Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
File:                     6ESHjyExP90FqcNFb_9ImIXcqmU.mft (raw, json)
Hash identifier:          +b33zAjKZG/OF3Nisa6ccw74a7oHuD0LGsN7H3J+Buo=
Subject key identifier:   AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Certificate issuer:       /CN=E844878F21313FDD05A9C3456FFF489885DCAA65
Certificate serial:       17
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
Manifest number:          0503
Signing time:             Tue 03 Jun 2025 21:05:13 +0000
Manifest this update:     Tue 03 Jun 2025 21:05:13 +0000
Manifest next update:     Wed 18 Jun 2025 21:05:13 +0000
Files and hashes:         1: 6ESHjyExP90FqcNFb_9ImIXcqmU.crl (hash: M22d8YxKXlVpO+qyghOLtjaWApW1oSfeFdNpnznWg58=)
                          2: j5NlJ0VrmIclkfgLd_-j51w1G20.roa (hash: WdXn0L7OLssxTE5Ao/XuguozaQUV9PsHEr8f8RZDhKA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 21:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Validity
            Not Before: May 23 10:03:28 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=AE2F860913AE68A889E4537453BF9E0CE2F53C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:80:a7:3d:3d:f5:9e:99:b0:98:7c:15:2c:
                    a1:11:4b:6b:bd:9a:f2:d8:08:68:81:78:7a:74:f4:
                    9b:82:91:0d:98:8b:8b:ce:89:61:91:46:a7:59:45:
                    5d:d3:bb:37:0a:aa:03:19:f7:82:e0:da:8d:89:2c:
                    d0:69:4b:81:98:21:8c:d4:a8:c3:ac:f7:1f:df:13:
                    23:63:06:67:61:81:2a:61:d9:f2:e0:c9:aa:f3:3e:
                    76:b0:48:1c:0a:12:cb:d8:e3:3d:c2:81:1a:13:1b:
                    4c:3e:b3:e3:89:d4:e6:95:35:86:59:92:64:69:f4:
                    02:3d:5b:ae:36:52:ba:a8:12:36:dc:22:f1:17:17:
                    54:fd:94:13:a7:e7:6c:22:78:90:10:37:77:c1:29:
                    93:e8:0c:e5:84:84:15:72:63:79:e3:8a:25:8d:70:
                    80:b1:ec:e7:d5:14:e6:28:3c:c9:3e:23:6e:3f:cf:
                    3f:eb:88:9f:0c:76:3c:86:2e:07:b7:97:1b:c5:d1:
                    d5:b2:85:d3:81:ec:75:b7:04:a5:a2:98:58:4b:0c:
                    8b:26:99:77:37:89:f0:8e:be:77:3f:50:8e:3e:53:
                    d8:5d:e4:7c:71:d3:ac:84:c0:24:6d:f5:67:ed:b5:
                    9a:f6:08:6d:b2:d9:28:b8:ec:b0:1c:5e:21:ce:f2:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
            X509v3 Authority Key Identifier:
                keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:ff:8c:ff:91:0d:45:5a:0f:25:46:ab:d8:50:a5:70:5e:
         58:ee:b4:ce:5e:06:a0:fa:73:15:41:26:b7:12:81:62:36:0a:
         59:cc:0e:0b:69:0f:24:cd:3d:40:47:3f:9f:82:e6:b1:33:e7:
         b6:71:f3:71:5a:9f:bb:39:f8:ed:9f:19:d0:93:9d:bc:c9:31:
         cc:97:64:ec:2f:c2:35:a9:37:e9:1f:88:0b:62:0d:4e:0b:a2:
         58:5a:b7:8e:6f:c4:44:17:3b:32:10:af:5d:bb:b4:55:a1:68:
         38:e9:bb:ae:23:15:39:13:ab:cc:f8:d6:64:59:d9:b6:dd:7c:
         7d:69:c2:e1:44:d8:88:6a:09:af:a9:a6:b0:f5:0e:8d:0d:cd:
         55:3c:da:c8:a1:99:64:06:ab:dd:ed:09:a5:ca:ad:1e:d2:ff:
         88:2a:81:fc:81:ae:74:0b:a6:67:5b:70:ef:ca:2e:45:39:4b:
         5d:3a:e3:ad:38:04:4e:bd:01:4e:8b:6b:0d:b9:40:37:b1:ba:
         89:99:46:1f:d3:42:e4:e1:66:74:5a:e0:a6:33:a7:f1:be:45:
         ac:87:62:fd:d1:ab:c0:6d:77:d5:70:7f:07:d0:b0:b5:99:4b:
         93:67:b0:9d:a6:d5:e5:2f:84:ce:2c:b9:3d:8c:2c:10:66:b2:
         e5:6e:d5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:07:44 2025 by rpki-client