Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
File:                     hJu41a4RSW50pZWrPZ-PQBxLWMw.mft (raw, json)
Hash identifier:          4X720Byr2DnlqPPy57pXnGf/NRgLsR4F1Qh7mvS3CB4=
Subject key identifier:   4E:2E:13:6E:80:38:A9:01:D2:EE:A7:8C:BC:76:17:AA:36:E9:6D:1F
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
Manifest number:          0539
Signing time:             Tue 03 Jun 2025 20:18:26 +0000
Manifest this update:     Tue 03 Jun 2025 20:18:26 +0000
Manifest next update:     Wed 18 Jun 2025 20:18:26 +0000
Files and hashes:         1: 3cg_MllDgfJWeGp2YGH4fKK3rZE.roa (hash: Qs6a2TkTC0VWuIgVrYRnz7Lq1WT4GC3BTlgH8h/ZktM=)
                          2: hJu41a4RSW50pZWrPZ-PQBxLWMw.crl (hash: Lo7ckPDdyWXM1Vgj6Oc+gn/Ecl4wm28D7fGAOR9tfns=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 21:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: May 23 10:00:39 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=4E2E136E8038A901D2EEA78CBC7617AA36E96D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:d4:2f:03:3e:ab:7a:85:a2:35:35:94:7a:
                    d9:10:c9:89:cf:e0:a9:57:21:f5:18:87:61:ee:98:
                    1b:28:3f:ad:ab:e0:3d:b4:9b:8a:c9:3d:07:b4:96:
                    0b:9a:c6:60:a8:20:c3:07:65:33:22:41:8d:12:07:
                    96:93:b7:0d:fe:e7:ad:cd:35:38:da:68:31:c5:4a:
                    16:77:bb:1b:1e:b3:a9:44:35:82:40:df:20:fa:07:
                    89:27:82:78:75:c7:a4:82:21:18:11:3a:6b:f7:41:
                    a4:68:78:2a:83:c2:97:c4:db:54:a9:9b:7a:d0:9a:
                    10:7b:b2:1a:a9:dd:50:d7:5b:8b:5c:ca:66:4e:4d:
                    3d:75:15:ee:2f:02:1d:43:42:fe:e2:96:97:53:69:
                    a9:01:c6:9d:41:6d:61:97:14:78:07:5d:e1:95:84:
                    3a:27:60:3c:7e:c2:62:00:a7:91:e8:58:4e:a0:43:
                    fe:16:8e:ed:bb:de:3d:aa:98:cc:29:52:8d:04:c7:
                    b7:b6:e1:00:5e:d4:38:59:38:09:1e:2e:99:70:df:
                    38:a2:62:2b:c1:c8:da:b3:5e:3a:fe:9f:5f:8e:e2:
                    4c:6e:c4:d3:10:0f:94:3d:1d:96:71:cd:37:04:ba:
                    61:52:d7:fd:fa:a4:b7:a7:6f:b3:93:90:71:b5:43:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:13:6E:80:38:A9:01:D2:EE:A7:8C:BC:76:17:AA:36:E9:6D:1F
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c1:62:d2:be:9c:e5:35:c5:40:11:16:02:92:67:5e:7e:1f:
         ae:bd:c3:c2:ae:0e:33:be:12:da:dc:c1:a9:f0:7e:84:35:6d:
         61:1e:30:87:11:5d:cb:8b:c5:1e:b8:f5:af:b2:ee:dc:96:df:
         1f:e7:45:1a:0d:62:85:5f:4c:3b:2c:7f:cc:71:23:3a:1e:75:
         31:a8:68:99:b8:19:e9:71:e9:a7:22:9e:85:08:a1:48:ad:be:
         76:82:0f:50:61:23:d5:2c:90:28:7b:96:ca:c8:29:c3:55:72:
         9d:b1:87:65:58:bd:cf:ba:72:b3:26:69:33:7b:02:df:4f:39:
         f9:06:89:90:30:99:17:44:40:f8:21:de:39:1c:ec:45:2b:21:
         57:e2:2b:eb:dd:86:de:b2:76:7a:8d:6e:a9:76:db:cf:09:39:
         51:ff:be:e7:15:87:db:88:26:91:75:74:b6:da:f8:0f:d4:98:
         4d:ff:7a:dd:b1:8c:28:8f:13:e8:4d:3d:ed:29:86:7b:95:aa:
         50:d6:98:2a:82:f5:ca:2b:08:72:81:8b:c9:73:18:86:2b:81:
         2e:d6:52:ed:0f:ad:87:20:fc:cc:47:ba:1b:49:2a:98:9b:15:
         5e:bc:56:2a:f8:a7:98:8d:0c:0e:b1:d8:9d:73:d9:19:bd:97:
         7b:6d:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:03:34 2025 by rpki-client