Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
File:                     yJMBVVALWP9zqKCIIYXGasag06A.mft (raw, json)
Hash identifier:          8vWADGkgKWZ//viETzSYkCKlkEwrb86AgwYqiMVmZug=
Subject key identifier:   AF:9C:36:01:66:17:86:3E:6D:B8:BD:D9:61:4F:21:A3:75:48:34:3E
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
Manifest number:          0308
Signing time:             Tue 11 Mar 2025 21:09:35 +0000
Manifest this update:     Tue 11 Mar 2025 21:09:35 +0000
Manifest next update:     Wed 26 Mar 2025 21:09:35 +0000
Files and hashes:         1: 9YciR_x5zm7h_lQkIR_lczus6WY.roa (hash: BP56NqlqiM26c5VwzqUDDGnADZ1yJBctFYRdxkIjw2U=)
                          2: Lo01mWclPOTaTsCXCqDeHTcwSts.roa (hash: R0DGq/Xf4LN+8MUJnvz2zAQ8WcIeV6kLkhjtbq8KDfo=)
                          3: g6C0tb-6UOvTOXzA7NmsXA8Wb3o.roa (hash: O7b94iJBzFm/EL6n1qEJRvgYqJL285CuUKaQbQjjgHo=)
                          4: joz8kYC_ohxQKAtMQM9D-OjX_OY.roa (hash: w6m/w9wTcLOeBiQcYiWDYoOkm4pG5DFdcOBVBszjEgM=)
                          5: mrHaV0TM9sp37GYE91hwsj6Wbas.roa (hash: W02ULycELLpH+us3lA7sHNuDy8pJe9Hp1/DyZ7LMkO4=)
                          6: pU4KVuWXVYBPpSE0cMs4PfIqqzQ.roa (hash: AqH825CDJK4RZgI8Vn3RUHVAu6kOOIuLJCUPWhqBhU8=)
                          7: u1dKSm84US-PEvt9664lRGP4sPo.roa (hash: VTllf6gfCTAUf5S11rP3tSBvNpgmmHHgQZK8MkTR0JQ=)
                          8: yJMBVVALWP9zqKCIIYXGasag06A.crl (hash: TFzhsXM3h7j+1ILHs6Ldk1hnrsX+NZ4dtptnL77YEU8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: Feb 15 01:38:35 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=AF9C36016617863E6DB8BDD9614F21A37548343E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6f:73:db:39:f3:a2:44:df:5c:1d:af:63:17:
                    98:65:04:59:fd:fe:94:39:aa:d2:dd:e5:33:92:8d:
                    5d:2f:54:e9:df:55:a6:91:0c:4e:7e:be:43:1a:23:
                    2e:3e:1e:c5:a0:3f:6f:2e:95:a7:29:bd:15:6c:49:
                    db:aa:a4:bb:d2:ac:f2:cc:a3:ab:e9:c5:b0:cb:cf:
                    e9:21:70:4e:16:cf:b9:18:72:77:63:b3:e8:fe:80:
                    07:7e:39:06:5b:c2:48:0b:e8:1e:6d:4d:dc:aa:14:
                    85:08:cf:8d:eb:e6:04:32:89:07:3e:e3:c5:a5:1d:
                    28:a3:80:ca:fe:c0:81:8a:d8:da:e8:87:06:e2:bf:
                    91:76:94:08:3f:33:cb:43:a8:5b:2f:f0:b8:95:37:
                    a6:ac:e5:ed:6b:7e:d2:5d:a4:46:03:40:c0:63:fb:
                    d6:02:52:c2:6a:ff:c7:e4:b0:94:90:47:49:9b:5b:
                    5b:8a:d1:b0:2d:6d:bc:62:88:8f:68:28:10:25:66:
                    ab:f6:45:0c:a4:2e:68:c4:e3:c9:9e:8d:2c:7e:8d:
                    dc:c4:40:93:d9:af:c0:f1:db:5c:39:17:e5:1f:60:
                    b3:4f:1b:c6:d8:cf:11:c3:6e:12:dc:57:aa:e5:11:
                    68:78:3b:ec:7f:0c:a2:c9:52:dc:7d:69:68:72:91:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:36:01:66:17:86:3E:6D:B8:BD:D9:61:4F:21:A3:75:48:34:3E
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fd:d8:9a:e7:c8:b2:ae:b3:7e:e8:16:95:a1:b0:eb:93:4a:
         26:15:78:2a:f2:ba:b4:73:7b:24:09:a2:2d:5e:bb:6f:2b:22:
         22:b7:df:1e:84:f0:4a:76:ac:12:a0:28:28:24:cf:bb:99:39:
         85:ae:a4:7e:b7:4a:4a:2e:3f:8a:5d:40:e2:3b:75:90:8f:47:
         a1:4d:07:3d:b5:c5:bd:89:57:6b:6b:bd:9c:87:9e:5e:85:d6:
         1b:b7:a5:39:76:2f:a2:68:aa:d5:c5:ef:60:66:dd:e3:d7:ce:
         09:fb:67:46:54:e1:90:61:60:3d:11:07:45:22:13:f1:37:a4:
         2f:5a:82:ef:c0:7f:5e:43:1c:27:f5:b3:27:b9:3a:ec:46:3c:
         9e:7c:58:97:96:fb:1c:28:64:c9:89:57:36:0b:1a:50:33:68:
         d9:6b:b0:53:a9:c9:e0:4e:02:a2:e7:36:b9:a6:ac:f8:32:8a:
         16:36:f0:f1:f9:dd:8b:99:dc:06:83:94:46:ca:0b:8e:af:b8:
         fb:d2:6b:0e:b3:49:1e:00:bc:9f:8e:6c:f2:c5:d7:f7:8b:26:
         89:59:17:a2:4b:93:85:2e:b3:70:ba:30:57:33:d7:b7:4b:59:
         27:52:e3:b7:f7:25:76:94:47:05:83:d6:07:6f:97:43:bb:14:
         fe:fd:7e:52
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBFjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDODkz
MDE1NTUwMEI1OEZGNzNBOEEwODgyMTg1QzY2QUM2QTBEM0EwMB4XDTI1MDIxNTAx
MzgzNVoXDTI2MDIxNTAxMzAwM1owMzExMC8GA1UEAxMoQUY5QzM2MDE2NjE3ODYz
RTZEQjhCREQ5NjE0RjIxQTM3NTQ4MzQzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANFvc9s586JE31wdr2MXmGUEWf3+lDmq0t3lM5KNXS9U6d9VppEM
Tn6+QxojLj4exaA/by6Vpym9FWxJ26qku9Ks8syjq+nFsMvP6SFwThbPuRhyd2Oz
6P6AB345BlvCSAvoHm1N3KoUhQjPjevmBDKJBz7jxaUdKKOAyv7AgYrY2uiHBuK/
kXaUCD8zy0OoWy/wuJU3pqzl7Wt+0l2kRgNAwGP71gJSwmr/x+SwlJBHSZtbW4rR
sC1tvGKIj2goECVmq/ZFDKQuaMTjyZ6NLH6N3MRAk9mvwPHbXDkX5R9gs08bxtjP
EcNuEtxXquURaHg77H8MoslS3H1paHKR8/sCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBSvnDYBZheGPm24vdlhTyGjdUg0PjAfBgNVHSMEGDAWgBTIkwFVUAtY/3OooIgh
hcZqxqDToDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTIwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNhZzA2QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3lKTUJWVkFMV1A5enFLQ0lJWVhHYXNh
ZzA2QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MjAveUpNQlZWQUxXUDl6cUtDSUlZWEdhc2FnMDZBLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJT92JrnyLKus37oFpWhsOuTSiYVeCryurRzeyQJoi1eu28rIiK33x6E8Ep2
rBKgKCgkz7uZOYWupH63SkouP4pdQOI7dZCPR6FNBz21xb2JV2trvZyHnl6F1hu3
pTl2L6JoqtXF72Bm3ePXzgn7Z0ZU4ZBhYD0RB0UiE/E3pC9agu/Af15DHCf1sye5
OuxGPJ58WJeW+xwoZMmJVzYLGlAzaNlrsFOpyeBOAqLnNrmmrPgyihY28PH53YuZ
3AaDlEbKC46vuPvSaw6zSR4AvJ+ObPLF1/eLJolZF6JLk4Uus3C6MFcz17dLWSdS
47f3JXaURwWD1gdvl0O7FP79flI=
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:55:16 2025 by rpki-client