Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
File:                     gfOCJfnuXvSu7h6MyztmbBvxbSc.mft (raw, json)
Hash identifier:          MGBkmDNqLj9N4JgCUp/F4bphxCe2DCPMCbmQguh2JDM=
Subject key identifier:   B4:64:BC:A6:37:46:83:C0:BD:7C:8F:82:7C:BD:1A:CF:18:10:B0:A4
Authority key identifier: 81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27
Certificate issuer:       /CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
Certificate serial:       1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
Manifest number:          051D
Signing time:             Wed 04 Jun 2025 01:25:00 +0000
Manifest this update:     Wed 04 Jun 2025 01:25:00 +0000
Manifest next update:     Thu 19 Jun 2025 01:25:00 +0000
Files and hashes:         1: 3cBKkS_mgT1L8OZX8sG3u0gOEng.roa (hash: wZDpMw83hglsra/PWei2dy/Bt6hGtLCKfd9dSYWgokE=)
                          2: gfOCJfnuXvSu7h6MyztmbBvxbSc.crl (hash: fBsB7onnkssje5txUehvpmQ/laPAn3UZzByM+xhJ9AY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 01:04:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F38225F9EE5EF4AEEE1E8CCB3B666C1BF16D27
        Validity
            Not Before: May 23 10:01:53 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=B464BCA6374683C0BD7C8F827CBD1ACF1810B0A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d7:6b:1e:87:5e:f3:06:ca:63:74:b8:f8:25:
                    b5:53:4b:9c:d2:2f:93:cb:86:d7:0f:93:2e:75:a0:
                    dc:f2:4e:a6:1d:68:e2:14:36:e9:be:e9:ba:f2:d2:
                    b3:db:80:37:cb:14:0f:d0:b4:0e:8f:b9:5c:98:94:
                    ae:82:fb:a4:0b:bd:de:c2:68:ee:db:63:e6:e5:ed:
                    f4:07:a1:a7:df:99:59:58:43:ac:bd:18:f7:51:e9:
                    f0:40:2c:51:06:7a:37:f0:f7:52:5b:cc:e7:37:00:
                    d2:29:f7:d1:57:c7:c9:7f:ac:d9:01:68:43:f2:a1:
                    32:33:1d:81:1d:63:ea:8b:66:c2:c0:67:df:d9:1c:
                    33:8e:1d:85:30:fc:7c:7a:03:f6:36:3b:7f:cb:11:
                    12:30:73:72:56:33:d6:07:eb:89:f7:6c:84:30:43:
                    4f:2e:4e:59:fb:65:b3:bf:62:6b:9e:57:6a:0b:4e:
                    e2:7a:88:50:c1:a3:d6:3a:3a:9c:a0:ed:83:4b:88:
                    76:3a:02:0d:31:f6:b6:10:8e:a5:6b:34:95:e2:35:
                    4b:ed:95:3a:23:ca:f4:b7:f0:cd:ee:ac:3a:ca:ef:
                    b8:e1:2b:c4:5e:ab:9f:bf:32:0b:70:8e:d4:c2:01:
                    01:75:b7:d6:02:de:05:17:61:3a:2b:89:bf:35:31:
                    95:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:64:BC:A6:37:46:83:C0:BD:7C:8F:82:7C:BD:1A:CF:18:10:B0:A4
            X509v3 Authority Key Identifier:
                keyid:81:F3:82:25:F9:EE:5E:F4:AE:EE:1E:8C:CB:3B:66:6C:1B:F1:6D:27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gfOCJfnuXvSu7h6MyztmbBvxbSc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5648/gfOCJfnuXvSu7h6MyztmbBvxbSc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f2:92:67:91:53:48:e4:9b:36:c4:d9:0f:5f:7b:d9:e1:bc:
         90:95:45:42:e0:a9:03:24:0c:f1:00:cf:bd:a9:88:c7:a2:96:
         8b:86:2b:33:e9:c5:96:ba:4c:8a:65:d7:45:3b:5f:98:1e:89:
         e9:f9:2e:50:7c:0c:e3:88:09:ce:1b:18:bd:a0:c7:1a:08:70:
         d4:5b:c9:5e:c2:b7:a7:14:be:1f:b5:c6:7d:bd:bd:48:a0:51:
         14:17:90:64:05:ef:c8:b2:2d:36:d2:18:e0:50:05:c3:c1:dd:
         5f:0e:e9:51:00:04:67:ac:8b:04:2a:cd:2a:e1:23:00:ef:d7:
         3d:ed:2a:a2:c7:9a:74:d1:a6:86:5d:48:01:88:e3:a0:b3:ba:
         18:ac:79:37:4e:c1:38:c9:4a:a4:7d:cb:a1:75:21:61:dd:51:
         4b:f2:67:28:f9:e6:49:ac:49:2e:0b:0f:68:3c:9b:14:6b:d5:
         7a:b4:c3:f0:93:aa:77:94:23:e9:b0:40:e4:b9:31:45:ba:97:
         81:b6:fa:bb:2a:0b:2c:14:17:34:c7:0b:5e:de:43:5e:94:29:
         76:fe:d5:b1:21:99:89:74:fe:f0:cb:f2:35:c3:0c:f5:70:8e:
         d6:fc:3e:04:3c:23:92:aa:d7:0b:bf:3b:86:a9:cc:92:e6:87:
         73:5c:23:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:47:25 2025 by rpki-client