3: KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl (hash: ZAHFwevEFJFdeD4U2uaA/bvK791anlYYgn4FWTng96s=)
4: Z_AGdZv2-omGDoDuQZUwbdUTqIM.roa (hash: YETggOHUQiXlzsvPVdNDSv34DSUlbq9PKzuZt2AKyks=)
5: bIXoMTpvdXQOj9-okiT9I-xpoP8.roa (hash: EhZRk5GEmwRtI1iE4kDgGCw34Zy1QEf+6bQUuPIgLOM=)
6: q61pgXX-eUFqofO5ODK4ZSpgl1w.roa (hash: 8Zas3ZpE6/LGWrJPfo9jcS4S4UtoghFIXKcQjgQk10U=)
7: shcaRon1lwsJwBq4yOSy_I_7STg.roa (hash: BXY9dnOfYqiD7KG7KmpneYkhzR4OrPK0MeJf2q5BN0A=)
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 20 Apr 2025 22:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121 (0x79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Mar 15 01:38:05 2025 GMT
Not After : Mar 15 01:30:03 2026 GMT
Subject: CN=F9AC90D3EEBB839F20C652E482F6A1B5B11D9296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:9c:e1:19:64:37:4c:1f:f0:7f:ef:10:dc:
0b:54:fb:cf:76:2c:da:5b:9f:2e:22:1b:24:09:4c:
fa:cc:f4:1e:78:d2:76:43:b1:a8:cc:a7:58:f6:86:
22:48:39:e2:48:2d:fb:7f:cd:7d:a9:45:31:7b:b3:
e2:17:d6:63:c6:59:04:ec:33:df:e3:7d:d2:4f:3e:
e7:df:15:67:e1:df:1c:95:2f:a7:09:19:15:6c:68:
72:6e:22:a6:c2:95:74:eb:af:f8:c0:b5:86:58:95:
bc:4d:47:9e:36:bd:e7:15:59:f4:9a:b6:71:05:33:
f6:42:82:2c:3a:83:c4:d2:de:79:46:ef:4e:f0:cf:
73:40:fc:57:4c:fd:42:74:33:1a:a9:12:cb:1e:62:
22:19:bc:38:ff:a0:d7:1b:f8:fd:bf:70:52:f4:33:
06:79:52:e1:91:0a:fa:33:6b:a9:8a:78:af:bc:f4:
c1:31:81:79:5b:32:7d:ae:b8:ec:84:5b:e8:8c:20:
99:cf:4c:04:f1:d6:0d:e3:f3:9d:54:9f:41:f4:51:
13:2a:0f:77:f3:07:f4:ad:7c:55:48:04:91:39:46:
79:37:d8:d2:52:8a:d0:01:58:b5:89:54:03:12:5d:
5b:d4:77:89:d4:9f:46:82:91:99:f2:db:5c:c1:6b:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5e:aa:27:6e:86:69:21:7c:fa:f4:43:e5:e3:60:e6:65:1b:
27:ab:71:12:59:2f:d7:16:7f:2c:52:07:ba:ac:51:7e:8e:a4:
d3:7b:47:75:b7:44:90:68:a2:7c:00:36:82:4a:ff:fd:08:30:
f2:4d:37:88:5a:ee:73:1c:39:bb:1b:34:14:ec:6d:86:51:6a:
80:ab:4b:5f:4d:23:42:54:1c:1d:7d:d4:89:29:37:37:17:4d:
55:42:35:cb:8a:27:78:9e:91:a7:64:11:db:35:90:c5:e7:c3:
d4:ab:c7:46:95:95:6b:21:6f:4d:8b:89:cd:51:a0:30:60:39:
bd:92:0e:75:8b:df:1c:2f:2e:4c:57:a4:67:c1:68:7b:61:7d:
9c:42:86:ae:17:0c:93:19:cd:7e:a9:9d:15:55:15:01:90:7c:
8e:ea:c1:dd:6b:0e:d2:fc:65:a3:92:c5:d4:6b:ff:ec:83:21:
7f:3b:3e:8f:94:ab:ea:4e:4e:d8:17:83:83:91:ad:98:34:36:
0c:90:11:41:8a:7b:fe:23:19:2a:14:0a:c4:a9:8f:9d:c5:a2:
b9:3d:95:77:8f:df:97:5b:b4:e9:6a:a2:e4:21:f5:df:05:20:
b6:3f:0e:51:7f:a7:00:14:c2:5a:c9:c9:5b:22:3f:11:13:82:
76:8c:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:17:25 2025 by rpki-client