Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
File:                     0KlSoA2yFUF1wgtMiH76L4CsbwU.mft (raw, json)
Hash identifier:          ycE4X44qW/3qK3hPzOIBXcn9NX1/SFXNp15rPAshFsU=
Subject key identifier:   2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
Manifest number:          050D
Signing time:             Sat 26 Apr 2025 11:57:04 +0000
Manifest this update:     Sat 26 Apr 2025 11:57:04 +0000
Manifest next update:     Sun 11 May 2025 11:57:04 +0000
Files and hashes:         1: 0KlSoA2yFUF1wgtMiH76L4CsbwU.crl (hash: eR2wCYcr1Rud9pAO27capILGCYg6rUuz6WIuFMv/XYc=)
                          2: MyckJyek9ji7eE6xv1jl26s-o8Y.roa (hash: DupaFcN1Jnb/CThzl3B54BAXvTZdDf9U0QE9+9haZEE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 13:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: Apr 15 01:35:26 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2B6BD8AF3A27D84962040A9B316C4317B2EA0677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:f7:e4:84:2a:c5:77:c9:09:3c:45:bc:d5:
                    29:14:ce:6f:99:04:b3:75:4c:e4:bc:b4:5b:10:bd:
                    2a:3b:a9:b3:17:ea:e1:f6:ad:f3:ff:11:60:a9:d3:
                    f9:7a:81:8b:2a:91:6f:42:fb:d1:b0:87:50:87:f3:
                    ec:b7:d6:e3:c5:ff:65:83:d2:e9:a0:bb:b5:4d:67:
                    99:6f:53:0d:3e:45:50:49:0d:9a:16:74:12:2d:30:
                    f4:9e:d8:64:c4:02:2c:ce:bb:30:07:cd:98:6e:df:
                    ac:31:9a:47:30:fb:b9:75:2f:b6:cd:79:e4:d6:1a:
                    4e:9b:04:65:5d:6d:66:66:c3:d6:72:9e:1a:6b:a6:
                    13:f0:3c:95:f3:d5:62:96:a6:9f:70:0d:4b:0a:0e:
                    c6:a2:be:96:9f:25:e9:18:4a:8d:2e:ee:f9:cd:70:
                    82:3f:62:5b:2d:64:0b:61:8e:05:6f:f6:63:28:f2:
                    6e:62:1d:71:f5:3a:40:02:59:34:60:ca:30:a4:b3:
                    99:27:ca:75:1a:a9:39:a9:16:e7:df:10:e9:23:4c:
                    94:e3:df:d1:fe:ac:84:38:24:74:26:d0:88:4b:c7:
                    a6:34:19:4a:5e:0f:51:a8:ea:97:21:cc:5d:88:cc:
                    d9:3a:55:71:81:9a:08:d6:9b:5c:db:d5:cb:85:e1:
                    20:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6B:D8:AF:3A:27:D8:49:62:04:0A:9B:31:6C:43:17:B2:EA:06:77
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:b2:8c:04:d2:94:25:d5:2d:a7:2e:30:f1:9f:2a:98:84:60:
         4b:43:fc:de:ce:0c:57:d1:bf:e5:f2:54:11:3a:9b:93:b0:6d:
         79:19:55:2b:16:b9:31:f0:52:8a:27:a5:8b:b3:91:a0:48:06:
         34:29:a5:59:f7:74:5f:ed:f5:eb:e1:7f:d9:76:be:e2:b5:bf:
         f7:0f:38:ea:8a:03:bd:b1:48:51:dd:5b:cc:b6:75:b1:29:04:
         90:ed:c1:10:36:b6:96:53:b7:1c:c5:c4:c8:7a:90:3d:a3:dc:
         13:46:0b:c7:5a:d4:26:be:81:e9:3e:54:4d:7b:47:16:d9:86:
         94:ea:ac:52:b4:69:e5:49:3c:3c:81:78:ed:ae:c4:de:3c:23:
         1f:25:38:e6:c0:e6:2d:87:ba:cb:6b:11:96:28:d0:3a:fb:72:
         68:67:b0:c7:ab:ba:99:61:d8:75:f2:80:96:f6:0b:25:40:35:
         00:5f:a1:3e:94:a6:c5:93:ec:5d:eb:ee:ad:1a:df:be:86:16:
         61:80:eb:9d:c7:1c:92:6a:11:57:b9:be:ec:8c:e8:b8:0e:95:
         d2:44:d0:9a:a3:83:d1:72:ed:33:2d:ec:3d:82:a2:11:d4:4d:
         2e:73:40:04:d0:35:65:04:e1:22:c1:f1:b6:ac:7d:1b:d8:14:
         39:dc:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:13:59 2025 by rpki-client