Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
File:                     o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft (raw, json)
Hash identifier:          1mKsukCXn/MBzA9jMaMVtGOFt7Kv/ibriXhTmFhEr7o=
Subject key identifier:   45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5
Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF
Certificate issuer:       /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
Certificate serial:       0F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
Manifest number:          04F3
Signing time:             Fri 06 Jun 2025 14:01:33 +0000
Manifest this update:     Fri 06 Jun 2025 14:01:33 +0000
Manifest next update:     Sat 21 Jun 2025 14:01:33 +0000
Files and hashes:         1: o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl (hash: C4gjwCQvf4gvaz3tNaAJqUQ25rogIIi+xx6ZiEvprBM=)
                          2: oNELch91mVrp659FXA3taW7FO4k.roa (hash: 0a6nekKiKtaDUpQ4xvwVMyz8TWCbny/YzDz6TIzdz2M=)
                          3: tjS7HcxgcNLO3-zYKYyNL5mMaSs.roa (hash: HRIGQqtngeIH1ecf5w8mvxqdiL8TLrGw2pzam5+IQT0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 15:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
        Validity
            Not Before: May 23 10:04:42 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=451744DF5FCC00491CBA9FA0CC7244F7419C48E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:35:fd:cf:5c:20:c0:7a:37:f9:5a:f4:7d:
                    2d:7e:77:ad:ef:f3:71:3a:f0:2f:bf:f1:15:ff:07:
                    fb:7c:5f:be:fd:8f:74:3a:8a:db:03:ae:79:b0:7a:
                    84:2f:db:93:37:2c:e2:e8:ab:bc:b2:55:f6:0c:02:
                    8b:67:dc:65:02:fa:9f:bd:4e:b1:b0:4f:32:1a:c0:
                    7d:a2:18:7f:38:81:c8:d0:5b:6c:19:a4:72:27:c3:
                    9c:b5:ee:4e:44:4d:88:ab:90:c8:f4:9f:c0:2d:a4:
                    95:49:6f:c7:db:b2:0b:b0:79:fa:63:5d:7b:f0:1b:
                    67:a5:6f:53:e4:d5:3d:c3:57:fd:72:e0:cb:fa:a3:
                    a2:28:d1:0c:2e:31:05:bb:1f:45:f3:c3:3f:6b:88:
                    22:4a:25:cf:7d:85:ae:59:4e:36:15:17:e1:a1:80:
                    17:03:88:e3:9c:13:26:55:af:14:49:3e:97:c9:b9:
                    47:db:26:f5:52:48:42:03:d5:92:e2:02:af:09:1a:
                    0a:c6:aa:a8:39:72:60:4c:4b:d9:e8:ff:6a:29:60:
                    fb:95:94:ed:57:3c:52:f1:e8:08:91:3e:a3:2d:7c:
                    52:09:4d:24:f9:9c:8b:5b:fa:a1:ae:da:87:c4:d3:
                    e8:84:25:e9:a2:4f:0e:1a:cc:7f:ed:76:64:cb:28:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5
            X509v3 Authority Key Identifier:
                keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5c:88:35:8b:3c:d8:d2:14:92:ff:c3:11:19:d1:f6:c6:46:
         63:79:31:60:5f:f4:88:36:8f:ee:84:ef:34:e7:a8:7a:38:f7:
         5d:e1:d4:58:4f:94:f3:ff:23:22:1d:93:2b:4b:40:35:08:35:
         d8:bf:67:df:00:4c:e1:57:23:9e:a3:25:12:49:23:db:06:ad:
         b1:d6:a1:2f:17:3a:6d:8e:ff:6f:d7:85:1c:9f:24:5e:d8:51:
         0f:9d:c0:c3:b7:2f:ba:b5:98:36:e5:82:95:56:13:5c:6d:29:
         36:e2:2e:26:ca:f5:c1:34:63:74:f0:10:b7:8b:80:bc:5d:74:
         f7:18:d6:f0:83:2c:b6:da:fe:34:0a:95:85:c8:d1:13:da:34:
         02:cd:10:67:e0:3c:d9:3a:cd:b4:f7:c8:68:a6:a9:f2:73:96:
         16:b0:53:a3:ae:3f:14:41:f1:cc:82:84:c2:1d:ef:eb:d5:d6:
         92:e7:2b:aa:e7:95:a3:33:5d:76:59:54:37:83:7f:1f:a6:ac:
         98:c3:2c:d6:e5:d4:ed:39:cf:7b:e5:e3:06:a5:6e:1e:4d:2f:
         1a:5b:4b:85:8f:f4:4f:d3:07:22:a9:3f:14:59:d3:b9:eb:7b:
         38:80:6d:a2:42:d0:65:de:12:00:d0:21:b6:c6:2c:e6:3d:80:
         a3:b4:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:33:02 2025 by rpki-client