Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
File:                     B6SxrnWhC06C_ojd9KG5ZdYKetw.mft (raw, json)
Hash identifier:          h68za/SMiqQJNf5lBgnaf/cmVWZOqvesTLk0x1ZKD0s=
Subject key identifier:   43:AA:B6:04:F1:F4:AE:2F:44:3F:20:90:A1:AE:87:34:83:17:12:3B
Authority key identifier: 07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC
Certificate issuer:       /CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
Manifest number:          1D
Signing time:             Sat 26 Apr 2025 10:20:08 +0000
Manifest this update:     Sat 26 Apr 2025 10:20:08 +0000
Manifest next update:     Sun 11 May 2025 10:20:08 +0000
Files and hashes:         1: B6SxrnWhC06C_ojd9KG5ZdYKetw.crl (hash: LS2dAubWxXYxOpNwOCisOfrQFegeGp9Ee2IXYd2CWq8=)
                          2: Vth5HiEat1CZNJNh9_gx5QwFql0.roa (hash: 2hwjVqmPQ05iUf4HcHCcAyynpZXgnAH+iuD2EkpyeKY=)
                          3: jgYVlUb-aYJ4pXwq2oW8uA9rfmA.roa (hash: Ayeq7pm0DhPrDChyc57XtijhExMMpul71yfcyFlBFd8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A4B1AE75A10B4E82FE88DDF4A1B965D60A7ADC
        Validity
            Not Before: Apr 22 01:33:54 2025 GMT
            Not After : Apr 22 01:29:23 2026 GMT
        Subject: CN=43AAB604F1F4AE2F443F2090A1AE87348317123B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:24:25:3e:ce:1c:44:b4:41:dc:55:a9:a0:a4:
                    e4:86:41:bf:ce:af:06:a2:6f:a2:df:6c:e3:f6:aa:
                    6c:d4:b6:ec:27:3a:2f:da:b3:36:9a:59:41:36:50:
                    f3:98:26:1e:84:18:03:d0:be:ad:18:5d:5d:87:b9:
                    b9:1e:1e:25:e4:d4:49:47:ec:fd:75:5a:71:a0:e7:
                    b3:da:2f:4e:da:47:df:c3:d7:8e:e8:6f:ac:a8:69:
                    6b:53:5f:64:07:98:b3:5c:79:0c:41:da:97:10:46:
                    37:83:4a:90:28:72:3c:70:ff:3c:3c:0d:59:0d:2e:
                    07:b9:21:34:35:f0:08:2a:df:88:60:4c:22:94:6f:
                    2c:77:05:2f:42:64:52:c0:dd:1c:d2:8d:30:74:5c:
                    b9:6c:01:b9:93:f4:85:c6:39:19:43:8e:de:71:9e:
                    53:67:4a:1c:7f:b3:8b:10:72:9a:87:35:68:96:87:
                    6a:5f:7e:35:5b:64:20:79:01:5c:63:27:80:18:2c:
                    08:41:5e:80:0c:66:b6:ca:04:b5:89:ee:14:c0:10:
                    bc:1a:37:13:a3:2c:3e:c2:0f:88:90:69:bc:68:c5:
                    d0:29:38:a7:e6:16:8c:34:a7:1d:07:2e:d2:15:81:
                    3b:bb:5e:5e:cd:9b:c9:6a:40:0e:40:c2:d8:9f:fb:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:B6:04:F1:F4:AE:2F:44:3F:20:90:A1:AE:87:34:83:17:12:3B
            X509v3 Authority Key Identifier:
                keyid:07:A4:B1:AE:75:A1:0B:4E:82:FE:88:DD:F4:A1:B9:65:D6:0A:7A:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B6SxrnWhC06C_ojd9KG5ZdYKetw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30097/B6SxrnWhC06C_ojd9KG5ZdYKetw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:ed:ab:c5:c3:4c:c9:18:96:62:f4:bb:c1:7e:ca:1d:92:
         33:62:71:18:c2:95:d7:1d:89:28:91:31:1c:ef:e8:b8:82:c4:
         fe:da:e1:c3:32:fb:85:7c:bb:f7:3d:9b:f4:f6:07:f3:7a:a9:
         7c:15:fe:52:98:9f:02:f3:f4:36:24:3c:97:bc:c1:bd:e7:9d:
         5a:81:d0:56:67:62:53:56:6f:33:30:69:6d:6d:39:02:a5:aa:
         a2:17:80:57:6c:3f:30:cb:dc:b8:46:ec:e3:8f:f1:0e:74:d3:
         97:95:25:d7:53:66:27:f5:d5:ba:ab:ff:84:6f:ca:29:36:e9:
         99:47:73:62:87:5a:42:5e:fd:a6:60:ef:3f:b5:26:2e:b2:d6:
         ff:0d:c2:35:5f:68:86:6f:ad:36:8c:98:72:b5:2b:a7:9d:67:
         56:65:62:18:19:d7:c8:ed:4f:f2:f9:d8:7f:9b:b2:ab:9b:a9:
         7c:c6:15:30:8c:79:ea:57:59:2e:fd:e5:94:03:92:09:c1:22:
         28:56:ed:8d:ba:3d:dd:9b:92:ab:3d:92:62:cf:b5:50:cf:12:
         0f:6b:05:e1:ad:a7:93:9a:ce:3e:b9:96:ec:55:bf:f9:3f:06:
         4f:1b:6c:d2:0b:84:e8:90:15:e8:c9:0b:6d:1d:b0:6b:45:1f:
         74:42:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:39:47 2025 by rpki-client