Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
File:                     uNB6WgKxtFmT5srvtH0dXnXaGTw.mft (raw, json)
Hash identifier:          3iwBGWvepbLVBTgcqcC5tKnOlo3m5RdBYd0lVbiKm/w=
Subject key identifier:   44:7B:BE:49:1F:C6:81:FB:F9:9E:7E:3F:AB:F3:D9:F9:E3:61:A7:C3
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
Manifest number:          0472
Signing time:             Sat 26 Apr 2025 12:01:12 +0000
Manifest this update:     Sat 26 Apr 2025 12:01:12 +0000
Manifest next update:     Sun 11 May 2025 12:01:12 +0000
Files and hashes:         1: 93edHV41_PN13fqLleyP55gcsws.roa (hash: JZZKPed0ttvUGEiXmiSYQEXXZqDUZy6yhuQ07t0nZ64=)
                          2: ESI5gNYvLHKb8z7SnzISRN1oL_8.roa (hash: Og5gKlcJq+hjm6MuZ5jmXVawkaLD15jbUdfeYnwyZI8=)
                          3: I3v4h0IaQ-cxG2ZhlgwnxMmfy0s.roa (hash: 12WwUxpnWcx9StaWJSOgG2/yHw7jW9cCuv59qwbyRtg=)
                          4: IOboT_9NWoXH_EMdS995yLVf-9w.roa (hash: 2Jg/u7+6Nxwfa8GL6LUKoeeA1Q01UcZz8ulUWPHU/GI=)
                          5: VcvSFmqEE--LTsRH6AlUAu96uPk.roa (hash: dLYo8dVU18CsV0qiUnFTWgsAhPXhvnyVOWmV1bX2vRI=)
                          6: _Up6fTewJeGmPIbMoLtT9wUw3tc.roa (hash: zfprxkEFbds6T2EuFkrYwmRPpB4l3TDJja9UNsAAyGU=)
                          7: gqvhCX_JMSY71hVvf4CTrV30PJs.roa (hash: gaOVKksi0h6zEQcoxo6xEWyrn4ZZeYYXw4d/GWkhiiA=)
                          8: o7qsx79imzrAGvMc_tdfGqD_aYg.roa (hash: f1mfn7PjZPnOTqUJS2CcrweWBS1f97gEqFSZNNDFDIQ=)
                          9: oiwawvL7X3ScShAYfH-xkFiQRZQ.roa (hash: hKRb+bu3Q1UuzYCHymjXdRBhAO2Qtuiiox8/2pvD+tI=)
                          10: pK5ORJyQra70KPhT3ZuBPqDufgE.roa (hash: 629Jxos22A6ztCh9zYacrIGPj7clhy3DxBKjJUtH74o=)
                          11: sPqygdd4ZsiA_SQ4MNMRgXCe0jg.roa (hash: MGCzxrG4UeG7Q5fnp1EHjSfK22cPuGpbtEzP8m5kB8U=)
                          12: tG-yGGsSeYqBbc4y9K6XuwXKPdk.roa (hash: 8AvFst3NkJ1H2u7edcTp3prZi13T3acCAoHrcy29amo=)
                          13: uNB6WgKxtFmT5srvtH0dXnXaGTw.crl (hash: eQRT3rVT+OOIt/zKS4hgY2L4ZNO5UmZ/IJg0LfZVAi0=)
                          14: ucECDryohdRo2c7cDKe6z0M-4ao.roa (hash: jl5n5ap1Xe/3F3BrLCyuw5LShSOhlSt42Sc0SvJB4dk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Apr 15 01:36:02 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=447BBE491FC681FBF99E7E3FABF3D9F9E361A7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:d0:25:37:04:35:56:5a:8c:01:ff:7f:de:
                    58:c1:fc:37:b3:e8:c0:8d:e3:62:c7:14:f4:4e:c5:
                    e2:d1:15:da:d8:55:30:15:7e:4b:c4:7f:94:1e:f6:
                    a4:89:d7:ed:6b:94:dd:c1:2b:70:d4:3b:03:aa:de:
                    5d:c6:4a:5f:21:b9:ba:50:14:cf:10:84:b1:9a:a9:
                    17:f7:78:c3:3f:7d:2a:1e:b8:48:99:49:bd:ef:ec:
                    00:32:cd:7d:cd:41:1f:25:f7:f2:f3:b9:99:9c:86:
                    75:4b:80:af:72:4d:65:f8:2e:04:78:7f:69:a7:60:
                    0c:d6:c2:55:8d:fc:75:94:17:02:0c:36:dc:38:9a:
                    d6:e0:51:82:27:bf:c3:43:7c:53:4f:05:0a:ab:99:
                    e8:0b:4d:4b:b9:87:a7:5e:cc:a7:e4:d3:90:61:2e:
                    c9:f1:a9:33:a3:2b:1d:57:a4:0f:d5:14:f9:75:63:
                    ed:2e:d5:c2:12:4e:d6:33:96:fd:e9:ff:a9:b8:83:
                    7e:21:97:09:86:0e:0b:5c:68:45:5a:fa:27:27:08:
                    57:c7:75:e8:dd:5e:ba:65:51:6f:dd:9e:7c:71:9c:
                    cc:20:c8:ed:4d:26:b5:f6:8c:69:93:75:e0:fc:86:
                    de:e1:50:a4:9e:ab:39:26:4c:f7:3d:3e:0f:6f:52:
                    0f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7B:BE:49:1F:C6:81:FB:F9:9E:7E:3F:AB:F3:D9:F9:E3:61:A7:C3
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:bf:7d:a9:0e:9b:00:dd:72:69:72:d5:31:c1:dd:fd:99:26:
         02:4a:e7:92:35:49:c9:5b:24:b1:ee:b9:49:0a:74:8d:81:1c:
         d4:1b:96:47:c0:6a:e0:15:9e:9f:8a:a8:e5:38:55:0b:a8:50:
         12:d9:f5:7a:03:a3:79:b3:90:a3:b6:4b:eb:2a:49:c0:83:41:
         0b:b5:b8:3f:b7:aa:d8:c2:f7:af:b3:f3:7d:df:70:f3:fd:b7:
         1b:01:5f:7b:98:94:88:a0:ca:45:61:68:24:9c:f0:6a:c6:0c:
         28:27:75:d4:5b:2b:ad:68:fb:13:55:86:42:39:c3:24:91:8a:
         3a:43:72:2a:45:df:8c:a2:64:dd:51:52:46:bf:30:3b:d2:8e:
         b9:65:65:da:ea:f0:a8:0d:89:0d:d0:40:20:33:3a:4a:a8:56:
         ba:9c:2b:66:f9:b0:72:e1:a5:fe:2d:8f:6d:73:fd:af:dc:02:
         bb:f6:59:46:1d:8a:94:ac:e3:87:b2:5e:20:e0:66:b1:58:61:
         43:d7:6d:ca:46:17:cc:e7:8c:d7:4d:d2:b7:4c:69:81:09:3f:
         86:10:2e:77:ee:22:14:76:94:91:66:5c:b5:20:56:30:59:c0:
         d7:f2:75:55:29:2b:20:ba:40:b1:64:86:81:e2:68:b7:fb:52:
         5f:72:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:45 2025 by rpki-client