Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
File:                     4SW0OnWuMTJppgY45mMXlwtQtdM.mft (raw, json)
Hash identifier:          HWzB7aXi5bPNTBXtag11aUNr+fMzUJswVC8rUMYYmQQ=
Subject key identifier:   2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
Manifest number:          050B
Signing time:             Fri 06 Jun 2025 13:59:21 +0000
Manifest this update:     Fri 06 Jun 2025 13:59:21 +0000
Manifest next update:     Sat 21 Jun 2025 13:59:21 +0000
Files and hashes:         1: 4SW0OnWuMTJppgY45mMXlwtQtdM.crl (hash: O6vew7Mo9p4Cy/wJk/DeZ9waHWpvg1IO2OyQL1odGCA=)
                          2: eJObqEUg57Htjs32brscER0ziGA.roa (hash: sAB88E47RzCiuqDhcl+IzB3GnruVtCV9pzcsXdh8J14=)
                          3: sLGgaActsaSFOUuP72d7QBmj5Bk.roa (hash: 0nszAiQf991UoL5xMmz5WyuSEX8jXh7GwnSC9AcKvFY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 14:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: May 23 10:03:50 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=2A921C6775102E77A655E6C7BB0E169690FC4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:3d:a7:fc:4c:9a:03:4c:ba:89:29:80:82:
                    fe:c3:23:53:37:47:14:cc:bd:aa:81:22:b3:77:fe:
                    44:3a:fa:83:88:86:43:f6:df:43:9a:95:ad:17:64:
                    3c:a4:96:8b:ac:04:4b:4d:51:7a:d0:11:fa:85:b4:
                    35:51:69:0e:9a:ac:0b:40:25:15:68:41:18:17:56:
                    6f:9a:e4:7c:f2:47:36:dc:ff:51:cb:c1:b8:ff:5f:
                    c0:ce:a3:cc:6e:bc:56:46:99:90:1c:98:18:ce:61:
                    89:15:e7:ac:6a:08:7c:10:c0:58:cd:8d:3f:52:bd:
                    36:95:72:42:e3:dc:a5:b7:21:22:28:60:29:d0:3d:
                    ee:79:ca:18:70:9e:f4:60:fb:56:ed:1d:f4:f1:6b:
                    68:a2:00:e3:16:c6:75:f4:af:e9:1c:57:91:4e:f7:
                    a5:77:fa:34:b9:8c:1a:85:54:fc:bf:23:37:e1:75:
                    e8:1d:e0:eb:22:1e:20:cb:82:29:94:af:27:8a:6c:
                    f3:b2:6e:5d:e9:7e:fa:6b:86:78:7a:8f:1c:64:90:
                    e3:79:7b:32:85:4e:bf:0a:94:dc:4a:53:74:68:ba:
                    42:93:bd:32:6b:52:ce:0d:82:89:e1:61:07:98:56:
                    e5:ae:1c:ca:18:bc:dc:90:1f:23:fd:bd:89:d0:e9:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:76:a9:e6:4f:b2:a3:3a:e9:7c:fc:93:71:a7:c9:5a:5e:ef:
         d8:ee:9b:61:6e:de:ed:9a:9b:0c:90:f9:c9:27:91:96:87:5b:
         8f:92:b9:d7:b6:b2:bb:80:9d:88:28:07:b3:cb:d4:2a:e7:86:
         7b:1a:9b:31:10:88:8e:58:67:2e:7e:8f:f5:c9:dd:6c:d8:aa:
         a2:cb:b0:e6:d4:4c:04:b5:47:5d:e0:55:aa:ae:a4:1a:bd:dd:
         26:1a:0f:cf:d8:36:4f:46:bb:73:9a:c1:c0:bd:51:03:86:1f:
         1f:68:63:1b:ff:bb:d6:a9:f3:9f:f1:e4:56:05:97:c5:d8:64:
         e7:2d:29:33:eb:86:db:4e:eb:89:c3:80:c8:4f:d1:f6:af:f3:
         16:14:e6:c1:e6:60:ba:0b:ae:c1:77:e8:4f:98:5d:32:27:be:
         a6:00:9a:7f:7f:e9:81:03:58:c1:3c:ec:32:08:b4:1e:f9:95:
         04:94:8a:d0:fd:2a:72:e3:ba:19:43:33:78:8b:e2:ac:99:38:
         88:9c:20:73:a4:4c:05:fd:c3:60:2c:26:d5:87:8f:64:e8:af:
         a7:76:fa:e1:06:ff:15:7e:92:04:2f:fc:cb:12:70:0d:9f:91:
         ff:c6:36:e5:57:51:97:8b:da:4e:9f:8f:1f:f8:8c:23:08:dc:
         9c:ed:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:31:06 2025 by rpki-client