Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
File:                     FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft (raw, json)
Hash identifier:          va/86KfDZFe4Nd1hLrm5KwwWwQTeogAZSiy7KSS39kQ=
Subject key identifier:   36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
Manifest number:          08C5
Signing time:             Sat 26 Apr 2025 10:24:32 +0000
Manifest this update:     Sat 26 Apr 2025 10:24:32 +0000
Manifest next update:     Sun 11 May 2025 10:24:32 +0000
Files and hashes:         1: -Tm2eH07T15fThwWbWoAIMl2Hu8.roa (hash: IBwz1Qj/Aik2ymWu9GTUMZ+fdFrjOBQQqj1MWnAmqP0=)
                          2: 2tC81IRbokj814kJb6Z3e6hKKe8.roa (hash: +IdbIj0/wYv569jh3AUe7prAb/KQf9chxyc/jeH8r4M=)
                          3: 4g8gxWGk_Q1ckoP0MhvCnLThPCo.roa (hash: O5RgLGKUuyWnmyN4EXmLCYKi6/iT72o7SA6kZs4pKOM=)
                          4: 724XlhQfR2JWLPc-FU_70h77SRA.roa (hash: WgzqiM9EU/Dg7+Bc2Ke6PM33swzdt0JtOlibyzp6ueo=)
                          5: FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl (hash: QTtHWquk808/DSVxfmuVd5nTWCe3V0Zjmzd0rnX96kc=)
                          6: Kkz5Lzr_K_BVYypO61h4_QTc9Fg.roa (hash: x7lDtD2d742A+6rlrVTsT22y7MlHEnvvApODlMh6LrY=)
                          7: ULvjJlav04JZjWNvjDGKLErly3E.roa (hash: 0g9YqjXLfRplNEDWbycZDM8b1RoYRxoLtt5cWDOvodc=)
                          8: UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa (hash: 5eXayhtOk7VxZrMrgyp3ffNQG40LsAj2gq7UAXSZzT0=)
                          9: bxJBv8k2VP6NtPi0uL7bYEOlniI.roa (hash: d3MygnIVm3XrL/N6iQarvDuMpXAs5k50/UhR/arseak=)
                          10: ctkF571l4DKJqil-PsdPHdGDzeg.roa (hash: /RH8tJOC+ZyLaGE6OnAot1ajIEJG9h8OCH3YVRcjdmk=)
                          11: fxnmp8Tl3RX7bwn7Cq7rVDlGvw0.roa (hash: /Chvj0JSClgLoh6GomdVp/trXwDNviwULuD/WeWcQFk=)
                          12: g5yoq2sLHTv0Jhm2N6VqNU_-nRM.roa (hash: JUdJIY/M2X7OaEc4I162SaM+lhtblktli6aNkqbdPl8=)
                          13: jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa (hash: V6iMKe498tEpk1US8kZSHOyzE6oBTaO1P+La8J2BZi8=)
                          14: lRa-2ncuW0zm5mSMtjgsWgr_zOg.roa (hash: CHLQzh5yNzBwwHryhF74708zBgk2osGRgTULI6lMHKo=)
                          15: rro_sKOWKjjK9w21SVKKovz4ZBQ.roa (hash: ezHleX2pD7fXjGwq6cpzr4uXAy0hdfdKPJG29Xr1Cxo=)
                          16: vf_VAkjaRKw-FvQayyywgGy2OnI.roa (hash: tVBoYFInXHsKvHJOPmwFcfDcnevo8m4qdXOxiNVry7Y=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Apr 15 01:34:30 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=361ED56BE231E62A63B2E44F5B0C2BD586140B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:13:f4:6d:c4:94:a9:0b:69:29:8e:de:43:
                    4e:fe:b5:c0:ac:a8:e2:48:24:9b:4d:a4:4f:87:17:
                    97:de:13:ec:1d:cf:21:6c:62:8e:4e:b2:2f:6a:30:
                    3d:f6:e6:d9:5f:d1:4d:de:70:02:d7:9f:c9:1f:59:
                    4c:bd:b4:e7:ff:1f:2e:03:c4:f7:7f:7e:4b:31:80:
                    7f:be:a7:6a:b9:22:a6:39:ae:53:8e:93:a9:f7:0c:
                    06:0b:88:7b:87:41:e5:a2:5f:28:25:cb:25:f8:58:
                    86:aa:e5:ea:23:0d:62:7a:d3:9d:2d:33:09:7b:38:
                    87:9c:bd:1f:28:4a:a6:71:33:7f:54:6f:3d:89:66:
                    43:11:ab:57:73:98:0d:ee:0e:4b:b9:8c:47:d5:c7:
                    a1:7d:d9:4f:e3:a9:9e:cd:0b:4d:3e:2b:7b:84:2b:
                    7f:73:65:35:97:3f:c9:76:d0:45:92:ed:61:d6:db:
                    dc:2f:1a:33:ea:3b:ac:32:b7:e9:0b:b2:d6:56:69:
                    f8:b6:d4:04:69:0e:ac:29:61:57:90:fe:48:36:cb:
                    5d:4b:10:86:2d:82:8c:5b:f8:95:3f:ce:bb:5e:59:
                    14:81:6a:6d:20:70:46:6f:ba:0f:7d:8f:d7:7b:72:
                    d7:f0:6f:ba:78:49:95:28:4f:10:5d:d4:d8:b9:8c:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:1E:D5:6B:E2:31:E6:2A:63:B2:E4:4F:5B:0C:2B:D5:86:14:0B:24
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:20:88:31:cb:d6:c2:1b:f8:73:3d:84:b3:cf:b2:7e:cb:43:
         88:2a:b6:52:61:22:c8:d3:48:fe:15:f4:fe:5d:83:76:f7:e4:
         7e:c1:09:56:01:55:2c:79:58:df:11:80:73:bd:cf:71:7e:7b:
         a3:11:72:3d:b7:c4:cc:7e:41:84:86:0d:e1:b1:b3:55:89:f3:
         9f:35:b6:94:10:6e:fe:16:a2:55:1f:99:24:19:08:c7:c7:18:
         f0:75:26:ff:d9:7a:40:5f:c4:20:2f:4b:0d:7b:04:3b:31:32:
         df:e8:01:0d:04:d3:7f:43:ce:c6:e9:95:86:3f:44:4a:5e:25:
         81:68:e5:25:87:df:49:b5:b4:62:c1:67:eb:7b:e0:94:62:9d:
         50:64:b9:cc:cc:63:8c:d3:6e:ac:8f:71:81:f3:df:0e:9d:fb:
         8d:53:80:78:e2:e8:9e:16:0d:29:7d:4f:92:87:7d:c0:ab:b9:
         5e:94:e0:14:70:32:26:d5:da:e2:7c:c6:ef:bd:4d:c7:c0:3f:
         e0:3c:51:47:07:3b:0b:18:5e:97:f2:e8:c2:21:cc:b7:c3:4a:
         fa:df:25:04:b7:ae:aa:53:c1:37:1c:ee:4b:c6:df:19:30:36:
         3d:04:10:3c:b0:84:ee:4e:33:34:8a:b3:ad:b3:8a:35:a6:5f:
         6c:cb:97:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:43:34 2025 by rpki-client