Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
File:                     hJu41a4RSW50pZWrPZ-PQBxLWMw.mft (raw, json)
Hash identifier:          vsLvGcfm/WiDZDaZRQr8SeJ8rZyiHcLRwuZP9s1sOYQ=
Subject key identifier:   4E:2E:13:6E:80:38:A9:01:D2:EE:A7:8C:BC:76:17:AA:36:E9:6D:1F
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
Manifest number:          0452
Signing time:             Sat 26 Apr 2025 11:44:15 +0000
Manifest this update:     Sat 26 Apr 2025 11:44:15 +0000
Manifest next update:     Sun 11 May 2025 11:44:15 +0000
Files and hashes:         1: 3cg_MllDgfJWeGp2YGH4fKK3rZE.roa (hash: Qs6a2TkTC0VWuIgVrYRnz7Lq1WT4GC3BTlgH8h/ZktM=)
                          2: hJu41a4RSW50pZWrPZ-PQBxLWMw.crl (hash: EUHBZmpkyj6aK8lhBFMaYYBna2Scjwd/h1acnIgk4es=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: Apr 15 01:38:55 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=4E2E136E8038A901D2EEA78CBC7617AA36E96D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:d4:2f:03:3e:ab:7a:85:a2:35:35:94:7a:
                    d9:10:c9:89:cf:e0:a9:57:21:f5:18:87:61:ee:98:
                    1b:28:3f:ad:ab:e0:3d:b4:9b:8a:c9:3d:07:b4:96:
                    0b:9a:c6:60:a8:20:c3:07:65:33:22:41:8d:12:07:
                    96:93:b7:0d:fe:e7:ad:cd:35:38:da:68:31:c5:4a:
                    16:77:bb:1b:1e:b3:a9:44:35:82:40:df:20:fa:07:
                    89:27:82:78:75:c7:a4:82:21:18:11:3a:6b:f7:41:
                    a4:68:78:2a:83:c2:97:c4:db:54:a9:9b:7a:d0:9a:
                    10:7b:b2:1a:a9:dd:50:d7:5b:8b:5c:ca:66:4e:4d:
                    3d:75:15:ee:2f:02:1d:43:42:fe:e2:96:97:53:69:
                    a9:01:c6:9d:41:6d:61:97:14:78:07:5d:e1:95:84:
                    3a:27:60:3c:7e:c2:62:00:a7:91:e8:58:4e:a0:43:
                    fe:16:8e:ed:bb:de:3d:aa:98:cc:29:52:8d:04:c7:
                    b7:b6:e1:00:5e:d4:38:59:38:09:1e:2e:99:70:df:
                    38:a2:62:2b:c1:c8:da:b3:5e:3a:fe:9f:5f:8e:e2:
                    4c:6e:c4:d3:10:0f:94:3d:1d:96:71:cd:37:04:ba:
                    61:52:d7:fd:fa:a4:b7:a7:6f:b3:93:90:71:b5:43:
                    f3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:13:6E:80:38:A9:01:D2:EE:A7:8C:BC:76:17:AA:36:E9:6D:1F
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f0:68:5d:fb:c0:c9:9d:7f:0c:96:d3:83:28:68:3d:db:4c:
         44:34:d1:c4:20:f0:6d:b3:d8:f0:61:2e:69:06:7e:b0:d2:72:
         4c:4a:a1:83:7c:9e:0d:ed:2b:97:19:eb:a7:b0:45:28:13:37:
         ec:d0:bf:7c:47:46:26:0a:6b:cb:4c:e7:7f:31:91:5c:94:dd:
         1a:5e:68:c2:e2:fe:5a:85:71:d2:77:87:b3:1d:bb:bc:32:a9:
         89:f6:f4:1d:a1:5d:0d:1e:60:ff:fb:83:d4:e2:af:89:b4:be:
         66:31:14:8f:3d:8e:94:3f:d1:05:49:04:2e:41:b4:22:af:84:
         df:b8:2b:0b:bd:4c:e3:42:20:b9:24:0f:45:46:7f:a7:ec:26:
         fe:eb:db:03:19:39:13:32:bc:5d:c2:16:61:48:85:39:64:6d:
         cb:62:8c:e8:90:3f:8e:47:a1:5e:d2:21:fb:ba:e8:8b:e5:2d:
         a2:40:db:c6:d1:86:c7:dd:d5:38:47:cf:c5:25:95:ee:60:ad:
         d6:56:09:10:0d:3f:56:fe:7c:9e:79:6d:a0:89:86:2c:ec:97:
         04:1b:d7:d3:dc:b3:3b:67:15:a3:48:2c:8c:57:05:5a:21:07:
         8b:4e:27:29:4f:94:12:dc:8a:c3:d4:88:f9:08:07:b6:c8:7a:
         60:bb:13:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:18:46 2025 by rpki-client