Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
File:                     0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json)
Hash identifier:          f+pRTgQl+fFaXt5a1BiS1wjvpw3TxT/zN242VlOi98w=
Subject key identifier:   2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
Manifest number:          05F3
Signing time:             Tue 03 Jun 2025 19:57:27 +0000
Manifest this update:     Tue 03 Jun 2025 19:57:27 +0000
Manifest next update:     Wed 18 Jun 2025 19:57:27 +0000
Files and hashes:         1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: 7lQW+Fh7g77dua6NGKufz8+XCnW9J86rB2tLpiPRBS0=)
                          2: MyckJyek9ji7eE6xv1jl26s-o8Y.roa (hash: DupaFcN1Jnb/CThzl3B54BAXvTZdDf9U0QE9+9haZEE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: May 23 09:55:51 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5:
                    29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd:
                    2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3:
                    f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3:
                    ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67:
                    99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30:
                    f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df:
                    ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a:
                    4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6:
                    13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e:
                    c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70:
                    82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2:
                    6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3:
                    99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c:
                    94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7:
                    a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc:
                    d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a9:f0:15:11:ad:e1:60:91:9d:1b:4d:30:2d:29:2e:44:e4:
         4f:fd:95:b5:18:a3:eb:93:f3:5d:5e:24:cf:ae:40:10:f3:c8:
         ed:32:08:e0:97:d9:69:e3:67:05:f7:39:60:a9:18:86:b8:1a:
         9f:dd:5e:b1:3d:03:d8:53:24:14:fd:90:de:9e:54:fe:a6:50:
         8c:ba:6d:cc:5f:be:4e:3c:e3:4d:31:e4:aa:1e:94:e1:f7:4d:
         b4:f2:32:34:ef:bd:9b:c5:99:b9:d0:0f:f3:23:2d:30:fd:49:
         6c:96:51:85:e3:3d:01:9f:ab:3b:d8:19:00:76:79:3c:b7:d7:
         27:db:70:98:b6:02:50:63:42:8f:71:61:dd:a8:83:cb:04:26:
         d6:cb:0a:38:90:e4:75:68:0e:ad:8f:31:25:6b:14:fb:6d:6e:
         85:a6:09:68:79:e9:14:05:f7:c9:8c:85:4f:07:b4:a2:a9:87:
         63:41:36:d0:4c:4c:25:48:84:ae:7e:66:57:67:d0:54:cd:11:
         ae:c4:b8:8e:0b:3a:47:84:30:61:fa:d5:62:f5:96:c4:39:07:
         66:b2:90:5c:8f:84:67:7c:1f:6c:1f:b8:c1:e2:e2:5d:85:2e:
         65:60:1c:83:fe:b6:b1:2f:87:69:44:64:2a:fb:48:79:d6:b1:
         f8:74:bb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:48:45 2025 by rpki-client