Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
File:                     Zd5S5kvkPjKKpp86stNH-IM-xjc.mft (raw, json)
Hash identifier:          X29H3iF8MCwgmhvOHAYhuSvAmlqwf6j6+s8omnBYiT4=
Subject key identifier:   58:00:4E:CA:ED:24:2F:F8:55:5F:3F:8B:18:3D:6D:8A:2E:21:4D:5C
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
Manifest number:          02D9
Signing time:             Sun 16 Feb 2025 17:45:37 +0000
Manifest this update:     Sun 16 Feb 2025 17:45:37 +0000
Manifest next update:     Mon 03 Mar 2025 17:45:37 +0000
Files and hashes:         1: -QcBcKKN9fnq2lWTTdexXpvdmbI.roa (hash: T9JLMtKwep4U+aU84oCJWJHMnnbnkxoZuIatLteOdRM=)
                          2: 1It-xLuueafcmnW94iW8krWlEXs.roa (hash: jfxcTcw7ylWsQdFoOIb/f9qk5eyJlxjehN5BLf3NgN8=)
                          3: 8kwS1X-8VE0RjcxwQwHsHzqD1Jo.roa (hash: FF1Z7Ggj5i0cjxB5j28CL+BL1fEeIWsXvlXRlBbeCHk=)
                          4: CSajlN47-oAKwN2s3wW8LtWEUfc.roa (hash: IBCFxjdHyMK/iyJoGMV5ApbJsCmSE4/p8peDGHrwDbw=)
                          5: CU3CaOPUXGCuNXD8etcdVuNG44U.roa (hash: rsFWiTVwdXKODDLxAwCbBK3MKpe72E84rLHNcZQjRsQ=)
                          6: J8k_l64FQZqf4AaNmFxI_AsS2Hc.roa (hash: q9tmR6Z7YXTB7Azz+XV5Mn147+iX69AaEB2ca8j6WuM=)
                          7: MeMrjWBTJgyoErrCL1_-fyU_Tps.roa (hash: HcI/07pNhzyQY8LU6RdxHtr+PIzlknPqNz433c/T7rs=)
                          8: OULRgt9lzPl4nE9Re2rFj_Qpgio.roa (hash: N/RQzpyWdjgmh3FhF30TdjUh/bJV6Zkm+tLqtGhTonc=)
                          9: P_ah0M5BB6jKvGJ0fRxU0tP7LUc.roa (hash: tMF+y4EAy3AKL7dPuuBTTVgpkinHf956pF6a6vdMhQA=)
                          10: Q00MoPSmzdL0WhEEzfKGkSXI8cc.roa (hash: fmJOo74wvAIO0qO2RoNBVfLn2WzjcQ1XR+wYEdxXXY8=)
                          11: SOjTYWNvFWitdiRNqFx5f_MkF_s.roa (hash: IHvr1SGBmwFN6VxvkE2qvCWk9C6ZRK+jEjkseg0SbV0=)
                          12: SsIwZgx5bLASpdSSBX1jG4Bb1yk.roa (hash: lxYCAZ2i6qQ69M5YagWj2cG0T1qzOEKYM7gSvqshsv4=)
                          13: T7oK9U1x5qmAgXbKxNqybZ4J1io.roa (hash: cUzdFV+Eyi6eji3AbscfYpXf9uNk7Er/wry98VhF+H4=)
                          14: WJ-_Ea2dbivrpXDQ4cTKRl10Kh4.roa (hash: GfUV8GXp88GfJoMSU5mhZbHk6HN7x7h/PAzCQw2+PGQ=)
                          15: Zd5S5kvkPjKKpp86stNH-IM-xjc.crl (hash: fApNqRQFl5fsy9VzX01JUqR03xmu9v/dTFzvPYXOzwY=)
                          16: iIJczi9cRfPI0Lv-6ZR_GBVvAKA.roa (hash: iKL1sh5tTw3zrSAL8FMQ3ApfVsBdnV9PQBJEPcTS2T4=)
                          17: isOKZegsllWGUYEzoTpn1cI4J50.roa (hash: m5s1OUP7SZovbjoducF5DuMoR21WMnCsthJeBN0A8OY=)
                          18: msheLEipwpgrW2P7WjyhgqHetzk.roa (hash: GlNjV5RgMc+CE74caNSXB2FF7LDG654vRg9FMNeWdyw=)
                          19: p5CRism3DdS1J_zA_-LeF-_gFXc.roa (hash: HOLNGKjyqHuZYHxzl2DNgVgTXsjv0gYsWcACeV/m+sI=)
                          20: qj47A3O2BlPFDfx39PpFsEoBC1k.roa (hash: bemuXS7EM1yUlfodtBIydKOQsNQfjUzRYGjhTRdek+0=)
                          21: seb2Oh5S3qc1vdEY6eJnvvFyD3E.roa (hash: J57VKb9tBduneZ7sL5fxBwcuIsgC9MTBqs/iG+ZZLOA=)
                          22: wKSk8B2tF7UJfDEtjSJBfrxqoo0.roa (hash: WV6HzzW9IDxT9ZfpAAue0RZ6mHjs4Bu0oPyXSei2nrs=)
                          23: y2KT_OeoKqc31KfZw3UTxGfsN5Q.roa (hash: AWWZoPnJPJPslbwxyC6edWv8hrejW98sgIjDNenpcUc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Feb 15 01:32:16 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=58004ECAED242FF8555F3F8B183D6D8A2E214D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:c4:98:f1:5e:2c:45:ff:0e:80:2d:31:e5:
                    5b:0d:44:36:a6:06:5d:95:31:25:9d:25:ce:9d:29:
                    d1:0a:8e:44:89:14:18:88:d7:01:f1:48:db:3d:e5:
                    87:e8:7c:82:96:aa:5e:aa:82:b9:87:6d:02:5c:db:
                    7b:e0:29:49:9f:1d:1b:3b:7f:5b:69:63:f5:f0:8c:
                    36:86:7d:9b:69:99:3f:34:81:48:02:d1:c5:cf:38:
                    f6:c4:12:79:65:14:1f:6c:af:74:c8:0b:e0:a0:87:
                    dc:fe:6f:ed:02:3f:c1:dc:27:a4:e6:a4:51:5c:40:
                    f7:ad:1d:ce:66:43:95:33:9d:a1:9d:59:cd:74:79:
                    03:b8:10:75:96:1a:c3:49:67:4b:f5:93:3e:14:7f:
                    00:42:ab:32:26:51:04:47:c6:70:7d:1c:78:d8:01:
                    42:03:b4:d0:56:be:6b:5f:3b:b6:f3:0c:f5:e5:fc:
                    ee:2f:06:c9:61:78:32:c2:15:29:b5:1b:eb:02:19:
                    44:63:43:93:85:94:96:87:70:93:66:c6:2f:57:d6:
                    bd:91:71:2a:98:f2:1c:fd:45:a9:24:eb:d3:69:4a:
                    15:1b:e2:49:3e:4a:d1:87:65:7f:c1:f5:57:23:4e:
                    25:e9:8a:37:15:a9:b9:04:c5:2e:b9:0f:7a:55:d9:
                    1d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:00:4E:CA:ED:24:2F:F8:55:5F:3F:8B:18:3D:6D:8A:2E:21:4D:5C
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:d0:6e:5b:40:00:1d:2e:ad:92:27:f9:91:4a:93:05:44:
         59:4f:89:3a:42:70:45:85:0d:06:ea:fa:83:bb:41:e9:a7:34:
         9c:62:51:b1:f2:0a:b7:1d:b2:3a:9e:98:42:b1:c4:61:41:95:
         ff:81:00:a6:71:60:7b:ff:80:1f:97:de:82:63:5f:c8:b7:d8:
         dd:09:d5:86:97:8c:b6:b9:99:39:58:96:77:28:2c:8a:97:f6:
         a0:33:15:52:ee:be:87:8a:9d:76:6e:c1:7f:0a:f5:15:39:1a:
         b3:97:a1:ea:0c:4c:47:53:76:9a:01:1f:c8:f2:a8:21:e9:66:
         d1:00:0b:77:c7:e8:21:d8:08:87:ac:d9:cc:68:8b:79:f9:3b:
         59:88:79:03:61:f9:40:7a:38:d7:9b:0e:9e:e5:6f:8b:12:62:
         a2:da:07:06:f7:96:ae:5f:b7:15:fb:cf:51:11:80:31:10:76:
         eb:a6:b5:51:8e:73:51:d9:79:e1:39:59:b3:87:cf:50:ab:7b:
         49:e1:78:55:84:91:ca:29:63:23:57:c0:d4:52:d5:cd:fa:c4:
         43:04:66:e7:72:77:ad:9d:5e:2a:7e:cf:ed:1f:73:46:2d:76:
         57:33:66:68:a4:f6:b2:8e:54:8e:81:2c:7e:7f:f6:9d:ea:74:
         fb:1f:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:05 2025 by rpki-client