Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
File:                     VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft (raw, json)
Hash identifier:          Hx1L9QZ+s7qnrQTXhaRpQEoBOMqTlj/iFoLUe0KE+Wg=
Subject key identifier:   4F:9E:1E:10:62:55:FF:98:D8:48:8A:63:E2:11:01:3B:67:B7:FA:2D
Authority key identifier: 55:D3:F0:8E:AF:B5:30:50:07:C1:09:78:24:46:0E:04:49:22:C9:4F
Certificate issuer:       /CN=55D3F08EAFB5305007C1097824460E044922C94F
Certificate serial:       0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
Manifest number:          0405
Signing time:             Sat 26 Apr 2025 07:33:57 +0000
Manifest this update:     Sat 26 Apr 2025 07:33:57 +0000
Manifest next update:     Sun 11 May 2025 07:33:57 +0000
Files and hashes:         1: VdPwjq-1MFAHwQl4JEYOBEkiyU8.crl (hash: kyfxjh/wO1DHad7Q0qNR9v0A2iI2m2QYoaLpvR5A9b8=)
                          2: b9hyH7HBbyFtMT5K2UrxCTIQKGY.roa (hash: NHIW0JpQ3NVw+xW0Tp0PLIFBgykDp/MonxbcyvOc31A=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D3F08EAFB5305007C1097824460E044922C94F
        Validity
            Not Before: Apr 15 01:32:14 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=4F9E1E106255FF98D8488A63E211013B67B7FA2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:eb:34:5e:e4:cd:19:89:22:e3:99:e4:41:04:
                    13:0a:43:34:d0:95:64:be:cc:b4:7b:e7:5e:3a:26:
                    c9:fe:bd:dc:37:80:6a:41:34:62:ec:6f:ab:eb:6d:
                    c4:67:2a:a1:ea:2d:02:77:84:a6:fe:c7:ee:ce:ad:
                    c9:65:08:4b:97:93:35:df:4b:bd:fe:d7:ad:a3:6e:
                    15:79:ff:48:f3:04:f4:f7:0a:dc:61:76:6e:5f:5e:
                    14:05:13:22:d1:c8:af:2e:6f:2b:35:00:15:dc:ef:
                    b3:ad:0f:7a:ee:30:95:b1:1e:39:55:c1:d6:99:6a:
                    43:a5:af:dc:55:d8:3a:be:51:2c:1c:a4:63:39:c6:
                    9c:72:f0:a4:09:4b:f1:04:c4:3d:ef:4f:6b:c0:ea:
                    2f:72:f8:02:1e:0b:57:60:b2:ae:7f:2f:2d:72:f1:
                    9f:f0:47:0f:e3:3a:6c:08:b8:1f:a9:cb:ce:52:5a:
                    e6:36:9f:97:19:79:32:cb:e4:d7:fb:98:80:30:83:
                    6f:ba:d9:47:5c:ab:15:a5:03:71:95:af:15:44:59:
                    27:1b:4d:f2:5a:23:cf:3d:a6:5c:0e:df:8f:7b:30:
                    26:47:4c:8e:72:bd:cf:be:09:66:82:64:2d:a7:02:
                    82:ac:56:66:4a:5b:59:78:bc:03:89:3c:db:3d:11:
                    f9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9E:1E:10:62:55:FF:98:D8:48:8A:63:E2:11:01:3B:67:B7:FA:2D
            X509v3 Authority Key Identifier:
                keyid:55:D3:F0:8E:AF:B5:30:50:07:C1:09:78:24:46:0E:04:49:22:C9:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c3:f0:09:f7:8d:60:ab:4e:99:e1:de:15:74:e4:78:87:62:
         76:81:55:d0:8e:fe:4a:53:1e:4a:d2:ae:d4:ed:4b:59:c0:9d:
         80:b6:77:96:c7:9e:a4:eb:5f:6b:6e:9d:1a:f2:f8:bc:5f:89:
         e2:ef:c1:27:97:97:d4:36:94:4a:b5:62:11:e3:38:4e:1f:e5:
         20:ec:4d:97:eb:15:c3:2b:0a:02:ac:1d:4c:5f:0e:46:14:46:
         73:ea:63:58:60:b3:d1:18:32:81:15:e0:b0:8c:b0:a9:42:74:
         87:f2:06:c4:8a:49:60:0f:01:37:5c:1d:d0:fb:87:18:c5:e6:
         69:d9:dd:71:34:96:0a:55:98:a0:ad:31:67:09:18:b4:38:bb:
         87:8a:8c:a4:75:43:b3:c9:c1:a5:80:fc:90:52:87:e6:24:df:
         6d:ec:60:cb:11:16:66:40:ea:c9:d9:c4:98:16:fe:69:62:9d:
         a9:58:95:8f:b9:d1:b6:ef:c3:b5:40:f7:7e:13:9e:cc:dd:d5:
         d5:92:b0:c7:32:df:72:4e:0f:f0:f8:73:20:98:d4:ff:88:0b:
         45:97:6c:81:5c:ee:92:0a:cd:f7:91:74:f6:4a:55:0f:a7:bf:
         ff:01:b2:3a:f4:1d:a1:73:7e:fb:01:2b:6f:77:d7:13:4a:e2:
         47:17:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:53 2025 by rpki-client