Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
File:                     WQqCKI0uI9v6h2OPPri5leGJfpU.mft (raw, json)
Hash identifier:          XAhuPGjWKbWYDUFtICu0GwwnSnD9vbdIMYLe/n5hykk=
Subject key identifier:   99:C1:9B:C4:1F:7D:05:2D:7F:14:93:10:8F:FD:76:83:01:EF:D6:EC
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       69
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
Manifest number:          0323
Signing time:             Sun 16 Feb 2025 17:55:35 +0000
Manifest this update:     Sun 16 Feb 2025 17:55:35 +0000
Manifest next update:     Mon 03 Mar 2025 17:55:35 +0000
Files and hashes:         1: WQqCKI0uI9v6h2OPPri5leGJfpU.crl (hash: UkzWM+xBHcA2SanGDcB3juD/1IwOMtbwyfspKGJa5MU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Feb 15 01:36:40 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=99C19BC41F7D052D7F1493108FFD768301EFD6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:c2:8d:44:e9:c9:f7:95:31:53:3b:ec:91:
                    a7:40:41:c7:40:6f:08:68:e1:6a:8d:46:88:3e:86:
                    45:5d:95:5a:63:4b:98:73:bd:a0:8d:97:c3:1b:b0:
                    a3:7f:05:1d:7f:91:48:5a:54:6e:0b:33:7e:a5:ff:
                    22:27:85:3d:ca:5c:e1:3e:33:78:16:a8:b4:1c:cc:
                    16:8c:f7:42:04:03:75:04:e4:8d:df:bb:03:78:ca:
                    b5:57:2b:1b:85:bb:4d:6e:eb:17:88:6d:eb:25:d2:
                    19:66:30:6a:50:3b:ae:9c:b1:03:36:a9:7a:11:da:
                    53:3a:de:b3:f1:1a:30:c3:14:7a:42:79:71:2c:55:
                    2b:b9:9c:b2:c8:69:99:05:d0:58:37:69:f7:7b:eb:
                    b4:2f:99:d6:75:4b:67:ea:a5:2b:ce:04:0a:89:cb:
                    9b:f2:77:db:8e:50:b1:7c:57:19:00:b3:59:ec:9f:
                    36:a3:6b:b8:63:1e:d3:8f:b4:34:59:74:a4:38:41:
                    47:8f:4e:07:95:a9:09:e4:86:16:3d:06:34:ed:f3:
                    58:76:1d:e7:fb:12:0b:c1:a2:06:86:0a:87:e0:91:
                    ac:0f:64:43:10:3b:f8:96:8d:7b:f0:30:2c:76:93:
                    85:cb:30:7a:e4:36:e6:91:2f:60:bd:5c:37:88:bb:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C1:9B:C4:1F:7D:05:2D:7F:14:93:10:8F:FD:76:83:01:EF:D6:EC
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:31:41:5c:85:b1:e6:7a:30:29:19:ea:e7:74:da:fd:99:52:
         ed:80:20:95:46:25:bf:43:62:c3:20:65:c2:d3:07:df:2e:b5:
         3f:8c:c5:3e:10:cc:dc:32:04:9b:b0:32:f3:bd:30:6b:e0:ae:
         3d:f7:66:8f:4d:c2:9f:1c:38:f5:b8:2e:10:df:a3:9f:e3:96:
         5a:d0:3f:01:6d:19:52:79:90:32:5d:ac:e7:4e:3d:d8:f1:2d:
         10:28:9c:e7:c4:18:e4:2f:47:ca:47:47:cc:e8:47:78:61:26:
         f0:9c:c4:6c:a5:8d:8b:c8:98:b4:7c:35:92:67:ab:54:c5:27:
         16:1a:30:a4:a7:70:3a:7a:f1:0a:2b:d6:a8:d1:e6:bb:d9:aa:
         40:1d:aa:f3:e2:4c:bc:58:0f:20:ba:e0:13:8f:1b:7d:e5:9d:
         48:db:79:04:c8:48:cf:aa:a4:71:10:b0:d7:d8:5f:71:6a:f3:
         fd:19:23:aa:b8:10:6d:37:8a:10:75:4f:76:b5:25:d6:c4:ce:
         bc:08:c9:9e:4a:77:57:ad:7e:6a:ea:31:16:ad:a6:ca:7b:fe:
         40:6f:99:47:87:8c:71:cf:81:64:73:da:8e:8e:08:dd:bf:1b:
         74:4c:4a:4b:c4:48:3a:71:71:bd:d3:f9:c4:8f:d8:55:ae:11:
         67:be:56:6e
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBaTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTBB
ODIyODhEMkUyM0RCRkE4NzYzOEYzRUI4Qjk5NUUxODk3RTk1MB4XDTI1MDIxNTAx
MzY0MFoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoOTlDMTlCQzQxRjdEMDUy
RDdGMTQ5MzEwOEZGRDc2ODMwMUVGRDZFQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL1Swo1E6cn3lTFTO+yRp0BBx0BvCGjhao1GiD6GRV2VWmNLmHO9
oI2Xwxuwo38FHX+RSFpUbgszfqX/IieFPcpc4T4zeBaotBzMFoz3QgQDdQTkjd+7
A3jKtVcrG4W7TW7rF4ht6yXSGWYwalA7rpyxAzapehHaUzres/EaMMMUekJ5cSxV
K7mcsshpmQXQWDdp93vrtC+Z1nVLZ+qlK84EConLm/J3245QsXxXGQCzWeyfNqNr
uGMe04+0NFl0pDhBR49OB5WpCeSGFj0GNO3zWHYd5/sSC8GiBoYKh+CRrA9kQxA7
+JaNe/AwLHaThcsweuQ25pEvYL1cN4i7B/MCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBSZwZvEH30FLX8UkxCP/XaDAe/W7DAfBgNVHSMEGDAWgBRZCoIojS4j2/qHY48+
uLmV4Yl+lTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODMvV1FxQ0tJMHVJOXY2aDJPUFByaTVsZUdKZnBVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV1FxQ0tJMHVJOXY2aDJPUFByaTVs
ZUdKZnBVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAMUFchbHmejApGerndNr9mVLtgCCVRiW/Q2LDIGXC0wffLrU/jMU+
EMzcMgSbsDLzvTBr4K4992aPTcKfHDj1uC4Q36Of45Za0D8BbRlSeZAyXaznTj3Y
8S0QKJznxBjkL0fKR0fM6Ed4YSbwnMRspY2LyJi0fDWSZ6tUxScWGjCkp3A6evEK
K9ao0ea72apAHarz4ky8WA8guuATjxt95Z1I23kEyEjPqqRxELDX2F9xavP9GSOq
uBBtN4oQdU92tSXWxM68CMmeSndXrX5q6jEWrabKe/5Ab5lHh4xxz4Fkc9qOjgjd
vxt0TEpLxEg6cXG90/nEj9hVrhFnvlZu
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:17 2025 by rpki-client