Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
File:                     5iM43jMsb0ueJZbuXcN5ol7-WM8.mft (raw, json)
Hash identifier:          lmtVGhj6TNTXZ9OvHM99FLAEDHHmlo9Bk5coyTBY+VE=
Subject key identifier:   C7:94:7D:E7:84:E1:33:76:E0:EC:72:0E:D4:01:51:70:58:14:5F:44
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
Manifest number:          059C
Signing time:             Fri 06 Jun 2025 12:28:26 +0000
Manifest this update:     Fri 06 Jun 2025 12:28:26 +0000
Manifest next update:     Sat 21 Jun 2025 12:28:26 +0000
Files and hashes:         1: 5iM43jMsb0ueJZbuXcN5ol7-WM8.crl (hash: s68BGprn+YdKYuhIJhGruPJ5uhWJH8SF6uNKm9Szr0A=)
                          2: 5sJnZ4OOd0CkDlOCvX01l44sa1U.roa (hash: b7AllcQeQ9hZG71XnhfL9jRCjduDCEraFbhrnI4Gzk8=)
                          3: 65GNbRzvgHmu0A9kpewJlBol3w0.roa (hash: Wbtd58J5aifMRiVE9uFuOQeVPdYOjaqSZ45XNoA1OlY=)
                          4: 9d8MC5H9mqcLCIksMZMUktRgPSM.roa (hash: 7r9y44geCugc2m5c2/P5VteUoFhuBISm4j4DX/wT57M=)
                          5: A-Stv4pmvSoEl9Xjn3vHYhmxNGQ.roa (hash: wHjOA7jHdBNh3vKXLOiPiCwH8RMO7GynIxHtqlxTANA=)
                          6: B2nDdH2yqgPUIG9Rrbxd5WDYCkc.roa (hash: STh/l/cqgDz6FeXC0gXe5CGAihyLmeFmxXokEimYosU=)
                          7: CSfnftx7z1HK_hy4T6fS6ugevD8.roa (hash: BZQVATzXhyiODOu58GYW4HOVPhH9yO2K1q6/IQrQAL8=)
                          8: QD5fG-b4FPMyEjb8Q_kcnCO2S2c.roa (hash: UHnUbNQhssEOBG7v0zNf+i0xAUa1W1zucYG+HPq5uaM=)
                          9: R5XOhp2G5p1iU98paArBhDhpfyw.roa (hash: zPIyH1Y2r8TdXyLgYm8sNxZELKhI4+Qwc9ehd6+yV0k=)
                          10: UXDCWU15lhwbuVlYhqB-3IxMGzA.roa (hash: oPLTQKUZYIU/620vp0EvExWTwMltcqyj/Bb+JGe8CkU=)
                          11: XfKFELc2G_KIU56EedI0MDFTsx4.roa (hash: /R7AJ1Ctv42+HgzneIrNEGfsH04OVkb5ud2krwo5+NQ=)
                          12: XyMB22IJAYDcJyHhnFQYtv5hMh4.roa (hash: mDubaC6IMuiUbwq1gxQAyNABACzIqAxfL/vikSnV/Pg=)
                          13: YLqZ-HWXy6gklHHboPHfeWXb75A.roa (hash: yUYFCf+n9keEA5ADKTZfw1F8KUQ4cFHzbC4OZlclYV8=)
                          14: _alshHXK4XlHFYU-5JDahf_Qcr4.roa (hash: Q+zMAvOgdI04ltj1IKAackdqLy7iaraQxFFht+So/KQ=)
                          15: cv-QqGrqeTIav5j3BP4JfVds2h0.roa (hash: NNJScDZ6Q+YvTVbRSr4fXI6bCZFhkW6lTRAPZ6R1NlI=)
                          16: dZHDCBtH4zdPL9T1sswoUZUlcWk.roa (hash: lluMwQBlcaYUdAiQccY8M4EmasuFxvu3mWL5EXMteVo=)
                          17: gukgBlUTG6YMKvbsrhQ_0_UFYYM.roa (hash: z1X7m4qHL1twosGvjPg1bHODjo8Si9qqTA6kDF8ncY4=)
                          18: rGTb99wymarRPP16m1M9S3kvtpo.roa (hash: 2Ptjyy0Nx66cySKbXqtEfx9C08J0eQdMSdlhh3zkM3c=)
                          19: vNHXPCFCI9ubOlO6hQ3u4_kIvgk.roa (hash: ggA4vEd7n3nR4hx0ir7a2KG2wkeL1TlETfuiLdsgesI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 14:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: May 23 09:57:58 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=C7947DE784E13376E0EC720ED401517058145F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7d:ed:71:5f:0f:bf:d9:a5:73:dd:ba:6e:91:
                    09:61:8e:43:41:3f:1d:e0:7f:ed:af:f2:c5:fe:f5:
                    32:09:2f:21:76:04:00:1e:36:8a:41:bb:21:84:02:
                    52:3e:ad:77:6d:d9:17:28:90:58:ad:1a:ae:de:e0:
                    4d:03:c0:bb:fc:11:9f:61:cf:35:d9:70:8a:27:9f:
                    5b:9b:da:65:a0:98:55:83:9b:71:e2:a5:1d:98:b9:
                    cd:31:3a:23:cf:dc:aa:7f:1d:bc:c7:1f:a6:a9:f5:
                    92:0a:ff:cb:14:bf:60:68:0a:9e:c8:69:03:68:df:
                    d0:02:5d:07:9e:30:03:0e:4c:96:8c:90:e6:56:b1:
                    7e:54:22:0d:62:a7:f4:4b:ad:aa:96:43:94:e5:26:
                    64:ad:13:a5:95:8e:4d:46:06:b0:39:bf:02:26:65:
                    33:0f:43:0c:c3:77:70:8a:48:89:3d:c6:b6:3a:78:
                    a6:5e:e1:3d:d9:24:36:a0:a2:66:75:1c:7f:e4:71:
                    74:dc:1c:3c:b1:7a:e1:a4:93:14:75:f2:90:e8:13:
                    17:63:66:ae:8c:d5:a6:b7:f5:3a:bf:63:9d:d9:b6:
                    d0:a5:23:99:e7:1e:b1:a3:e1:24:23:e8:0a:cf:67:
                    ed:32:a4:39:01:ec:dd:f8:e3:37:f2:a2:83:cb:ef:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:94:7D:E7:84:E1:33:76:E0:EC:72:0E:D4:01:51:70:58:14:5F:44
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:79:e7:22:9f:78:75:16:ec:47:02:95:8c:0d:16:cb:4c:
         73:fc:39:8b:99:0c:7e:82:b6:5b:76:db:4f:34:71:c9:23:7b:
         ce:ab:45:a6:3b:7c:b1:e8:3f:1f:2c:52:ce:9d:b8:7e:7e:85:
         64:ad:9c:2b:c9:3e:4f:14:e0:a9:b3:b9:df:46:14:85:5b:fb:
         3b:02:c6:8c:6b:4c:f3:63:81:9e:f6:4f:73:a6:b6:0c:d3:cd:
         4c:ad:99:a8:90:d5:17:d1:8e:87:ac:95:5b:09:70:c9:7c:c7:
         6d:0f:67:32:5c:5a:8c:67:e0:11:87:3e:f3:93:0e:ec:6f:99:
         38:aa:1f:59:83:e9:d0:8a:14:62:9f:b4:fc:bb:91:db:7f:f6:
         96:e8:72:7c:b3:a3:73:21:93:1b:dc:4d:67:20:3d:e6:ef:04:
         3a:c8:26:82:a5:33:90:2f:58:8c:d8:d1:dd:18:05:f5:e4:8d:
         f2:45:1d:fb:7b:3a:04:c7:68:5d:5e:7f:44:a0:02:49:01:57:
         b5:56:0c:c0:ba:c7:95:8a:d1:ec:19:a5:5f:6f:1f:a8:5a:8a:
         66:6a:65:f8:52:80:a2:fb:60:6a:c7:42:d4:01:78:b3:3e:27:
         f8:a3:79:ea:44:82:55:ca:af:2c:29:a1:cc:b8:f1:a7:06:8f:
         bb:c6:ba:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:28:48 2025 by rpki-client