Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
File:                     rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft (raw, json)
Hash identifier:          DhRe6Xq9AXa1OjHj2m9YoMmsKbsNfQvsIVNRCEszeG0=
Subject key identifier:   ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Certificate issuer:       /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial:       0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
Manifest number:          04CE
Signing time:             Fri 06 Jun 2025 14:01:34 +0000
Manifest this update:     Fri 06 Jun 2025 14:01:34 +0000
Manifest next update:     Sat 21 Jun 2025 14:01:34 +0000
Files and hashes:         1: Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa (hash: OW1a9fJXbnd5dRA6aPAoX3XECFuiihiMUNsm3zVdQQ0=)
                          2: rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl (hash: NYRWoSLUKDrybXamCl2K7bLN5IdY8HpYU0Eg+/P5DYw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 15:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
        Validity
            Not Before: May 23 10:04:46 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=ED5BCE6391E956982A8B963C430979A1AE437821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:81:fd:b5:37:0f:c5:f1:1c:dc:53:fa:bc:
                    40:ed:aa:ec:51:6f:d4:be:58:85:4f:97:e0:f0:0f:
                    0d:86:1f:1d:26:a4:85:61:27:34:c8:1a:c1:80:ae:
                    cf:d9:a7:4b:06:de:9a:6f:c1:7c:bc:18:95:64:59:
                    bd:5a:48:4c:18:33:57:e2:53:7e:28:a9:c8:2d:e6:
                    f4:02:d3:7d:c6:33:9b:47:b1:c3:13:17:33:d7:45:
                    9f:0a:19:e1:0b:09:76:dd:2d:5c:aa:28:1a:bf:a2:
                    d0:fd:ab:5b:e3:b4:8d:a7:ed:99:67:bc:6d:b8:13:
                    56:33:5e:67:89:58:9a:59:c0:6e:81:50:be:81:32:
                    ee:2b:b0:94:99:11:8b:f3:e0:0c:f5:42:04:2f:87:
                    cd:df:f9:f8:85:0e:26:97:f2:c0:35:10:84:f0:30:
                    ef:90:b5:63:e2:06:ad:00:cc:55:44:ff:c2:06:b1:
                    c4:dc:0a:a8:df:f1:01:94:0d:a1:a3:01:b1:69:4c:
                    8c:47:f6:83:b9:96:54:6c:55:f1:0b:f5:fc:f8:ce:
                    a5:3c:91:62:ef:02:ab:b0:ed:0b:ca:ad:f0:1f:91:
                    35:31:c8:35:b0:b3:f8:97:18:45:8f:0c:e3:4d:d1:
                    3a:93:ba:b8:eb:9d:5c:f2:8b:3a:2f:29:54:ff:1e:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
            X509v3 Authority Key Identifier:
                keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:40:c9:87:16:ca:09:7b:10:e0:ee:2c:d6:c7:37:7b:3b:
         da:d2:ed:1f:8c:59:8d:da:36:3f:ff:74:33:6a:f2:76:f9:f4:
         22:b5:42:ac:4a:9d:bd:90:4a:e6:b4:49:6a:18:2a:48:d1:88:
         c6:84:f0:78:e8:60:a9:62:d8:f2:c7:0c:c9:fa:83:af:fe:e8:
         8c:28:97:5f:0d:7a:9d:b0:b1:c2:07:0b:2b:cd:f1:05:c1:12:
         97:63:74:f6:60:3f:3e:d3:ea:ae:a7:36:3b:02:40:a9:4b:39:
         3f:dc:b7:0b:66:95:cc:7a:c4:ea:d3:e6:35:56:91:b9:0b:7c:
         25:56:7b:c3:71:de:c3:b4:da:50:53:5b:51:da:d6:b1:20:f6:
         2f:8c:82:ab:2d:6a:f0:fb:f2:d8:b1:16:ef:75:87:16:5b:2f:
         ba:67:6e:2e:be:94:4f:50:76:22:b8:38:77:e7:37:48:ff:64:
         9a:63:0c:04:59:16:71:eb:7d:75:dc:e8:34:22:16:4d:b0:ce:
         2e:76:44:32:28:c1:14:97:0b:88:b8:bb:c0:16:59:59:17:08:
         90:2a:3a:91:90:5d:49:cb:46:d3:7d:20:da:03:b3:26:00:62:
         25:43:dd:8e:cd:0b:01:9c:c0:b5:eb:fe:2e:95:32:64:57:44:
         e2:ab:81:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:30:10 2025 by rpki-client