Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
File:                     qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft (raw, json)
Hash identifier:          8Ds0ebLPx0x10/v33VNC+5yhNqCH7b059Uz4+Yuj5kw=
Subject key identifier:   91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
Manifest number:          D5
Signing time:             Thu 30 May 2024 01:35:39 +0000
Manifest this update:     Thu 30 May 2024 01:35:39 +0000
Manifest next update:     Sun 09 Jun 2024 01:35:39 +0000
Files and hashes:         1: qLhIz1SRo-xG1kqLY-KWMcnFDHU.roa (hash: BGaFK8D7CiuJsa91FZ04xBb4twS5AiJOeJ4AJpXI1ac=)
                          2: qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl (hash: XdYNMQphGhdwaYe1QSTFAbBnOfFX7UeFFMznukfCj5o=)
                          3: swzgNXSSPmB9AbaCGyQiCLKLBY8.roa (hash: SDb3tCuZFcO4SA3HhQLTUzIqD+4H+og/egNyQUmHuDc=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: May 15 01:32:40 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9134E80DBF9D5AB38549CD9B8A333036492AF7A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8d:60:2a:b4:6d:b3:7e:14:b9:dc:cc:59:03:
                    19:b5:5a:56:18:b0:db:ad:7a:83:0c:9e:39:27:45:
                    40:ac:bd:24:82:4e:09:ec:67:49:d3:a7:b2:d7:c9:
                    83:b5:2c:50:95:69:48:65:e2:a9:4b:70:41:5e:7d:
                    c8:f0:46:62:9c:96:5c:ba:28:f8:a0:97:45:0c:44:
                    90:2d:44:a6:d2:9d:c4:f7:76:45:48:d3:6d:43:f2:
                    e8:4f:6b:6b:74:94:c8:ab:07:8a:15:0e:a2:4c:06:
                    6c:df:a8:27:97:04:48:3c:70:b7:e6:d1:c2:55:f2:
                    f1:17:af:b8:63:0a:f7:66:d0:e4:43:b4:6a:1b:3e:
                    2e:5f:95:71:18:88:2f:44:e9:ad:24:7b:f6:f8:fc:
                    20:46:68:e8:16:12:9e:0a:7c:9c:fa:62:a7:d7:e0:
                    b4:6d:68:39:2e:2c:89:6f:af:5e:45:8b:ae:69:36:
                    4b:63:16:2c:94:5b:a1:4d:bc:91:86:a8:30:4b:cb:
                    a0:68:63:65:06:a6:c1:b7:32:bf:0f:f3:6f:2c:52:
                    3a:79:bb:a5:89:48:06:d8:f4:a3:05:c7:ae:c2:a5:
                    cf:69:fa:8d:ae:62:7a:75:66:b8:8a:49:00:79:89:
                    49:88:97:9a:72:20:bd:87:bc:8f:16:ed:81:08:37:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:4e:e5:82:5f:6e:20:20:96:14:58:89:1d:65:aa:4f:39:
         62:93:4a:4a:5f:ef:3d:f9:e3:a9:7c:c5:e4:ee:ee:5e:aa:1e:
         0a:87:57:c5:fb:8d:4b:0e:96:f1:02:18:89:d4:be:b9:3d:7f:
         fa:b2:21:c7:90:a3:18:00:64:6d:c9:8c:b5:b6:13:db:c7:78:
         bd:7a:dc:27:d3:f0:2d:fd:da:66:75:b8:ec:b0:82:06:29:b5:
         8b:4c:c5:6a:2f:1f:34:59:b2:b6:2e:c6:d8:c0:b9:5f:c6:7d:
         da:6c:45:5d:97:27:d1:20:7a:6b:b9:4f:bb:0d:90:cb:4e:df:
         3e:7f:ad:cc:f5:8c:5d:5d:61:57:6e:9e:1f:91:90:86:3a:72:
         34:8b:4c:74:04:ec:c6:ed:27:8c:5f:26:5a:3f:80:09:10:fe:
         d3:df:56:31:4d:e8:b3:d2:91:92:01:28:7f:28:e8:ca:3a:f3:
         f5:f1:46:5a:60:07:a4:63:b8:79:d2:53:26:6e:35:e8:ed:b6:
         51:3e:f1:95:a3:05:fa:da:e8:15:0d:b1:b5:b3:84:5a:67:c6:
         46:c3:a0:e2:0d:30:6d:5a:7b:83:b4:3d:b6:f3:5c:c3:6b:69:
         a3:81:e5:bf:ed:67:87:3a:ae:50:87:79:cb:74:2c:3b:ac:f3:
         0e:b2:0c:10
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1
RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI0MDUxNTAx
MzI0MFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoOTEzNEU4MERCRjlENUFC
Mzg1NDlDRDlCOEEzMzMwMzY0OTJBRjdBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJuNYCq0bbN+FLnczFkDGbVaVhiw2616gwyeOSdFQKy9JIJOCexn
SdOnstfJg7UsUJVpSGXiqUtwQV59yPBGYpyWXLoo+KCXRQxEkC1EptKdxPd2RUjT
bUPy6E9ra3SUyKsHihUOokwGbN+oJ5cESDxwt+bRwlXy8RevuGMK92bQ5EO0ahs+
Ll+VcRiIL0TprSR79vj8IEZo6BYSngp8nPpip9fgtG1oOS4siW+vXkWLrmk2S2MW
LJRboU28kYaoMEvLoGhjZQamwbcyvw/zbyxSOnm7pYlIBtj0owXHrsKlz2n6ja5i
enVmuIpJAHmJSYiXmnIgvYe8jxbtgQg3sbMCAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBSRNOgNv51as4VJzZuKMzA2SSr3oDAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA
9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM
Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAlQ1O5YJfbiAglhRYiR1lqk85YpNKSl/vPfnjqXzF5O7uXqoeCodXxfuN
Sw6W8QIYidS+uT1/+rIhx5CjGABkbcmMtbYT28d4vXrcJ9PwLf3aZnW47LCCBim1
i0zFai8fNFmyti7G2MC5X8Z92mxFXZcn0SB6a7lPuw2Qy07fPn+tzPWMXV1hV26e
H5GQhjpyNItMdATsxu0njF8mWj+ACRD+099WMU3os9KRkgEofyjoyjrz9fFGWmAH
pGO4edJTJm416O22UT7xlaMF+troFQ2xtbOEWmfGRsOg4g0wbVp7g7Q9tvNcw2tp
o4Hlv+1nhzquUId5y3QsO6zzDrIMEA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:45 2024 by rpki-client on console-ams.rpki-client.org