Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
File:                     6ESHjyExP90FqcNFb_9ImIXcqmU.mft (raw, json)
Hash identifier:          ywTtTDdWnWsKWOftoJPA/bOHYCa820VOAfxOqP1NXyU=
Subject key identifier:   AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Certificate issuer:       /CN=E844878F21313FDD05A9C3456FFF489885DCAA65
Certificate serial:       12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
Manifest number:          041C
Signing time:             Sat 26 Apr 2025 14:45:47 +0000
Manifest this update:     Sat 26 Apr 2025 14:45:47 +0000
Manifest next update:     Sun 11 May 2025 14:45:47 +0000
Files and hashes:         1: 6ESHjyExP90FqcNFb_9ImIXcqmU.crl (hash: HPF5yDDXJX5EPmAuV3ftsK49OuATUDFd03iL65hLxWo=)
                          2: j5NlJ0VrmIclkfgLd_-j51w1G20.roa (hash: WdXn0L7OLssxTE5Ao/XuguozaQUV9PsHEr8f8RZDhKA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Validity
            Not Before: Apr 15 01:31:44 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=AE2F860913AE68A889E4537453BF9E0CE2F53C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:80:a7:3d:3d:f5:9e:99:b0:98:7c:15:2c:
                    a1:11:4b:6b:bd:9a:f2:d8:08:68:81:78:7a:74:f4:
                    9b:82:91:0d:98:8b:8b:ce:89:61:91:46:a7:59:45:
                    5d:d3:bb:37:0a:aa:03:19:f7:82:e0:da:8d:89:2c:
                    d0:69:4b:81:98:21:8c:d4:a8:c3:ac:f7:1f:df:13:
                    23:63:06:67:61:81:2a:61:d9:f2:e0:c9:aa:f3:3e:
                    76:b0:48:1c:0a:12:cb:d8:e3:3d:c2:81:1a:13:1b:
                    4c:3e:b3:e3:89:d4:e6:95:35:86:59:92:64:69:f4:
                    02:3d:5b:ae:36:52:ba:a8:12:36:dc:22:f1:17:17:
                    54:fd:94:13:a7:e7:6c:22:78:90:10:37:77:c1:29:
                    93:e8:0c:e5:84:84:15:72:63:79:e3:8a:25:8d:70:
                    80:b1:ec:e7:d5:14:e6:28:3c:c9:3e:23:6e:3f:cf:
                    3f:eb:88:9f:0c:76:3c:86:2e:07:b7:97:1b:c5:d1:
                    d5:b2:85:d3:81:ec:75:b7:04:a5:a2:98:58:4b:0c:
                    8b:26:99:77:37:89:f0:8e:be:77:3f:50:8e:3e:53:
                    d8:5d:e4:7c:71:d3:ac:84:c0:24:6d:f5:67:ed:b5:
                    9a:f6:08:6d:b2:d9:28:b8:ec:b0:1c:5e:21:ce:f2:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
            X509v3 Authority Key Identifier:
                keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:57:9c:93:de:d8:97:73:db:4f:02:e5:e2:41:15:7e:01:43:
         fe:40:cc:14:27:61:a5:00:bd:3a:1a:49:6c:15:95:7d:13:64:
         14:01:72:9e:98:92:49:05:e7:2a:6b:71:f4:b0:1c:bd:77:ba:
         8b:25:4b:1a:7d:58:c7:88:d4:35:1e:ca:f6:98:a1:c2:fb:fe:
         79:0c:04:35:2c:52:12:0d:05:cd:73:17:5c:f7:3a:ca:27:29:
         b0:da:e3:de:08:8f:74:43:76:89:34:9d:7e:02:a9:41:eb:87:
         09:f2:0e:aa:de:4e:6c:57:9b:3d:ee:d4:8b:f2:fe:45:8a:14:
         f2:d1:52:2f:4d:d7:fb:d1:e0:5d:33:67:b3:7e:be:cf:32:a3:
         17:cd:e4:b2:a1:db:a0:41:29:bb:62:95:eb:6e:c5:47:ba:5e:
         e6:a6:c1:b9:03:03:f0:9b:30:9a:4c:23:a4:7b:4f:f8:84:1a:
         c7:72:dd:61:2f:ed:04:32:4c:e6:ba:69:c8:ea:15:4e:50:4e:
         6a:73:4e:3d:b7:ce:fc:1c:83:69:bb:da:9f:fe:f9:32:92:6f:
         3f:84:fd:f2:c3:d3:6d:dd:48:de:ad:a4:aa:98:81:4d:1e:a8:
         89:98:11:c0:7a:83:ef:93:34:e0:09:4f:fe:fa:bd:31:c8:08:
         e2:8d:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:33 2025 by rpki-client