Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
File:                     gMrPcKS2wbb2JO9DSEByQGuNPzY.mft (raw, json)
Hash identifier:          YgrhGKg2wsql5KJ4RAEiCpX0uP1ghJjzKTzOv5wZ57E=
Subject key identifier:   D2:31:CF:4E:A3:52:63:07:92:3B:C0:76:69:57:FE:EF:86:99:EF:EF
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
Manifest number:          0424
Signing time:             Sat 26 Apr 2025 11:41:31 +0000
Manifest this update:     Sat 26 Apr 2025 11:41:31 +0000
Manifest next update:     Sun 11 May 2025 11:41:31 +0000
Files and hashes:         1: 9Pc6u6Sqf1-Gu6hdKKlor2WYeK0.roa (hash: PRTNFL4vwd70Cfs7cI7kmA/e52O//AyO8xO0cEv+YKw=)
                          2: LC6Q8LlYGiTqVYCL0yX88qKg35I.roa (hash: 21kx9lBJxdGSfAqkjZmARZcsnqIUyJwmtbuk6Hu6kdc=)
                          3: RCVEzGZ0a15UIa0MSfR9SmLF4p8.roa (hash: +t0/12t2DqUdnsV/w1fl8IkZ5gCFVfC0ZWYtfxqf5e8=)
                          4: YeiS7vcH39aRTh-WI4GASMU46ys.roa (hash: iTmjZfxaQKIebmfn6ZXdhLm4hnuOigp8nlTJY4W8a+s=)
                          5: cOnS43Hkxk6bvwifqxycDsXtQes.roa (hash: uqBhIdG+bbXUuyMQWJ4IsHHM4zN802dGfkHwWr0/L4g=)
                          6: gMrPcKS2wbb2JO9DSEByQGuNPzY.crl (hash: y3AjS285m+z2TThGPtNrp4KtlXOJF0d+kN61pefy1Qg=)
                          7: mQUW5NVasZzmYiXE2CvzDbgePYw.roa (hash: E05A/mvOt6z/VbtNAapN5iRCs4ytdVhYe+MUbKazl0Y=)
                          8: tSnOZys5ATuRvsS7KDdv0b552x4.roa (hash: bowoxUgOj88mSY9e7CCqHKux1MlulCt6wOcdtgPM1YY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 13:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Apr 15 01:31:08 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D231CF4EA3526307923BC0766957FEEF8699EFEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:78:8b:ac:e3:ab:eb:88:12:97:09:28:e9:
                    0f:b1:e7:3a:0b:74:ac:58:26:fc:84:2b:cc:60:b2:
                    5a:39:66:11:28:dd:7e:0c:c5:9b:b6:8a:45:45:81:
                    35:6d:2b:9d:37:8b:34:c0:08:b9:b3:c2:7e:16:4e:
                    3f:17:a5:53:2f:24:d7:84:2f:1d:2c:85:99:29:ef:
                    f9:c0:2e:81:97:8d:c2:ed:be:ec:66:e7:4a:16:72:
                    a6:fa:dd:24:61:b0:28:3f:74:fd:08:86:6b:cd:e7:
                    85:b0:77:18:f4:01:37:08:6d:8c:0c:51:2c:2e:c1:
                    13:42:da:17:67:b4:2e:5b:d4:f5:8c:fd:51:ff:da:
                    0a:cc:d6:8c:28:45:60:92:15:2e:8a:a7:67:78:80:
                    e9:68:db:f0:ea:a2:81:ae:75:91:46:17:b5:9f:69:
                    a4:41:4d:09:fe:3b:18:49:e3:79:ae:9f:bb:ce:f8:
                    b7:55:38:4a:bf:2b:ec:71:6f:61:92:4e:85:90:46:
                    6e:a8:c7:1a:f9:22:6b:c5:93:c3:d3:fd:9d:3f:ae:
                    50:9e:cd:73:f1:ce:11:77:4d:9a:38:fe:75:31:ba:
                    57:0f:f9:37:3e:9d:93:d7:af:8b:3a:4b:ea:aa:fe:
                    8a:95:3a:76:24:d7:95:0b:c3:a1:08:cd:6d:4c:9b:
                    6c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:31:CF:4E:A3:52:63:07:92:3B:C0:76:69:57:FE:EF:86:99:EF:EF
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b3:07:52:a8:26:05:bc:2c:00:b4:d6:e4:e5:70:85:50:c6:
         d9:0b:76:b9:4f:7f:8a:4b:d6:69:45:58:53:55:f5:76:ec:f9:
         6b:59:98:ae:60:32:0f:fd:91:87:08:25:05:4c:d1:02:c2:fd:
         97:ae:b1:b6:54:d8:2c:e8:3f:7a:f6:d6:dc:f3:04:e8:ad:40:
         89:a4:e5:79:d1:e0:f1:da:b8:bd:10:3e:f4:36:7a:46:7c:54:
         0f:96:9e:32:62:77:2c:94:92:75:69:75:8f:26:f7:7f:e2:50:
         77:0b:57:35:cc:03:38:90:d4:84:ab:a6:cc:19:f0:40:a3:37:
         0f:07:20:9a:b8:6d:b3:4b:fc:c2:09:aa:89:22:0c:59:50:3f:
         1f:d4:f1:54:0f:a7:ec:31:69:6a:7d:32:83:95:fe:b4:01:5e:
         ad:93:bb:0a:b1:66:14:a9:bc:56:2f:a3:5f:6b:1a:1a:3b:bf:
         7c:b1:b6:b6:34:1f:d6:6c:8d:92:b0:ec:42:99:cb:ce:2a:24:
         07:f5:7c:ac:22:e1:23:d1:49:61:8a:28:2e:ed:b2:20:40:c8:
         5d:d7:3a:a1:53:a9:af:24:8d:32:49:03:94:a1:3b:58:d7:26:
         91:09:c2:d6:67:cd:cf:2a:2b:04:25:e8:4a:f3:9e:54:0a:10:
         2a:e3:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:45 2025 by rpki-client