Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/179/tc8c9dyfZIvweiSFCl4DN91yq_U.mft
File:                     tc8c9dyfZIvweiSFCl4DN91yq_U.mft (raw, json)
Hash identifier:          lAE1AiI58AWknX+qe0zYLSjTfEFz+wmb+c9Lyts4Guo=
Subject key identifier:   14:8E:C9:B5:77:0B:F3:0B:46:33:4D:1C:DD:34:1A:EF:BC:3B:4B:99
Authority key identifier: B5:CF:1C:F5:DC:9F:64:8B:F0:7A:24:85:0A:5E:03:37:DD:72:AB:F5
Certificate issuer:       /CN=B5CF1CF5DC9F648BF07A24850A5E0337DD72ABF5
Certificate serial:       42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tc8c9dyfZIvweiSFCl4DN91yq_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/179/tc8c9dyfZIvweiSFCl4DN91yq_U.mft
Manifest number:          04E6
Signing time:             Sat 26 Apr 2025 07:44:44 +0000
Manifest this update:     Sat 26 Apr 2025 07:44:44 +0000
Manifest next update:     Sun 11 May 2025 07:44:44 +0000
Files and hashes:         1: tc8c9dyfZIvweiSFCl4DN91yq_U.crl (hash: nMRFkypnw99bFNLX7BfrOidRQKgM/zr2Mxg/GDvx+Qo=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/179/tc8c9dyfZIvweiSFCl4DN91yq_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/179/tc8c9dyfZIvweiSFCl4DN91yq_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tc8c9dyfZIvweiSFCl4DN91yq_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5CF1CF5DC9F648BF07A24850A5E0337DD72ABF5
        Validity
            Not Before: Apr 15 01:35:13 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=148EC9B5770BF30B46334D1CDD341AEFBC3B4B99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:57:35:d7:cf:cb:94:24:b0:bd:ff:71:ec:
                    01:94:6f:53:8c:70:1e:fb:a4:e5:9f:97:3f:51:ac:
                    78:4d:a6:30:f0:02:8c:3d:08:13:7b:8b:e4:3a:76:
                    f7:4e:26:ac:a7:31:1b:4b:0b:a1:88:73:a4:f5:81:
                    85:0e:12:54:d4:a0:c0:05:8e:06:f6:75:91:be:81:
                    be:9f:33:15:0e:18:f6:e1:4e:46:b7:fc:f6:0e:b2:
                    d5:99:f4:74:19:23:7e:ce:5e:23:c6:db:2d:79:3e:
                    50:7f:47:ac:d1:51:a0:b5:f6:e1:83:c1:16:b6:6b:
                    18:57:31:d0:0c:4a:b1:34:71:fd:db:90:6c:3c:79:
                    07:1c:58:0f:8f:c0:28:cb:f1:a3:aa:97:d6:05:f0:
                    89:a8:a5:0b:67:49:2f:ab:1a:32:a3:7e:33:b4:a4:
                    fe:3a:9a:8b:50:6e:92:5b:6d:87:88:b9:b5:a7:17:
                    8e:ce:99:3b:94:f3:b4:8d:ed:42:a9:4a:ed:f5:ce:
                    be:cc:fa:14:c2:01:29:96:74:30:13:da:c3:07:f5:
                    8c:a2:31:83:6b:66:ae:1a:71:e8:56:b8:12:cf:1a:
                    a8:ff:7f:6d:e2:cf:df:3a:79:5c:87:f5:c0:9b:4b:
                    85:70:3b:47:2a:76:7b:cc:59:1d:f7:9a:62:f2:23:
                    82:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8E:C9:B5:77:0B:F3:0B:46:33:4D:1C:DD:34:1A:EF:BC:3B:4B:99
            X509v3 Authority Key Identifier:
                keyid:B5:CF:1C:F5:DC:9F:64:8B:F0:7A:24:85:0A:5E:03:37:DD:72:AB:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/179/tc8c9dyfZIvweiSFCl4DN91yq_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/tc8c9dyfZIvweiSFCl4DN91yq_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/179/tc8c9dyfZIvweiSFCl4DN91yq_U.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:9e:1c:1e:70:9a:14:6c:6b:9c:4f:1a:3b:a3:c1:20:88:
         5f:10:2d:11:8b:20:66:0c:33:78:a7:ac:1c:1f:cf:cf:48:28:
         c8:11:70:04:58:c3:c9:75:71:10:dd:02:0d:e7:9f:9b:5b:13:
         79:85:85:40:2a:af:7f:03:5f:95:47:68:33:55:2d:2a:8f:9b:
         3c:22:9d:c4:7d:86:8b:b2:f6:d8:1a:f0:53:f0:cc:fc:b5:3a:
         82:5c:4d:1a:e2:83:a3:dc:21:78:c5:df:5b:14:3e:67:18:a8:
         83:75:1a:90:a8:00:7d:7a:f2:cb:d1:b7:6e:eb:00:3c:8b:62:
         39:df:58:b7:55:ba:68:57:f0:95:12:8b:8a:8e:b8:06:09:9a:
         ee:b8:64:95:02:0a:1e:6f:db:7b:be:76:8a:69:89:bc:db:ba:
         fc:73:1e:78:da:37:b8:05:5d:96:b4:e1:70:19:ac:42:bb:7c:
         55:a7:93:b2:b7:40:f8:3f:bc:6f:c8:05:b1:1f:8a:2f:04:e0:
         b5:67:54:8d:9e:2c:b1:b3:ae:68:f0:77:c1:f1:c5:4d:b5:57:
         8c:36:eb:b4:cc:b8:17:6e:54:db:ae:81:cb:28:c7:f5:b9:2d:
         be:bc:9c:ec:22:7f:df:71:65:3d:4d:95:30:2d:18:be:08:96:
         2f:70:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:37:42 2025 by rpki-client