Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
File:                     4SW0OnWuMTJppgY45mMXlwtQtdM.mft (raw, json)
Hash identifier:          /7WBRtM/DGMEwq0gUJOL9cw86IWkUElQfdNWFJ//4VM=
Subject key identifier:   2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
Authority key identifier: E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3
Certificate issuer:       /CN=E125B43A75AE313269A60638E66317970B50B5D3
Certificate serial:       1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
Manifest number:          0691
Signing time:             Mon 11 Aug 2025 05:53:13 +0000
Manifest this update:     Mon 11 Aug 2025 05:53:13 +0000
Manifest next update:     Tue 26 Aug 2025 05:53:13 +0000
Files and hashes:         1: 4SW0OnWuMTJppgY45mMXlwtQtdM.crl (hash: vjeWVPHEB7leIKDhbhu5czqUcEefZP6CDGkFDuzC/68=)
                          2: eJObqEUg57Htjs32brscER0ziGA.roa (hash: sAB88E47RzCiuqDhcl+IzB3GnruVtCV9pzcsXdh8J14=)
                          3: sLGgaActsaSFOUuP72d7QBmj5Bk.roa (hash: 0nszAiQf991UoL5xMmz5WyuSEX8jXh7GwnSC9AcKvFY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E125B43A75AE313269A60638E66317970B50B5D3
        Validity
            Not Before: Jul 30 06:32:41 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2A921C6775102E77A655E6C7BB0E169690FC4DDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:3d:a7:fc:4c:9a:03:4c:ba:89:29:80:82:
                    fe:c3:23:53:37:47:14:cc:bd:aa:81:22:b3:77:fe:
                    44:3a:fa:83:88:86:43:f6:df:43:9a:95:ad:17:64:
                    3c:a4:96:8b:ac:04:4b:4d:51:7a:d0:11:fa:85:b4:
                    35:51:69:0e:9a:ac:0b:40:25:15:68:41:18:17:56:
                    6f:9a:e4:7c:f2:47:36:dc:ff:51:cb:c1:b8:ff:5f:
                    c0:ce:a3:cc:6e:bc:56:46:99:90:1c:98:18:ce:61:
                    89:15:e7:ac:6a:08:7c:10:c0:58:cd:8d:3f:52:bd:
                    36:95:72:42:e3:dc:a5:b7:21:22:28:60:29:d0:3d:
                    ee:79:ca:18:70:9e:f4:60:fb:56:ed:1d:f4:f1:6b:
                    68:a2:00:e3:16:c6:75:f4:af:e9:1c:57:91:4e:f7:
                    a5:77:fa:34:b9:8c:1a:85:54:fc:bf:23:37:e1:75:
                    e8:1d:e0:eb:22:1e:20:cb:82:29:94:af:27:8a:6c:
                    f3:b2:6e:5d:e9:7e:fa:6b:86:78:7a:8f:1c:64:90:
                    e3:79:7b:32:85:4e:bf:0a:94:dc:4a:53:74:68:ba:
                    42:93:bd:32:6b:52:ce:0d:82:89:e1:61:07:98:56:
                    e5:ae:1c:ca:18:bc:dc:90:1f:23:fd:bd:89:d0:e9:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:92:1C:67:75:10:2E:77:A6:55:E6:C7:BB:0E:16:96:90:FC:4D:DF
            X509v3 Authority Key Identifier:
                keyid:E1:25:B4:3A:75:AE:31:32:69:A6:06:38:E6:63:17:97:0B:50:B5:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4SW0OnWuMTJppgY45mMXlwtQtdM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/568/4SW0OnWuMTJppgY45mMXlwtQtdM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:30:ff:dc:88:29:df:80:5a:f3:88:88:bf:af:92:0a:b8:a4:
         ed:0a:58:05:ce:48:78:ef:7c:f6:24:68:d0:a8:13:bc:b9:29:
         5e:1b:30:3b:24:95:6b:6f:33:ba:0d:c1:8a:40:5a:09:0a:47:
         e0:04:9f:fe:6c:62:c2:a1:aa:a5:64:20:21:0c:3b:bc:b7:79:
         e2:2e:c9:05:ef:41:e5:15:43:fb:e3:78:37:65:45:e7:22:1d:
         32:81:ed:19:02:f5:9c:b7:b5:b7:0b:ef:10:36:81:db:1c:2c:
         aa:e1:ae:4e:cb:56:be:52:25:88:ae:a4:d0:58:7f:5b:c8:7b:
         2c:e7:90:da:04:aa:d6:6a:6f:9b:85:cb:59:ed:b5:34:62:e6:
         39:f2:72:7f:0e:18:ac:92:72:56:f5:32:5f:b6:fe:06:fa:ce:
         8f:7c:4c:81:09:0c:da:f5:3e:c7:88:99:87:14:ff:76:42:75:
         11:27:42:15:b2:e7:79:8f:bd:50:57:9d:c0:b3:a2:6b:d4:ff:
         2c:c2:1a:83:eb:6d:4d:ed:21:6a:6f:5c:29:6b:a2:fc:bf:74:
         4b:f2:c9:a0:47:21:e5:e4:08:82:3e:4a:76:4e:87:97:d6:a8:
         8e:17:b8:16:73:90:c9:6b:f4:c2:4b:4b:53:c0:3a:36:aa:dc:
         a7:1e:d5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:32:18 2025 by rpki-client