Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
File:                     VrJOODhFr-fapjHAHYD7UWw0i7A.mft (raw, json)
Hash identifier:          zm2wW+A+eskUWl6liKHRHmBA2MIv4V+jL9Er9w1j4Gc=
Subject key identifier:   E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4
Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0
Certificate issuer:       /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
Certificate serial:       04
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
Manifest number:          87
Signing time:             Sat 26 Apr 2025 11:20:16 +0000
Manifest this update:     Sat 26 Apr 2025 11:20:16 +0000
Manifest next update:     Sun 11 May 2025 11:20:16 +0000
Files and hashes:         1: K03-WjLYOd1HsPB7C9phAG2f_Is.roa (hash: AS1r+GhsGIxu7cJEOtlfjdwuvT/ekIwzgGxIvuZ9x/0=)
                          2: TpzjShFDkh5n2KnbnTSM1bc4-78.roa (hash: 9lgomC8CNJnaCGR3udsJYmIRXb/RDExg+GTPgNguKDo=)
                          3: VrJOODhFr-fapjHAHYD7UWw0i7A.crl (hash: 30S/FNNcPGUEzU1gwI9czpsZH8B1s7JBAtm+5kXq34U=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 13:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0
        Validity
            Not Before: Apr 15 01:32:42 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=E2259B1529EE6A496D36569FFBCA2ECD646F56C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:51:4d:65:7b:41:bc:d8:34:6d:80:33:2b:d7:
                    ee:38:79:39:d0:82:10:6a:1b:e2:ee:a8:40:b4:5c:
                    44:69:0a:e6:4f:20:a9:43:33:fc:f8:ec:38:57:5f:
                    70:fd:41:9d:78:a7:44:45:69:22:9b:6b:bb:2e:d9:
                    86:3c:f2:f0:20:cf:03:7e:a3:c5:1c:19:b0:51:d3:
                    7c:20:7b:a6:5f:15:e9:03:4e:47:d2:cf:a6:32:3c:
                    e2:f8:f6:f3:14:67:d1:ce:f5:b9:51:ad:54:a8:53:
                    10:53:e3:7b:12:b1:20:87:33:eb:e0:58:45:a7:1e:
                    55:10:40:f2:43:a6:a8:a6:35:7d:2e:a6:9f:c2:cf:
                    da:b5:46:2c:98:6d:9f:77:58:ac:a4:d6:e8:d6:b3:
                    74:8e:c9:6f:94:42:ce:3f:af:d8:ed:39:39:fe:24:
                    e1:1a:6c:7a:7a:94:4a:48:79:a6:fe:b7:c9:23:fc:
                    3a:c4:40:14:5e:b3:af:e5:43:29:d4:c1:d9:47:22:
                    e9:8e:de:90:a7:77:58:7f:1d:db:1f:30:ba:84:2f:
                    f7:4f:21:65:10:7d:a2:ed:d7:20:a3:cd:ac:c0:90:
                    c1:fa:29:dd:3e:24:c0:a8:d9:74:40:26:ee:a6:34:
                    f0:06:36:91:18:61:14:6a:80:48:b5:7c:8c:c0:45:
                    15:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4
            X509v3 Authority Key Identifier:
                keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:38:9c:a3:a3:c3:97:41:82:86:b2:60:80:95:ce:52:34:e5:
         69:0a:e0:80:34:fe:a5:65:80:1c:7a:42:bf:0f:6d:b7:ab:b1:
         71:b9:0a:6c:64:d3:14:ad:3e:72:47:ab:ff:8d:b1:44:69:ca:
         dc:b6:18:99:12:d3:05:bc:1e:4f:b7:f8:dd:00:4a:eb:80:f1:
         88:8d:7e:83:54:7f:34:79:d6:34:fa:cf:15:6e:08:5f:b8:d8:
         4a:80:1c:53:c2:41:16:81:76:bb:60:2b:df:9c:a8:38:e7:11:
         8c:27:59:8d:ce:57:ba:3b:bd:d5:1e:ce:ec:fa:cb:0c:d3:72:
         49:36:c2:bf:bd:42:20:28:bc:33:89:11:5c:4c:98:45:84:e4:
         04:88:bd:39:c5:ad:1b:ba:95:72:99:b8:f9:29:b8:60:df:0a:
         11:41:ac:f5:f4:3b:ce:17:f0:7b:42:40:31:77:c7:94:f1:89:
         8c:c2:0b:d1:fa:18:50:c5:ab:85:07:a3:14:1d:75:b6:02:21:
         a4:1d:8f:a7:ed:9f:1b:be:ef:ee:cb:73:11:06:14:5f:0b:20:
         af:27:1e:d3:73:20:3f:9c:86:18:05:a4:0c:4c:d8:a3:73:40:
         9f:40:5c:04:9f:9e:30:ab:9b:61:ac:89:8c:36:17:ee:01:c3:
         bc:10:09:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:32:45 2025 by rpki-client