Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
File:                     AHMEyMeENVImB-HPrx884aIh_30.mft (raw, json)
Hash identifier:          HBBvbzMuJAXhLB352Jv2W/VVtOhNjJHyaCuvV9tyyjU=
Subject key identifier:   CE:16:36:1F:10:C6:3D:AA:19:8E:97:F1:CF:6C:15:9F:47:D5:45:DF
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       35
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
Manifest number:          0576
Signing time:             Tue 03 Jun 2025 19:59:58 +0000
Manifest this update:     Tue 03 Jun 2025 19:59:58 +0000
Manifest next update:     Wed 18 Jun 2025 19:59:58 +0000
Files and hashes:         1: AHMEyMeENVImB-HPrx884aIh_30.crl (hash: CemxP7I9OdnRujtWOWd7NfMM7Gw0CZhic5w5DN23i8o=)
                          2: xRsF8TDx4-WnwySXcbZc49cWczI.roa (hash: eKrM0YyVqN5xxDS2Ka+QERuzGjteBwGpzpZH+yPephE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: May 23 09:58:23 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=CE16361F10C63DAA198E97F1CF6C159F47D545DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:b9:95:c1:ba:bc:8b:59:97:10:2e:6d:71:
                    7a:8f:e9:e6:9e:db:50:bb:58:03:99:ac:cd:39:a0:
                    27:7c:aa:af:70:eb:10:21:29:0e:d9:e2:e9:5b:f6:
                    51:ad:46:19:14:f5:98:60:ae:cb:61:aa:de:ee:b7:
                    db:6b:47:f8:0c:a8:1d:59:0d:0c:bb:62:24:1a:16:
                    40:31:0e:09:ae:88:55:5a:8f:ed:f4:97:bb:28:ac:
                    6a:d8:67:c9:33:38:c4:32:74:b5:99:b3:5a:d4:50:
                    71:e9:a3:07:bb:3b:b0:92:1a:92:16:a6:fd:46:be:
                    e2:15:b1:04:af:77:09:ef:ef:54:0d:ac:5c:e8:99:
                    1e:af:73:12:93:ce:1a:af:34:97:0c:d9:1b:58:73:
                    07:b9:c5:13:65:96:de:64:7d:74:3f:e1:c4:f0:02:
                    11:c2:ca:be:fb:af:12:6c:48:f1:40:6a:42:88:aa:
                    a3:fe:f7:cf:99:df:9e:b6:37:90:6b:9b:e6:2c:e4:
                    66:05:d3:4e:98:d3:25:59:66:ae:a1:26:f7:6f:2b:
                    3d:9a:2a:83:45:f3:09:3c:36:47:62:be:b4:35:05:
                    38:51:75:9e:76:ef:21:14:0f:8c:01:f1:b6:f7:c6:
                    6e:42:d3:01:07:62:c4:e3:14:e6:ff:2c:9e:f2:f0:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:36:1F:10:C6:3D:AA:19:8E:97:F1:CF:6C:15:9F:47:D5:45:DF
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:01:67:c9:3b:b5:aa:85:3b:05:f8:1c:ea:e4:fd:f5:27:8b:
         39:34:bc:65:e7:6d:4c:9c:67:92:0b:0a:f2:b8:8d:1f:b8:0f:
         dc:45:b0:64:3e:4a:68:ea:3c:c9:5a:d3:cf:9a:43:65:31:0f:
         08:f5:85:62:12:c4:6f:4d:71:ac:c7:7a:9b:86:a8:61:67:51:
         49:e2:43:76:75:08:aa:80:de:a4:92:cc:83:a3:85:aa:f7:90:
         53:35:af:10:bf:02:a2:c5:36:29:09:94:d3:cd:65:25:79:83:
         f8:43:27:b5:83:07:54:56:93:9f:bc:94:ad:bf:d0:08:27:ac:
         42:bd:05:a4:44:53:73:cb:63:52:dc:bc:f9:58:c6:92:67:67:
         e1:72:1f:e3:7d:3c:43:e1:34:a3:03:a1:fc:b1:0e:67:41:24:
         8e:da:29:65:93:8f:71:32:43:de:be:d1:0e:ca:a5:d0:da:a9:
         66:7a:c2:db:22:60:47:3c:56:0e:a2:7a:2a:28:6c:74:4a:6b:
         73:00:fb:75:06:30:ac:cf:22:9f:17:72:17:fa:a9:94:70:15:
         18:0f:e4:e0:1d:c9:28:c1:c4:4c:b6:ef:29:24:9d:5b:aa:58:
         20:b8:80:8e:08:31:cc:ca:3d:f9:6e:07:7f:4e:91:d9:d7:38:
         40:0f:c3:5f
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcz
MDRDOEM3ODQzNTUyMjYwN0UxQ0ZBRjFGM0NFMUEyMjFGRjdEMB4XDTI1MDUyMzA5
NTgyM1oXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoQ0UxNjM2MUYxMEM2M0RB
QTE5OEU5N0YxQ0Y2QzE1OUY0N0Q1NDVERjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM85uZXBuryLWZcQLm1xeo/p5p7bULtYA5mszTmgJ3yqr3DrECEp
Dtni6Vv2Ua1GGRT1mGCuy2Gq3u6322tH+AyoHVkNDLtiJBoWQDEOCa6IVVqP7fSX
uyisathnyTM4xDJ0tZmzWtRQcemjB7s7sJIakham/Ua+4hWxBK93Ce/vVA2sXOiZ
Hq9zEpPOGq80lwzZG1hzB7nFE2WW3mR9dD/hxPACEcLKvvuvEmxI8UBqQoiqo/73
z5nfnrY3kGub5izkZgXTTpjTJVlmrqEm928rPZoqg0XzCTw2R2K+tDUFOFF1nnbv
IRQPjAHxtvfGbkLTAQdixOMU5v8snvLwl80CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBTOFjYfEMY9qhmOl/HPbBWfR9VF3zAfBgNVHSMEGDAWgBQAcwTIx4Q1UiYH4c+v
HzzhoiH/fTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkwNjIvQUhNRXlNZUVOVkltQi1IUHJ4ODg0YUloXzMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQUhNRXlNZUVOVkltQi1IUHJ4ODg0
YUloXzMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzM5MDYyL0FITUV5TWVFTlZJbUItSFByeDg4NGFJaF8zMC5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2AWfJO7WqhTsF+Bzq5P31J4s5NLxl521MnGeSCwryuI0fuA/cRbBk
Pkpo6jzJWtPPmkNlMQ8I9YViEsRvTXGsx3qbhqhhZ1FJ4kN2dQiqgN6kksyDo4Wq
95BTNa8QvwKixTYpCZTTzWUleYP4Qye1gwdUVpOfvJStv9AIJ6xCvQWkRFNzy2NS
3Lz5WMaSZ2fhch/jfTxD4TSjA6H8sQ5nQSSO2illk49xMkPevtEOyqXQ2qlmesLb
ImBHPFYOonoqKGx0SmtzAPt1BjCszyKfF3IX+qmUcBUYD+TgHckowcRMtu8pJJ1b
qlgguICOCDHMyj35bgd/TpHZ1zhAD8Nf
-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:34 2025 by rpki-client