Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft
File:                     nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft (raw, json)
Hash identifier:          DDeSBlV0ndCb3fSfAXBzlXanAjFT8jtYwnbx+UOT7E8=
Subject key identifier:   D1:28:E8:7A:F9:69:15:68:3B:54:71:AF:33:09:E0:F9:05:1E:A8:5D
Authority key identifier: 9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66
Certificate issuer:       /CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66
Certificate serial:       1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft
Manifest number:          0444
Signing time:             Sat 26 Apr 2025 15:39:50 +0000
Manifest this update:     Sat 26 Apr 2025 15:39:50 +0000
Manifest next update:     Sun 11 May 2025 15:39:50 +0000
Files and hashes:         1: 4DYXNNhZijYbGU-qvmYumqxqh1k.roa (hash: +/nZ3b8tkhpT38dyHyLeBYftfZlX8olUCaY1x0q1brg=)
                          2: ZLfjRI-Avr6kTzQHFaQodeTDi30.roa (hash: Xrtu/3Mk+tUI7mcnVU9ku5AjRahcCS1E1sE+DWwXfGw=)
                          3: nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl (hash: YiDmE6Fi0iANIeqnYYz2l2fadXtBb6VC56mZDe2Qlfs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C8669BF18B31012710F48C9A8DE0BB71D7C2F66
        Validity
            Not Before: Apr 15 01:30:14 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D128E87AF96915683B5471AF3309E0F9051EA85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:ea:d3:58:7e:6e:45:47:91:e5:86:81:91:
                    fb:bb:93:ca:59:a0:7a:97:91:cd:9f:7d:7b:52:79:
                    a9:44:af:5a:f1:b3:3e:9f:87:bd:dd:1c:34:1c:45:
                    6e:5c:a8:53:3a:31:68:64:34:97:33:dc:24:a0:1b:
                    27:ac:30:14:84:ac:d5:4a:14:ef:dc:d5:be:c8:50:
                    95:12:1f:cc:70:1b:9e:5d:da:6c:11:f9:34:a2:57:
                    dd:27:4c:4e:5b:af:07:55:4b:5f:33:7d:76:7c:aa:
                    35:bf:0e:8e:d8:33:5a:79:f2:0f:a2:01:27:89:e1:
                    00:bc:d0:18:01:c3:fe:3c:ae:57:64:0b:87:a6:5f:
                    71:ea:64:9a:3d:4c:c6:92:c1:08:8b:7f:84:66:b3:
                    ed:30:ac:c5:e5:4b:31:b8:de:8a:fb:89:05:a4:68:
                    a7:96:8b:f0:59:89:ce:ff:f9:85:84:41:d5:ab:38:
                    d2:eb:c2:3f:25:d4:fc:67:d8:1d:0f:84:d4:da:1f:
                    3c:f8:25:6d:6f:24:54:d4:88:3a:d0:5d:44:45:c4:
                    b6:30:f2:66:ac:db:76:7d:0e:f4:39:89:bf:74:7b:
                    99:e2:33:20:40:58:5b:3d:21:2f:1c:63:62:f1:f1:
                    93:91:e4:9f:bf:96:78:38:73:bd:65:52:d5:56:13:
                    d0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:28:E8:7A:F9:69:15:68:3B:54:71:AF:33:09:E0:F9:05:1E:A8:5D
            X509v3 Authority Key Identifier:
                keyid:9C:86:69:BF:18:B3:10:12:71:0F:48:C9:A8:DE:0B:B7:1D:7C:2F:66

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nIZpvxizEBJxD0jJqN4Ltx18L2Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/nIZpvxizEBJxD0jJqN4Ltx18L2Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:00:5a:8a:07:ec:8a:c0:59:d3:b3:5b:e7:d2:db:ff:90:be:
         79:a7:14:02:e3:7d:06:13:ab:62:97:e5:f9:29:c3:3c:40:32:
         4a:f3:14:3a:53:e8:8f:a3:a0:8d:b7:5b:8e:0f:b6:59:cb:af:
         c6:04:4b:62:0b:ef:d3:c3:e8:fb:0e:8e:0d:ee:27:66:fa:22:
         43:57:b4:6e:ff:43:e8:3d:68:ad:ef:e1:d9:fb:ff:a5:35:da:
         34:af:5d:e4:3f:3a:78:ed:e8:63:ad:7d:86:b2:ce:49:86:77:
         ae:50:5d:98:fa:06:2a:6d:67:66:0c:ec:1f:e4:ac:c7:2d:7e:
         a1:d0:f3:3c:72:fc:66:1c:1a:6c:61:00:39:70:6e:8c:44:d1:
         20:73:b5:13:03:66:b7:78:14:bc:bb:ae:5c:bb:05:12:d2:ee:
         7d:e9:bf:4b:5e:d5:b1:e9:34:2a:d7:b6:2a:ee:40:eb:6a:90:
         fa:4b:6d:85:e2:b0:d6:41:1b:6c:91:f5:c0:82:1e:d2:96:de:
         86:d5:c3:f5:ae:25:a1:a0:92:04:5c:c6:5e:c0:c5:0e:33:a9:
         49:de:87:fe:27:a4:ae:26:eb:ce:9e:fc:78:09:d4:d9:58:d7:
         58:e2:ba:ce:43:27:51:23:33:2a:1d:7c:3a:3d:ba:6e:49:94:
         e0:a4:f0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:07:57 2025 by rpki-client