Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
File:                     u6c_64jhyYfVPdLDsttCdUXro3Q.mft (raw, json)
Hash identifier:          sWy1MFc7rnYBfD1FC0gYn9lf6sSsjbtZ6vTV9sjrnbI=
Subject key identifier:   50:D5:6E:93:77:87:99:9E:F0:14:D5:6F:D5:5B:1D:EB:AD:D0:2B:E2
Authority key identifier: BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74
Certificate issuer:       /CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
Certificate serial:       28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
Manifest number:          0475
Signing time:             Sat 26 Apr 2025 15:51:37 +0000
Manifest this update:     Sat 26 Apr 2025 15:51:37 +0000
Manifest next update:     Sun 11 May 2025 15:51:37 +0000
Files and hashes:         1: n5Kle2KrEOV09nA5OqcqqE8llqk.roa (hash: SHPaW5Pa9xtIp3dZeonYRUG2eTSIu8ZkrGA1a2tjgWY=)
                          2: u6c_64jhyYfVPdLDsttCdUXro3Q.crl (hash: v/MK5ByJ4NNr1VYi5k0ITH0Ajr4PDozsgMtrKmvJDIE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBA73FEB88E1C987D53DD2C3B2DB427545EBA374
        Validity
            Not Before: Apr 15 01:37:47 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=50D56E937787999EF014D56FD55B1DEBADD02BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:53:e6:15:4f:7a:f7:91:cc:2e:0b:40:ac:
                    07:60:83:2a:91:17:e4:09:df:b4:6d:1d:6c:45:a8:
                    ea:73:7b:61:ff:70:ca:7b:b6:ed:2a:63:8b:2a:78:
                    b3:dd:6e:9c:b8:01:31:c5:c9:bc:f8:f5:5c:0b:0e:
                    62:7f:22:a7:31:83:24:50:e7:af:a7:76:b4:d2:2f:
                    7b:d9:68:1e:00:98:e1:47:f2:aa:99:bb:74:d8:8a:
                    4d:f7:45:57:c6:90:fd:ff:a9:e2:ed:78:3a:b8:0d:
                    32:71:e4:75:ab:39:3b:7d:2f:a9:54:3f:e8:44:6f:
                    cb:c2:82:9b:0d:47:7a:d1:b2:7b:d4:00:fb:25:91:
                    63:b4:17:f1:2b:66:79:58:e5:bc:f9:4e:17:2e:2e:
                    73:60:b2:77:d0:0c:68:b2:cf:1c:54:c9:24:66:59:
                    dc:71:8a:43:4d:ed:73:49:0d:b1:d2:03:ae:21:65:
                    3c:c6:aa:8b:fd:52:ce:c1:74:c9:31:7b:0b:99:ef:
                    82:5b:16:f4:a3:e6:91:52:89:75:12:46:76:0d:77:
                    db:c0:3d:99:39:27:87:f6:2d:eb:2d:35:ea:1c:70:
                    05:19:20:07:ef:b0:15:8d:93:cb:35:59:83:8d:2c:
                    39:d4:10:64:2e:8f:4f:61:2b:c8:a7:07:25:97:25:
                    af:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D5:6E:93:77:87:99:9E:F0:14:D5:6F:D5:5B:1D:EB:AD:D0:2B:E2
            X509v3 Authority Key Identifier:
                keyid:BB:A7:3F:EB:88:E1:C9:87:D5:3D:D2:C3:B2:DB:42:75:45:EB:A3:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u6c_64jhyYfVPdLDsttCdUXro3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/536/u6c_64jhyYfVPdLDsttCdUXro3Q.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:8f:8c:13:4a:4e:21:a0:d4:fc:78:51:7a:e1:cb:4a:2c:
         5f:23:ca:71:a2:9d:a5:36:6e:c6:01:d9:bd:db:4f:35:03:0b:
         8b:08:ad:d8:26:35:68:4d:1b:cb:bb:b3:8a:97:93:f2:76:5b:
         f2:31:38:f4:ad:7c:78:3a:b6:d8:be:31:50:46:a8:f9:32:13:
         2d:2b:69:97:63:ea:b1:9f:36:68:b2:29:02:82:c3:f3:17:da:
         a5:86:54:52:5b:53:86:a6:80:e1:f3:d5:0d:20:f2:26:fa:b7:
         79:b3:0c:8c:04:bd:06:e6:a1:14:a4:ed:9a:8b:5a:c2:1c:cb:
         0d:07:d3:42:f1:29:01:19:af:91:a4:4a:0c:23:55:59:0f:05:
         79:88:35:c5:96:d8:96:aa:68:0d:5e:34:aa:52:a7:bf:35:4f:
         87:25:85:48:13:71:08:cc:8a:e6:c2:9d:70:bd:fe:55:f9:a7:
         eb:c8:73:be:7a:6d:9b:b5:89:34:0c:1f:19:78:49:4e:9d:5f:
         d5:23:3f:db:fb:91:d0:25:89:02:0d:12:c6:dd:1d:12:0e:5e:
         62:2a:09:1f:d5:92:f7:03:a1:f2:4c:2a:b0:2a:b8:7d:fe:23:
         90:1e:1b:19:c6:33:31:37:e1:6c:5b:f8:45:fe:af:a1:5b:0b:
         ca:db:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:33:45 2025 by rpki-client