Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
File:                     SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft (raw, json)
Hash identifier:          or7TAFHGLVaNrx8uinUZw/4pA9vXP9f36VFOD1aoMdE=
Subject key identifier:   A4:8C:4A:74:F0:E7:7A:CD:21:3B:10:DC:AB:4C:39:C3:5D:72:4C:97
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       40
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
Manifest number:          05B8
Signing time:             Thu 05 Jun 2025 16:29:43 +0000
Manifest this update:     Thu 05 Jun 2025 16:29:43 +0000
Manifest next update:     Fri 20 Jun 2025 16:29:43 +0000
Files and hashes:         1: SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl (hash: 7ZW56AqrIGGNWaEgyfKrX8nTOjeMZNSFYDjtZTCBJMY=)
                          2: rJn2W25_8AD6JbiGyP_1NXfH8Z8.roa (hash: wSaPZs3gbtGcu1mU2RNo4pq8WKjZgebSnLQwxLRvVuc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 16:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: May 23 09:57:08 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=A48C4A74F0E77ACD213B10DCAB4C39C35D724C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:be:a3:c4:e1:55:4a:db:1c:a5:4c:7a:c3:
                    2d:70:18:c2:1b:1c:98:59:f0:d5:19:44:f7:ad:4e:
                    3c:9d:18:26:8e:82:95:d0:32:16:2a:1d:69:f4:eb:
                    a3:9b:34:8d:ca:96:ff:27:17:4a:50:e5:82:8c:fa:
                    2a:d2:36:29:fa:28:3e:bf:ad:c9:7f:73:26:99:81:
                    d1:1d:36:6b:0f:13:4c:b8:b1:9b:1e:db:47:0b:f6:
                    ec:84:d6:3a:79:18:b8:a0:bb:9b:12:2d:0a:cd:fc:
                    f4:3d:de:17:cf:e2:58:b0:da:98:55:69:f5:c9:73:
                    e1:2e:fc:d9:bc:80:ab:a1:41:c4:50:2d:6a:4e:d7:
                    7f:7d:2c:1d:ed:87:e3:9d:e5:88:4e:6b:65:93:a0:
                    4c:01:9f:4d:a9:79:8c:ef:87:98:1d:a2:3f:84:c6:
                    bf:34:b3:6f:d0:e3:e7:c9:c4:47:3f:00:5e:ca:d8:
                    cf:b9:46:bc:ff:42:1f:e3:f2:15:00:d7:48:e9:da:
                    2b:5e:23:db:a1:8b:5b:d0:e4:83:85:f9:ec:bc:29:
                    4f:d6:73:ab:ae:87:20:99:fb:bb:20:43:51:7f:e3:
                    13:5f:d2:5f:66:6c:79:26:d0:4e:0e:35:af:8b:6d:
                    4c:50:f1:1c:6c:1f:84:ec:32:ea:64:1b:cf:e4:1e:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:4A:74:F0:E7:7A:CD:21:3B:10:DC:AB:4C:39:C3:5D:72:4C:97
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d5:cc:a4:f5:2b:dd:59:0d:ca:f5:b8:8c:e1:7e:e8:88:5b:
         c8:df:e1:9d:a4:f4:17:5d:a6:f8:34:48:76:00:74:b5:a2:42:
         76:b8:f5:36:b2:55:f2:6e:05:b1:3a:e1:54:74:dc:37:05:9c:
         5d:99:b3:fd:e4:59:31:ba:85:69:13:b5:d3:e9:07:24:35:a0:
         96:96:95:78:e1:af:ba:90:d0:96:10:66:33:e2:83:88:91:90:
         87:ba:cb:54:3e:8f:3f:d2:57:df:61:df:31:9e:2f:8d:db:53:
         c3:0f:68:c3:2b:4b:24:5b:62:9d:5a:d7:1e:22:db:8a:ec:f4:
         f8:0a:70:cd:18:f6:db:fa:57:6b:1f:fa:d2:01:56:e0:79:a1:
         7a:76:1b:6e:75:d6:d5:5a:2e:2f:4b:96:99:28:24:ad:58:9f:
         2f:f2:f3:53:77:8d:a1:f5:4f:b0:68:a0:9b:fd:15:a1:49:f2:
         cd:2f:21:ab:a3:29:72:3a:8f:b0:37:62:e2:23:40:42:63:65:
         f1:82:90:f1:5e:65:25:88:cf:65:53:d6:a0:f8:09:49:72:79:
         27:f4:2c:fe:10:dc:bd:98:37:02:9c:fe:4c:7a:ac:51:66:ec:
         cf:ae:82:f6:28:7e:c7:c7:87:35:f9:20:e5:66:2c:68:d6:22:
         b3:8d:d2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:25:54 2025 by rpki-client