Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
File:                     Gy5-YtqPEvO7M-C1484AL9oozyU.mft (raw, json)
Hash identifier:          N6G+YfF4QnaF64nIftch49OMvZrGKEAjkAa65dfYHKs=
Subject key identifier:   DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
Manifest number:          041C
Signing time:             Sat 26 Apr 2025 07:38:16 +0000
Manifest this update:     Sat 26 Apr 2025 07:38:16 +0000
Manifest next update:     Sun 11 May 2025 07:38:16 +0000
Files and hashes:         1: 1Q9i1OL36PXw7qH7R5GaTK2DedM.roa (hash: 98RVjXFbkZwTJHzJB0qABv8yyc4uuCNXHFAJ7JzK2eo=)
                          2: 3hq5zFUOxg4X6sAaJLEZypYtOkE.roa (hash: sTjmQ67cYsUyABphXXrKUJnO9P22DnApz5MRSJxKS2M=)
                          3: Gy5-YtqPEvO7M-C1484AL9oozyU.crl (hash: QdpEMXTY+3tNtKvKX0Nk1cdgqciew2v8Nwr4VYJyFdM=)
                          4: oD0quaPKmGzxZJuofG-ek3b9Fpo.roa (hash: WRLFSxy2UW7yxMiy4FFhJwDBDR9echIlcpxGj3lpuOY=)
                          5: seLz1Smiuc7htuRXTlD-4GL1Rks.roa (hash: gsowdarQOuSnE8Z823DxzjBRBi3vMi+CzNkP2bvEGsw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Apr 15 01:31:38 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=DE0BE4249741260310D50AC989FAE4A9FED7AD2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fb:19:42:3f:26:6c:fe:85:d4:e4:e3:b7:33:
                    ba:63:49:7a:ce:04:ac:03:0d:39:b4:98:da:67:42:
                    1d:04:24:24:99:e9:27:bc:65:64:3d:dc:39:69:c0:
                    c3:72:5a:df:89:a5:90:6f:63:60:3a:75:10:7f:d5:
                    bf:03:0c:1b:c2:f9:cd:83:e5:54:f4:51:de:18:e9:
                    30:55:a7:83:cd:27:27:a8:8b:39:49:70:c5:62:b6:
                    de:aa:84:45:f6:ea:2a:15:a6:a3:4e:19:35:be:be:
                    09:c9:50:4a:4c:ab:93:ee:e8:00:cb:fb:dc:01:e4:
                    43:70:ab:97:b6:9c:ef:dc:bf:81:3e:57:40:58:31:
                    f4:7e:6f:9f:f1:29:4a:44:66:5b:4a:fd:b3:dd:a3:
                    c7:94:78:81:28:53:a4:03:fa:c7:51:5d:7d:fd:81:
                    ed:49:b7:cb:d1:c1:f6:14:f8:b8:da:b7:16:1b:1b:
                    97:11:68:05:7c:60:29:9c:0a:db:78:04:96:42:cd:
                    a8:ed:e7:35:18:72:80:b3:ed:56:30:06:f9:61:47:
                    15:43:50:a1:f2:57:9a:a4:be:9c:c8:e6:40:36:e7:
                    58:fd:3a:8a:32:b5:e8:42:cd:2a:58:a2:a8:71:3c:
                    2a:7d:9c:46:84:8c:84:a8:a3:c8:e6:e3:25:a2:60:
                    61:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0B:E4:24:97:41:26:03:10:D5:0A:C9:89:FA:E4:A9:FE:D7:AD:2C
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:45:4f:8c:56:23:05:f8:e0:c6:1c:1f:4e:fc:6a:fe:30:4f:
         a1:06:7a:3b:a7:77:ec:a0:b4:14:95:64:60:c5:6c:10:3f:e2:
         8f:fd:bb:86:bb:c9:ae:d4:43:9b:4c:bd:0b:74:d9:66:28:79:
         cb:d3:5b:4b:a4:47:51:3d:25:06:ec:46:69:d0:ac:fc:df:c1:
         38:94:2f:54:a9:a0:4a:36:3c:43:2e:84:ac:72:83:1b:47:16:
         dd:c0:f8:f8:80:12:b1:4f:a5:60:e8:43:6c:85:a8:50:6a:be:
         80:fd:58:e8:61:d6:e3:3a:c8:72:69:97:98:d7:e3:a0:4b:be:
         a3:af:59:2d:c3:70:b0:e4:25:c3:df:2e:65:38:ab:31:43:6e:
         fd:f6:c6:74:63:cd:63:bc:e1:e4:91:2c:c1:89:60:7e:4f:c0:
         54:80:02:d6:31:c1:a1:7f:62:0c:73:4a:08:0a:ec:b5:96:ef:
         c8:04:95:bd:1b:76:ca:36:ad:de:bf:24:a9:52:3d:24:f5:06:
         44:7d:9d:19:a1:75:f1:aa:17:f6:da:90:91:0a:16:cc:cd:05:
         60:c6:7f:c3:3f:48:c0:b5:83:32:64:cb:64:7f:02:ce:e4:da:
         42:dd:e2:d7:75:4c:42:d6:40:a8:c3:09:20:47:8d:5f:cb:e9:
         f5:0c:ec:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:11:24 2025 by rpki-client