Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
File:                     ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft (raw, json)
Hash identifier:          qpn4MS3nE+OcNebSd2hZZhMuCPCVU6fazAxobOJUoIo=
Subject key identifier:   F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0122
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
Manifest number:          08CE
Signing time:             Sat 26 Apr 2025 10:18:23 +0000
Manifest this update:     Sat 26 Apr 2025 10:18:23 +0000
Manifest next update:     Sun 11 May 2025 10:18:23 +0000
Files and hashes:         1: 2lg-VbmJh0zvx5FO93s2avv-56U.roa (hash: FxO2grDkLehSbdZKfWIrMVBPVxzXVZN4IdTL6UrRgRk=)
                          2: 8mwKQiqCD2aXoJunjpGmiU17EpA.roa (hash: CSwaQs2LidvAm2hovappKSEI2hw1yaZKIlANNLU0UpA=)
                          3: CkNXygqC3AyDaWEcQas9Ydj0V_8.roa (hash: VMUHx0aBm+eliv6gC59f6sziaecsLoWU430wez2hoIE=)
                          4: ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl (hash: h2nsTmu81/8YNHp2MXWKl74SrZakCjABJQ9S3VzwKWY=)
                          5: EBMWtj6YWvjWQiC_W43-AuAbcu0.roa (hash: D1vk15EQkFu0ka+STT+7t5ZzLvjYl7Pg0lHylI9yRIc=)
                          6: Eek22GdEU2ItdKCh1YObdlsoD5k.roa (hash: gaswunDkYuZN7J6+47ouaQg3DgJOqENiCTS8u6ErvP8=)
                          7: FKtvVlASZd0A3gkoDDFhTFGcsY8.roa (hash: Rrh1Jp84uBeFLSMGZglmdW+q4BaKJImEFkNS3BN51UQ=)
                          8: G8KwsliqW15T47aiAYMnXe4jlm4.roa (hash: xn6zcq85FPyB2r5ifz93hawDmfQ82IbGy74MEiOX7Mk=)
                          9: JRa79PRv1FJrOCNeMiWpKq94Rbk.roa (hash: AneWSnVhqNrKvpS6KCh5HITray/zhE/skvZ8pVYINek=)
                          10: KCiQVuBn8IHJVws-iesLMcGRBBQ.roa (hash: POukAMGTmHMpeQO/7OmrkGtK2qqAVDbtE+M5WEAGusk=)
                          11: Kv8GOn45RM5sbdA5Zl-QN7kIZGA.roa (hash: wI6jHZQN1y9Z1KcVSqjUof63pNgfXQWw6FScIc5EAOg=)
                          12: Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa (hash: UUg9H2KIiTC6w7J2PWEZo25DEuxU4bKWhDTIMO0xoRo=)
                          13: Qm-ovxjft_ONKgVlddgYBViiXI8.roa (hash: reNHyL6JrrdFmS7tyh8caGRlR5ntXNFETd8Vu4ktyXE=)
                          14: SitDxheAMfSlRQgc01mqDiL-mfU.roa (hash: Bs/CaB9/cVEG8i9wwL4Aup/Y+iaGM5ZkYBzfSYB5hd0=)
                          15: T_31eBaEFihdMCMV6faFBqsLDa0.roa (hash: IFsJZ7Je3JKurRpwIsfwQfmVzUkHijSgyjwh2OuJ1vU=)
                          16: W-ERzt8krj8uYmR9nPsp_bw-FVM.roa (hash: PTzn1mwLEcrFNjvKFBdbw8tSBBY1xaWCqNG9Z2W6o0A=)
                          17: Zb5pMXfg--CmManj5Qwpn5CKkos.roa (hash: eIV46twY5i9xSkrwsrHFEFZ9zt5eGM2y2+fF5jawtIw=)
                          18: _2vVWVtlxiNX5IdifzTsGlLnWX0.roa (hash: p+uVz1VSXvLPtweai3CUwuWHCZq8CIc9maBVSE11k6w=)
                          19: bRwxq6NCWThnL83iQFV_HL15SUg.roa (hash: i3aC46cXL9KmCjIe66+tAM/MBKoXFW6/N3LHKukn9k8=)
                          20: knGSWmZ3k78JRwIoq7I4RG51JOs.roa (hash: i78eWNWKJfq8BhMhgx/Xy3UHuxKJwWXVNclbpllZ7Gk=)
                          21: lXon4DXniV5aKkwr9PlRXv024TE.roa (hash: sIu/V/Vpr0oGmkjOyOZYEZz+cp1x4jSy+YAqvUB+J0s=)
                          22: oEvqGdCs79vxipQ8wdUhufn5vs4.roa (hash: JjHpEZ6DVpMBvK2L41vPa5kurHWTwuK2gx7LYg+I9xg=)
                          23: rRoyRHu5-qdPMNl12CJ70QFLET8.roa (hash: 1VDKZrAJbMcfSevIl7JpTkTn432yuA09/SrCTR7dhcw=)
                          24: ra-TXYiVIOMq3MVtooBVGRWW1Y4.roa (hash: svelJ/UT0Op+w8rpWKjTWzg7DUB2LZChLSD6ZufiPdo=)
                          25: rnaO0T3Do29M9vmta4mYAana-ew.roa (hash: 8WyNhwXG0IULzVGaRAtYo8gXCYgLU0CLb47J7GdVVrs=)
                          26: uLNdVqrtM2H06A254Lmga8jPtsQ.roa (hash: 8heNLJS0Zpf9SIEd1gdJgGcIpF5JJpa+ClaqaXFXhcc=)
                          27: uiGjxLYcHAmP1EArk8lK8UmLX6M.roa (hash: m+r/NshK5m3nmSDw8sxn1h43xGX46+cF3TZ0PQNVykw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Apr 15 01:33:19 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F1517B8309F4B62E9A971015ABBBD5B21DAFA0A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:ec:42:d2:1b:98:28:f4:69:bc:02:3b:04:
                    38:3a:e5:35:11:b9:c1:ea:9b:b1:5e:9f:2d:dd:29:
                    3c:24:12:c7:32:29:fb:8a:8b:25:36:09:96:92:1a:
                    58:ea:cf:b0:f7:08:b9:b2:21:cc:86:40:ed:6a:9a:
                    bf:01:be:14:44:6a:18:89:7b:93:f6:74:ff:e4:fd:
                    3c:07:ea:0f:bd:dc:05:6f:f7:31:5f:56:66:b8:5f:
                    be:b4:b3:1c:7c:c3:f8:c1:dc:be:96:b1:da:71:e4:
                    c7:b6:ac:b5:df:f8:b5:d4:4f:f0:bc:2b:80:be:6a:
                    07:9d:93:55:82:67:42:8b:09:5c:06:08:38:5b:07:
                    54:7a:9e:c8:fa:e2:f8:a1:8e:75:c7:b5:c8:58:57:
                    eb:46:68:e9:1a:b2:96:08:e8:8b:9a:52:66:23:bf:
                    df:3b:16:b9:02:41:a4:8d:7f:76:42:9c:9c:01:85:
                    18:03:b2:a7:86:a3:02:1e:03:de:78:eb:d9:94:43:
                    b2:44:92:5e:6c:d3:be:a3:fe:91:92:e7:ae:6d:3a:
                    88:75:24:00:24:16:77:06:ef:ae:96:54:af:cf:b0:
                    04:cb:c6:a9:e8:62:e3:83:2e:ec:93:31:55:10:89:
                    ab:03:50:05:f9:17:21:c9:e8:b7:0f:16:a6:4d:f6:
                    2d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:51:7B:83:09:F4:B6:2E:9A:97:10:15:AB:BB:D5:B2:1D:AF:A0:A2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:ef:82:62:e6:45:57:0c:c5:a9:39:3c:e2:e2:57:1b:15:
         ca:b7:d5:97:7d:3b:58:9c:04:3d:4b:16:41:4c:8e:8b:ae:12:
         76:20:64:4c:9d:ad:5c:64:f6:22:c8:6d:b7:b4:b2:ac:6d:80:
         df:11:66:1c:30:0a:51:d5:b0:6c:b5:8a:82:a7:9f:e3:95:73:
         a0:ea:07:8f:b1:d7:c7:30:01:1b:ad:f0:3e:09:69:63:c9:de:
         ec:f3:b4:7a:9e:7c:0a:be:6c:dd:97:ef:75:22:dd:a1:a5:6e:
         13:b2:a6:0d:99:ac:1e:27:80:0e:c9:d9:48:23:aa:09:f4:f4:
         3e:24:6a:cc:6c:ed:53:b1:03:dc:5f:8e:60:f2:51:4c:1f:48:
         34:59:ca:a4:91:45:01:09:7b:27:f8:fd:01:c7:ad:f2:8f:6d:
         17:14:aa:ef:ce:b2:8d:aa:07:0e:68:83:1e:58:f9:74:11:ca:
         3c:55:9f:ed:6b:07:ce:ad:45:16:3a:a1:a1:6a:92:ca:a1:fe:
         eb:9f:31:c9:6e:00:7c:b0:cb:d6:f8:29:19:36:9d:77:55:21:
         d8:03:16:bd:c2:14:9c:ac:a0:15:ce:e6:f8:bb:cf:50:70:ca:
         b0:c4:b8:0a:42:8a:b8:59:f7:83:3f:14:c5:26:41:cf:a1:60:
         60:8b:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:39:51 2025 by rpki-client