Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
File:                     szOu2luBprL1T_cUZo-NY-h7haE.mft (raw, json)
Hash identifier:          1R1Qu7a3KbwbGO0vfkhICINoNHkLZJXmRF9nCy5/5FQ=
Subject key identifier:   F7:7D:A2:57:F5:11:41:0B:9C:5D:D2:AC:20:1E:60:DD:4A:66:52:5C
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       4C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
Manifest number:          0464
Signing time:             Sat 26 Apr 2025 15:47:55 +0000
Manifest this update:     Sat 26 Apr 2025 15:47:55 +0000
Manifest next update:     Sun 11 May 2025 15:47:55 +0000
Files and hashes:         1: -sMLrrZFQCqwm07rRb7eqM_CLLU.roa (hash: Ky99iFpAj10LyUJfVM2KKJOSRy5AFgozM4p1ywc/AdM=)
                          2: 6bzBLgMGLxpv5KXr1QdZOFUgQ68.roa (hash: onPqGzELd6apr5pyko6Zl9p49ao06sR8n8Lq4YxQbMU=)
                          3: 94h600expFJo30AqIKkGYY8_b9c.roa (hash: Kcy5muR9LduBKE7FlVxYAIrlKfLtnmun7laxON8qZxU=)
                          4: ChYQfJoAvNeZJqTjyEe47ymLtBc.roa (hash: Ifx8gT+ZKegTSrZp1iyttF9d78Jni/4HmAz5CaSMo9c=)
                          5: E-AEcwChtxkOhuje1ynB0rF8878.roa (hash: VnsSIZsZhPElxsVo8fcKcjPM2+2RdhccGXh8sM816iI=)
                          6: I-A5Tojl4UI4htwOhbXPJ-smHy8.roa (hash: hPzXbgDZX7rLMxc9ZkuuKfRag5mMlbyAUEug/KAn3as=)
                          7: OUUrpIqlTjYV8__dHZVbRfQWWy8.roa (hash: bJdb7X1pUTcXcrauw1aCX/MqF3VwJlTw1HFVKIl+nAo=)
                          8: TbkLvDllmDraAEu8DSj0EO26gMk.roa (hash: F9Vh0hbGAcMx4MrmRa8J38jY+apHkYAA6jqXGvO3D1s=)
                          9: ZZqtrFpdjeBQk65wVHoMJK51i2s.roa (hash: 8vunOSvYDrkau2Dqkn8Ww/BRk9RDW+SwEKqgzYhx/SY=)
                          10: evKb9jLxufOyo3xhlUajb6VIMWo.roa (hash: TwQir6dTA4QSOlCEP8Cu7+tfUgmTqZUNFTqAEL9xZ98=)
                          11: kgzbScGSrjAxnapnYp9x5vASEis.roa (hash: emKjC5EBTuzIE2meDwJtpsUz/YiH7OJN6uDyNoZKnWo=)
                          12: nadkSqVXkDDGGdv1wKxctGtBCJw.roa (hash: pCY1qkHH5nPMFMbDcRAgPjE2+20W5cQH1IjuWWr93S4=)
                          13: szOu2luBprL1T_cUZo-NY-h7haE.crl (hash: w5kXXiIHvUmuEK/ruMrU+z/4qazvHJEFZSvCOp7krRI=)
                          14: yVsmnFPXE2AeHQEx49QavXD5ko4.roa (hash: LVe3zajGIc0z7NhaiHXhe8uVq0D0QbEyEkEX+hjUhz0=)
                          15: zh2dO4q_qFdK0q0l7n8WCagMhnk.roa (hash: brwZy6jOK7tLV4iu5ly9xfrhpX4Ujwu8Yk/eSpiBk+A=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 18:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Apr 15 01:38:45 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F77DA257F511410B9C5DD2AC201E60DD4A66525C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:d1:43:3a:39:de:d0:f5:e2:76:ef:9b:61:
                    c6:6a:ec:f4:1b:76:93:35:a9:2d:6a:52:10:4f:ef:
                    77:34:ca:64:f8:ab:86:fc:d0:63:c6:94:e5:f5:a6:
                    34:0d:bc:e2:e0:f2:5f:bc:81:3d:36:aa:02:92:83:
                    db:0a:1d:7b:d0:c2:27:87:3d:99:7b:d2:56:02:fe:
                    ad:2e:af:33:44:37:55:05:06:e6:70:4d:90:26:18:
                    f0:68:fa:9f:9e:30:fc:8a:49:2b:fa:c0:3a:a6:67:
                    0d:f7:11:e2:fd:a0:81:ee:79:c8:fe:45:cb:85:ea:
                    3e:b4:64:e3:f7:63:a8:2c:dc:90:fa:8c:c4:c0:c4:
                    3d:b0:c0:01:94:47:57:18:27:a0:74:d5:71:ff:4e:
                    b1:c8:45:2a:c4:70:96:d8:6e:0f:a6:4d:fd:77:61:
                    64:8a:8d:28:cd:1b:68:6c:a0:aa:1d:e5:35:9d:40:
                    ed:18:85:af:d9:c6:ce:6b:48:7d:ce:61:3f:2f:df:
                    e8:48:9d:ba:ba:75:4f:bd:16:84:53:b6:e6:84:14:
                    72:8c:19:78:48:42:d9:5d:35:18:a5:11:ae:8b:d8:
                    98:1e:83:a4:bc:00:23:45:a3:b4:e0:08:f3:80:52:
                    a6:0f:bd:44:12:11:3d:cc:7a:96:e1:f5:5c:fc:3c:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:A2:57:F5:11:41:0B:9C:5D:D2:AC:20:1E:60:DD:4A:66:52:5C
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:d4:c9:e3:ca:16:ac:cf:b7:ca:bd:7b:22:13:d1:ff:dc:
         30:34:c6:94:6d:02:65:5f:98:0b:ab:61:9a:7a:98:66:68:0e:
         30:9c:8d:71:ad:c1:8a:67:d1:5f:72:44:59:3f:ce:c6:b3:bc:
         9c:23:ba:0d:5d:df:eb:3d:81:b8:8e:49:09:bd:32:96:ee:ae:
         16:de:eb:73:d0:ec:a1:fe:d1:ba:b4:65:49:54:7c:05:b0:27:
         17:07:3c:d8:0e:c3:b6:c0:45:56:b5:24:e3:98:a3:2c:c3:9c:
         1a:3c:c3:8e:22:61:0a:b4:cc:da:8b:a2:58:ee:f2:0d:80:2b:
         40:b9:97:4e:ea:f2:58:14:14:92:e6:dc:15:aa:87:95:9c:0a:
         dd:56:a9:9d:36:52:15:6e:5f:3c:fb:a1:b2:93:fc:db:f4:4f:
         d6:01:a2:0d:39:56:11:ef:c7:3f:0e:bc:52:f5:8b:33:24:1c:
         24:a0:f6:5d:2c:11:c8:5b:fe:2d:69:7f:d6:f6:c4:ef:77:29:
         d7:75:63:15:54:9c:bf:bd:ff:bf:60:19:ad:4b:82:e5:86:8f:
         a1:53:3e:4b:f9:87:cd:de:6b:ad:2b:b4:26:8c:03:23:4c:7a:
         2b:78:c2:b7:d7:76:e0:75:99:73:36:ad:bf:58:e7:91:62:10:
         5d:8b:ed:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:12:43 2025 by rpki-client