Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
File:                     XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft (raw, json)
Hash identifier:          v/hW9p5ycsjRCZLTJhscjiaZh21Pv0VSGc9I4VDZuSM=
Subject key identifier:   FF:87:17:C7:46:98:A8:61:F8:59:91:5F:B6:3B:63:2D:63:FC:AD:C4
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
Manifest number:          2B
Signing time:             Thu 30 May 2024 01:42:52 +0000
Manifest this update:     Thu 30 May 2024 01:42:52 +0000
Manifest next update:     Sun 09 Jun 2024 01:42:52 +0000
Files and hashes:         1: MRm1fzC1xL35_sTgZN3COd2Ca6g.roa (hash: fOV4qV/95oAHuhbkSYsT/3agejdldtQ9AZSFDYqottc=)
                          2: XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl (hash: S3042FweE7+qz4/5S1hlmr0FNcA0rD/PnKjxxhBkKb4=)
                          3: sDIuWNCXh5YigIxg2pKleBszTT0.roa (hash: bDFnQgnUlKHz0pLkJcQzKH/ilQf9jbGhzYd9d1J5Vhs=)
                          4: vlptni1HDt-Xl36iHVf6fFU7Gw0.roa (hash: 5Wz/8xBm+YOJhbxpTRAIk8BDxADT0/Yorq8qtmbmXIY=)
                          5: yOzwGaH-6m2KyoC50tP-F6Kj8gM.roa (hash: tQFXboJjdxI/5NqAiiH5l7NFXkwKLg/U2ZiL5XVnFAY=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: May 15 01:37:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FF8717C74698A861F859915FB63B632D63FCADC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:05:41:13:21:a3:88:d0:a1:16:86:7a:00:
                    fe:a4:bd:0c:1e:fb:72:18:a0:f2:92:d5:99:9b:59:
                    7f:c7:dc:b1:58:1d:54:1c:ec:42:14:c1:2d:71:d5:
                    59:2d:fa:ff:a9:eb:03:1b:b7:09:95:74:59:c1:8b:
                    71:c4:dc:f8:d8:9f:26:b4:6c:c2:28:9d:4f:85:c1:
                    3c:23:fe:ed:0d:61:69:68:3b:bc:3e:6e:3f:11:73:
                    ec:06:0e:4e:2f:fe:9b:be:5e:2d:4c:59:af:be:a5:
                    0f:06:15:66:c5:38:4f:88:92:b2:19:78:8c:98:87:
                    ac:8e:c8:c3:94:8b:3f:f2:41:94:02:1d:8b:89:47:
                    6f:63:46:9e:d8:41:56:1d:7a:b7:a3:f9:e3:a9:a4:
                    fb:43:45:dc:bd:f5:a2:0b:68:eb:e3:f2:63:7a:ce:
                    34:c2:39:71:53:6c:0d:ce:dc:f8:43:cb:0f:03:83:
                    e7:1c:50:ce:6f:e3:1e:5e:aa:e4:0d:d8:48:b9:27:
                    46:5f:44:3b:41:b0:4e:0d:cb:9a:8b:58:a7:17:1e:
                    8e:ce:28:2e:e1:e7:f6:69:dd:d2:05:b3:8a:0b:cb:
                    1b:fb:25:6b:08:3e:ed:7b:c3:ac:41:0a:c0:69:de:
                    15:ae:0f:b4:a7:fd:3c:0b:56:38:a9:e4:59:3b:36:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:17:C7:46:98:A8:61:F8:59:91:5F:B6:3B:63:2D:63:FC:AD:C4
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:77:1a:91:95:e1:3a:8f:50:a3:02:d4:d3:57:7e:95:d0:
         b1:f7:e2:19:a8:2c:9b:d1:56:34:9d:d9:00:be:86:1e:ac:fd:
         6d:e8:c5:3a:e8:73:22:8f:48:de:e8:e2:89:48:13:3e:0d:3e:
         db:7d:17:40:ea:8f:42:db:eb:14:3f:8d:9d:06:3b:c6:95:70:
         e4:f1:25:13:40:4d:16:29:f4:a1:c7:9e:31:fa:db:87:3f:07:
         07:62:20:75:6a:c8:c7:8f:65:95:dd:9d:13:68:31:2d:af:da:
         4b:c7:f3:7c:fd:3a:33:75:9c:8a:9e:a7:11:26:4e:cc:fa:bd:
         ce:0e:7e:3f:ae:5b:ef:16:c4:4d:db:40:e6:3b:53:98:ad:c7:
         b3:ab:d6:94:5e:44:c9:92:ca:02:7c:37:9c:88:8f:f5:96:79:
         05:31:ad:f0:9f:22:2c:6b:8d:81:19:76:c3:52:ee:33:5a:ec:
         dd:26:50:6f:ec:f2:06:13:37:0f:51:40:44:73:59:55:41:fa:
         de:52:e1:5c:4b:54:57:f7:69:cb:ce:9b:d0:a0:4a:3e:3c:fd:
         d5:bd:cd:77:16:79:59:08:b3:ad:8b:28:71:38:db:48:50:10:
         06:32:fc:95:e0:a2:ea:04:1f:f1:96:f2:ec:50:c0:a3:84:3e:
         a7:18:39:e4
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDhG
NDhGOTlDNUIwNzQ1Qjc3RjhCQ0E3NTRFNjM4ODVDQURDNDE4MB4XDTI0MDUxNTAx
Mzc0OVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRkY4NzE3Qzc0Njk4QTg2
MUY4NTk5MTVGQjYzQjYzMkQ2M0ZDQURDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMYBBUETIaOI0KEWhnoA/qS9DB77chig8pLVmZtZf8fcsVgdVBzs
QhTBLXHVWS36/6nrAxu3CZV0WcGLccTc+NifJrRswiidT4XBPCP+7Q1haWg7vD5u
PxFz7AYOTi/+m75eLUxZr76lDwYVZsU4T4iSshl4jJiHrI7Iw5SLP/JBlAIdi4lH
b2NGnthBVh16t6P546mk+0NF3L31ogto6+PyY3rONMI5cVNsDc7c+EPLDwOD5xxQ
zm/jHl6q5A3YSLknRl9EO0GwTg3LmotYpxcejs4oLuHn9mnd0gWzigvLG/slawg+
7XvDrEEKwGneFa4PtKf9PAtWOKnkWTs2CxECAwEAAaOCAjswggI3MB0GA1UdDgQW
BBT/hxfHRpioYfhZkV+2O2MtY/ytxDAfBgNVHSMEGDAWgBRdj0j5nFsHRbd/i8p1
TmOIXK3EGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTQvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0eEJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0
eEJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzU0L1hZOUktWnhiQjBXM2Y0dktkVTVqaUZ5dHhCZy5tZnQwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCgkXcakZXhOo9QowLU01d+ldCx9+IZqCyb0VY0ndkAvoYerP1t6MU66HMij0je
6OKJSBM+DT7bfRdA6o9C2+sUP42dBjvGlXDk8SUTQE0WKfShx54x+tuHPwcHYiB1
asjHj2WV3Z0TaDEtr9pLx/N8/TozdZyKnqcRJk7M+r3ODn4/rlvvFsRN20DmO1OY
rcezq9aUXkTJksoCfDeciI/1lnkFMa3wnyIsa42BGXbDUu4zWuzdJlBv7PIGEzcP
UUBEc1lVQfreUuFcS1RX92nLzpvQoEo+PP3Vvc13FnlZCLOtiyhxONtIUBAGMvyV
4KLqBB/xlvLsUMCjhD6nGDnk
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org