Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
File:                     7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft (raw, json)
Hash identifier:          OQTCIVQAp29JddysXLIuYO0C7EZJEGQycdaPKotH6IU=
Subject key identifier:   F9:D9:C1:DA:29:F8:E7:8C:6A:5D:BF:94:D4:AA:35:74:63:B5:E9:97
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
Manifest number:          034D
Signing time:             Sun 16 Feb 2025 17:49:18 +0000
Manifest this update:     Sun 16 Feb 2025 17:49:18 +0000
Manifest next update:     Mon 03 Mar 2025 17:49:18 +0000
Files and hashes:         1: 7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl (hash: Wdr3kCTAcDyhVHnKpN/EaymTFjXNJQM2B2tfFlD9NYg=)
                          2: B1yKr8OwPFHhRBX84Ujnn2C4lQc.roa (hash: 26P2T0+7/nFBJlRYXK1wwVJCMQPtEYsJ1B4IjuXNu7I=)
                          3: mYqSUHqtvc7wyCZGp7StK3JNyh0.roa (hash: isFVwQYPNFm0P/dSI9PVcYbgG85JYjGoZ/2jCMduWhY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: Feb 15 01:35:29 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=F9D9C1DA29F8E78C6A5DBF94D4AA357463B5E997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:db:05:be:90:ee:69:cc:35:b5:91:81:e6:
                    63:26:73:56:05:fc:07:4b:fd:24:17:45:cd:53:a5:
                    d4:31:2e:ad:80:0c:af:f0:70:bb:66:e2:f0:19:02:
                    66:1e:9f:63:53:a0:53:35:d6:33:1d:d9:8a:4a:01:
                    db:27:56:83:a6:af:d5:aa:33:74:cc:e4:7b:e4:94:
                    f8:e3:f7:80:e0:93:56:48:bc:84:1c:bd:17:ce:bc:
                    0f:14:1e:af:4d:5c:37:4b:0d:a1:f2:3c:bf:22:c9:
                    f3:2e:6a:32:dd:48:c5:b7:60:d6:df:17:f4:9c:e7:
                    ba:09:f9:a8:74:e7:11:13:c7:05:a3:f1:79:75:36:
                    19:d1:5e:12:aa:b0:95:de:ec:ec:91:ff:33:ce:78:
                    b8:9f:4b:f3:47:37:ff:c8:50:aa:eb:f8:58:42:98:
                    d8:ad:88:5a:9f:32:49:b4:81:bc:51:0f:10:16:b8:
                    1b:e4:07:b4:71:f9:00:f1:6a:99:0d:bb:41:8e:bd:
                    26:6a:73:ef:fd:f3:31:f7:18:2e:7a:c9:f5:02:b8:
                    8c:ba:f1:02:ee:43:b4:c1:5a:fa:d8:95:06:8d:c1:
                    e3:27:0b:b3:44:a9:e2:06:71:59:dc:5b:77:eb:b6:
                    11:c9:0e:2d:37:1e:cf:45:bb:5a:9f:e4:22:b8:18:
                    0d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:C1:DA:29:F8:E7:8C:6A:5D:BF:94:D4:AA:35:74:63:B5:E9:97
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:83:b6:1f:46:2d:71:56:ba:1e:38:e6:20:ec:83:31:7a:a6:
         7a:1d:b4:84:54:af:e2:ec:6b:e0:f1:0d:b8:2b:a1:85:a4:0d:
         a1:8a:4a:87:0d:41:e0:e8:d5:d2:89:68:6b:f3:b5:0d:e6:9b:
         b6:e3:f1:d4:2b:de:b8:37:97:d8:3e:e9:3e:22:67:ca:09:fa:
         43:7a:86:02:c4:2f:3e:a0:de:3a:10:3e:3b:50:48:c8:92:76:
         0b:ce:4e:70:58:cd:65:82:f2:eb:67:7a:8b:44:8f:48:80:5e:
         eb:80:c4:92:0a:64:3f:3c:ca:da:4f:6a:31:5e:43:cd:5c:b0:
         ba:56:02:32:aa:67:8d:8c:1a:84:cb:bc:5d:40:a1:08:83:17:
         b9:be:d5:2d:2e:06:08:da:ff:4f:8d:15:dd:e6:4e:b0:49:b1:
         ac:e4:7b:7d:61:b1:4c:2d:6b:66:83:b8:1b:e0:5f:c3:31:a6:
         ce:53:e8:1d:ad:33:89:0a:a8:6f:ea:e7:d8:8e:bb:80:39:82:
         5d:d8:bd:ca:08:e4:f6:c2:7b:10:62:bd:38:0a:37:de:3f:2b:
         e0:d7:9d:04:a8:80:5c:e8:30:81:a3:69:c3:09:bd:a4:aa:34:
         1b:09:91:eb:8c:85:1a:ac:b0:32:bd:9b:a8:7a:bb:6d:37:9a:
         b4:86:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:44 2025 by rpki-client