Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
File:                     IDGu-ghglvkKwRY7Um329B-HfKw.mft (raw, json)
Hash identifier:          LJ79dQQfirOK3DZfak+2R+0kWW8ayX+YQvzqmZmVmWc=
Subject key identifier:   95:92:81:A1:A8:8E:24:18:15:5D:0B:0C:2E:13:02:1D:ED:7C:C8:B8
Authority key identifier: 20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC
Certificate issuer:       /CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
Certificate serial:       14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
Manifest number:          0426
Signing time:             Sat 26 Apr 2025 11:41:28 +0000
Manifest this update:     Sat 26 Apr 2025 11:41:28 +0000
Manifest next update:     Sun 11 May 2025 11:41:28 +0000
Files and hashes:         1: IDGu-ghglvkKwRY7Um329B-HfKw.crl (hash: MuAcbviehQoK7xfHiiIUPIBncAPc75uffXPqxmIoNXU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031AEFA086096F90AC1163B526DF6F41F877CAC
        Validity
            Not Before: Apr 15 01:31:03 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=959281A1A88E2418155D0B0C2E13021DED7CC8B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d3:fa:53:3c:d3:22:d1:32:8f:b0:37:23:98:
                    4a:e9:b9:7b:c8:38:b0:92:58:a2:38:c6:f1:fc:85:
                    b3:52:ee:e8:41:2e:20:c9:93:e1:a0:6c:05:d1:69:
                    10:ea:d4:6b:ce:84:c2:59:48:9c:73:d5:b9:3b:bf:
                    ba:50:7d:66:b2:31:f3:a1:be:95:6c:65:4a:dd:3f:
                    c9:a0:dc:a7:51:32:91:43:18:33:02:d8:e2:6a:7e:
                    e9:b8:08:e7:3f:4f:dd:e1:1e:c1:1a:8f:83:20:89:
                    1e:fa:ad:7b:62:51:4e:54:f8:7f:db:7d:4b:96:da:
                    41:aa:e7:1d:3f:3c:91:e8:2b:37:8e:a6:e1:79:97:
                    dd:78:ae:d5:4d:7b:15:b8:6b:a6:93:2e:76:9a:91:
                    4a:99:3b:8a:ce:1b:f0:5a:bf:35:db:7d:c4:a9:23:
                    00:ed:44:01:15:8f:06:a5:77:55:62:bb:3c:b1:02:
                    c2:12:fb:cb:9f:3c:c2:f1:09:26:d1:7d:0a:26:21:
                    0e:44:e6:aa:88:73:4c:b4:02:f2:0a:17:cb:de:3d:
                    47:48:ad:b6:cf:10:b1:38:ad:e4:1c:30:1f:64:42:
                    86:9c:84:2a:df:c5:d0:b5:60:2f:8c:09:11:30:ed:
                    16:72:9d:6a:bc:fb:04:1a:8e:ed:03:ef:8c:ff:12:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:81:A1:A8:8E:24:18:15:5D:0B:0C:2E:13:02:1D:ED:7C:C8:B8
            X509v3 Authority Key Identifier:
                keyid:20:31:AE:FA:08:60:96:F9:0A:C1:16:3B:52:6D:F6:F4:1F:87:7C:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDGu-ghglvkKwRY7Um329B-HfKw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1326/IDGu-ghglvkKwRY7Um329B-HfKw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:33:28:34:79:db:7f:bd:75:26:69:0f:7d:2f:83:bf:cd:55:
         25:66:f8:ac:3d:64:ba:6a:52:79:69:38:4b:e7:d3:cf:4e:81:
         8e:fa:01:6c:7d:a9:cd:84:16:fc:19:91:5f:b7:bf:3a:18:48:
         0d:8d:cf:29:09:58:91:18:af:96:76:3f:58:5f:2e:b7:e0:f8:
         3c:97:7f:50:c7:c1:ff:f9:e9:1b:87:22:b8:b7:61:77:9b:41:
         a9:53:80:22:b7:53:9b:15:47:5e:ba:d3:c4:7a:a0:2e:5d:cd:
         7c:8a:2d:53:7c:ed:2e:ea:28:d5:09:9d:30:e4:dd:2b:15:79:
         31:83:00:7b:21:4c:35:66:f8:8b:d8:03:8d:d5:9f:c0:e2:e7:
         8f:7a:6b:2d:b5:3f:40:b6:8b:26:b3:6b:42:c0:ea:d6:a7:75:
         e4:c1:f8:c7:d4:83:07:ad:96:92:49:40:8d:a8:a9:20:7c:d3:
         d2:be:db:aa:6b:5f:36:df:b8:26:2d:cb:05:a4:3b:4a:83:02:
         32:98:da:08:0d:e7:43:74:84:26:6c:25:fa:27:67:d1:d0:f6:
         20:a3:9e:d3:2f:4b:33:0c:ec:6c:6f:37:c1:d1:2e:59:82:f3:
         42:28:d6:e2:b8:c9:07:c4:0a:92:ac:cd:9c:34:59:28:b5:f1:
         d1:aa:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:05:59 2025 by rpki-client