Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
File:                     7k9xfADvQMIOGJGldGWWK9sj3ps.mft (raw, json)
Hash identifier:          gybkr2jMBqmlgH7JIzQpf4owed3d3AX41XldT9/reC0=
Subject key identifier:   9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
Authority key identifier: EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B
Certificate issuer:       /CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
Manifest number:          7D
Signing time:             Tue 03 Jun 2025 21:19:13 +0000
Manifest this update:     Tue 03 Jun 2025 21:19:13 +0000
Manifest next update:     Wed 18 Jun 2025 21:19:13 +0000
Files and hashes:         1: 7k9xfADvQMIOGJGldGWWK9sj3ps.crl (hash: YbKNduTlegGIXmsIvYoMVqRErnumBsvq6RAVz3ZGUzA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
        Validity
            Not Before: May 23 10:05:41 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=9A2791DC454A5B0DF7FA90175562263C323B8C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:a4:71:2d:1f:ce:a0:d6:54:25:4f:2e:dc:
                    c3:2d:73:fe:81:ff:c9:26:80:76:fc:f9:49:9b:34:
                    f1:3a:a9:16:91:96:b7:be:9b:1a:7f:41:c9:9d:25:
                    7d:39:9f:c0:90:12:9f:ac:16:74:3f:e7:05:c7:94:
                    de:82:a8:d6:b8:37:c3:89:6a:51:05:15:26:e2:2e:
                    74:34:4f:da:cb:5a:dd:5e:a2:57:0f:2f:4d:1e:d1:
                    a0:d5:c0:4a:fd:e6:6a:e8:fb:de:88:12:dc:7f:39:
                    0e:85:96:59:40:52:5c:09:89:6e:41:b7:86:20:62:
                    19:a3:71:22:8a:59:55:4e:07:9d:41:6b:64:5a:61:
                    67:03:6b:64:1b:e3:54:a8:b2:6c:08:ae:79:7c:09:
                    df:6c:8b:9a:9f:44:ce:d5:05:cc:ec:ca:bb:e9:7c:
                    7b:d2:31:3c:a5:0a:8a:01:19:de:86:26:e1:e0:be:
                    01:e0:ca:42:b7:f3:d6:c7:a7:b8:a9:b8:49:f6:db:
                    82:29:74:c8:8e:58:a9:8b:ed:fb:62:9d:d4:08:c7:
                    1e:24:2b:94:e9:55:55:73:a6:9d:9b:a1:8d:ae:d3:
                    ec:d6:b9:cc:d7:72:17:8b:b9:9d:4f:b2:2b:b6:a6:
                    c3:fc:47:e1:8f:27:71:09:ab:6d:c9:20:bb:c6:e8:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
            X509v3 Authority Key Identifier:
                keyid:EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:74:ac:ba:6c:6d:e5:20:09:54:11:6b:8f:c6:ae:2f:51:35:
         08:1e:59:e2:ba:9c:e5:f9:0d:48:2a:cf:7a:2e:e9:68:ca:01:
         c3:a0:43:be:2c:00:b1:64:71:8f:67:7c:12:c3:18:db:89:ab:
         e9:b1:dc:cb:9e:10:7c:ba:6b:e9:7e:79:d4:94:b8:b2:c2:ff:
         f0:db:b3:04:2e:83:6e:5c:b5:d9:2f:1c:6b:e6:6f:75:e4:c1:
         c1:53:b3:4a:7e:54:bc:49:84:2e:2f:ac:32:74:7d:43:8f:81:
         4d:08:51:fa:07:d6:eb:78:6a:a7:b7:f4:06:18:2b:4e:b3:65:
         a4:1a:15:14:85:ce:99:49:b0:ef:e8:c2:a8:c8:28:14:f3:af:
         17:01:b0:55:bf:02:90:a8:88:b3:50:fb:5e:6c:30:89:8c:e0:
         85:fd:4f:9b:19:fc:e3:9b:c0:a9:88:04:18:7f:e5:4e:43:cf:
         9b:eb:b6:d2:3d:b1:d9:39:e9:ce:71:88:c2:2a:2b:b0:6f:ad:
         7f:75:41:d3:60:ca:a0:d6:67:dc:ce:a6:03:f9:f4:f2:88:ba:
         19:f2:ab:d7:79:8f:77:24:17:3b:0e:0d:76:c4:69:87:8c:d4:
         df:c4:bf:93:d9:2c:5e:80:ff:1c:30:c1:d9:f4:64:e6:64:e7:
         52:d8:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:21:05 2025 by rpki-client