Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
File:                     rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft (raw, json)
Hash identifier:          JTO/HlpO3wuATQMH+e4QfhZ629oWGHFIKCh+4rUqmu4=
Subject key identifier:   ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Certificate issuer:       /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial:       07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
Manifest number:          023D
Signing time:             Sun 16 Feb 2025 17:58:28 +0000
Manifest this update:     Sun 16 Feb 2025 17:58:28 +0000
Manifest next update:     Mon 03 Mar 2025 17:58:28 +0000
Files and hashes:         1: Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa (hash: OW1a9fJXbnd5dRA6aPAoX3XECFuiihiMUNsm3zVdQQ0=)
                          2: rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl (hash: qXg+6jpucZVL0QY1ztPIniYqRtunFvwDsaRRdvhWF0U=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
        Validity
            Not Before: Feb 15 01:38:55 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=ED5BCE6391E956982A8B963C430979A1AE437821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:81:fd:b5:37:0f:c5:f1:1c:dc:53:fa:bc:
                    40:ed:aa:ec:51:6f:d4:be:58:85:4f:97:e0:f0:0f:
                    0d:86:1f:1d:26:a4:85:61:27:34:c8:1a:c1:80:ae:
                    cf:d9:a7:4b:06:de:9a:6f:c1:7c:bc:18:95:64:59:
                    bd:5a:48:4c:18:33:57:e2:53:7e:28:a9:c8:2d:e6:
                    f4:02:d3:7d:c6:33:9b:47:b1:c3:13:17:33:d7:45:
                    9f:0a:19:e1:0b:09:76:dd:2d:5c:aa:28:1a:bf:a2:
                    d0:fd:ab:5b:e3:b4:8d:a7:ed:99:67:bc:6d:b8:13:
                    56:33:5e:67:89:58:9a:59:c0:6e:81:50:be:81:32:
                    ee:2b:b0:94:99:11:8b:f3:e0:0c:f5:42:04:2f:87:
                    cd:df:f9:f8:85:0e:26:97:f2:c0:35:10:84:f0:30:
                    ef:90:b5:63:e2:06:ad:00:cc:55:44:ff:c2:06:b1:
                    c4:dc:0a:a8:df:f1:01:94:0d:a1:a3:01:b1:69:4c:
                    8c:47:f6:83:b9:96:54:6c:55:f1:0b:f5:fc:f8:ce:
                    a5:3c:91:62:ef:02:ab:b0:ed:0b:ca:ad:f0:1f:91:
                    35:31:c8:35:b0:b3:f8:97:18:45:8f:0c:e3:4d:d1:
                    3a:93:ba:b8:eb:9d:5c:f2:8b:3a:2f:29:54:ff:1e:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
            X509v3 Authority Key Identifier:
                keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:3e:8f:41:e0:3b:33:36:7d:36:d0:6e:53:71:74:78:08:3d:
         94:8f:88:39:2c:f7:04:21:96:63:e2:71:cc:b3:e0:0c:69:fc:
         1a:11:a6:68:bc:13:25:03:f6:cc:05:93:18:eb:1d:ff:8a:86:
         4d:25:82:69:50:d2:74:bf:6d:92:fb:6f:e4:f4:c3:94:10:d9:
         cf:2e:2c:df:b6:3c:72:77:94:26:7a:21:1a:b3:e5:2d:82:a2:
         08:37:45:18:db:c8:1a:81:7f:dc:1b:06:fa:26:fc:91:3f:8e:
         6c:26:9c:24:12:a6:0f:16:06:96:fa:1d:7a:37:fb:67:ed:8e:
         b3:77:22:cb:23:3b:64:7a:96:1e:f2:a5:a9:2d:8a:fa:a7:de:
         77:c5:ae:34:56:1b:4a:39:ce:a2:13:75:62:4a:23:a1:98:bf:
         87:86:6b:2c:06:6e:69:f5:4f:e0:74:d8:02:6e:b4:e2:3b:bc:
         8d:85:c6:e5:c9:d7:55:fd:f3:cf:b0:74:6d:d9:38:4d:93:10:
         8a:01:69:00:13:88:4d:06:45:b9:a5:65:28:0f:e0:be:49:66:
         4d:f1:08:09:c0:16:f0:93:9f:80:60:79:78:d7:20:aa:47:ae:
         6e:e9:13:80:da:d8:f6:40:c9:76:e3:44:4b:3c:9b:a7:03:c2:
         16:53:0f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:23 2025 by rpki-client