Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
File:                     4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json)
Hash identifier:          7qFIDc+aVazsK9Jw/kcLq8ZUTHjVPxnROrcm19QUtqg=
Subject key identifier:   12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
Manifest number:          1121
Signing time:             Mon 28 Apr 2025 18:09:30 +0000
Manifest this update:     Mon 28 Apr 2025 18:09:30 +0000
Manifest next update:     Tue 13 May 2025 18:09:30 +0000
Files and hashes:         1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=)
                          2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: sfxaXkF1jOHZYBSoqv2iCacspVdy3TrUSUIMdQXKOEE=)
                          3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=)
                          4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=)
                          5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=)
                          6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=)
                          7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Apr 15 01:33:06 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7:
                    56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b:
                    62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05:
                    53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e:
                    2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7:
                    08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c:
                    71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b:
                    bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac:
                    57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b:
                    ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be:
                    a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4:
                    97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5:
                    83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3:
                    0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63:
                    9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca:
                    1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71:
                    2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc:
                    50:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:dd:df:a8:4f:da:b1:94:dd:58:3c:2e:23:0d:a7:d3:85:df:
         6c:ba:c2:f9:f6:4f:d8:31:57:ec:cb:c2:c2:d2:a5:6a:6a:8e:
         23:26:9e:a1:26:7b:33:29:c8:d5:7f:f9:da:31:41:7b:fd:99:
         c8:77:89:78:a1:6a:05:49:74:c7:80:ed:1a:e4:4f:8f:cf:97:
         33:b3:c2:80:6c:53:99:6e:24:b3:22:45:7f:9e:cc:19:db:dc:
         f8:3e:34:bb:92:0c:17:73:5a:af:eb:df:69:74:e6:21:2b:3a:
         b1:85:86:62:c3:68:b0:b0:01:a4:6a:eb:fe:2b:c0:44:18:e9:
         c3:eb:b9:31:c1:93:c9:58:91:46:59:c1:5e:25:38:d3:f6:af:
         25:03:5d:d3:95:7d:b6:64:20:7b:5e:8b:46:9a:3a:b2:ef:53:
         eb:d8:02:ea:9f:40:55:cf:33:b2:89:b4:b6:f0:b4:d1:8b:1b:
         db:33:8a:65:8a:17:53:43:bc:4a:70:b8:4a:02:d2:a4:9b:3a:
         b7:2a:dc:05:ac:14:44:a5:aa:3d:d7:64:26:31:61:b7:47:eb:
         82:bf:55:fe:92:2d:13:d6:a4:0d:00:7f:52:c5:75:09:8a:af:
         ff:b8:a4:ce:73:d1:ec:2c:2a:f2:28:19:3f:d4:7d:9d:6e:01:
         15:6e:2c:66
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2
RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI1MDQxNTAx
MzMwNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTIzN0ZBMkM0N0E5NjFD
MkY5NjZGM0IyMEJCMDlEMjQ3N0FFRjMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOZOHN3hMrq5dD/HZETHVu6+NnqARWP0KxhtNZsbYsYEtc74Uxsm
/M2sH2wFU020xFcQDAz2tMFpbWk+Kz3y2K4bxYUbPSnaGdr3CGApgds8pJKCnPEu
Gc4McasHYN31hJOVHcNyq8ALvUkGmwbN8i4/EtozVJesV9mh1VknLIi0+QQXPU6L
7ilqQ1mhGzSEHAur+C2+oEJrTFD3lXzcBRJkEhfEl6myH+726ImBjKFELtKlg7Gv
uj7CO2EQvoec4GajCsFh04R5Gfd8grztWp5jnoHZjrUQ4LLJ5RSoqO3KHXFBvn2X
osI6ejbl/4dxL0YbOTlygT0BGK9ATs3cUJECAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQSN/osR6lhwvlm87ILsJ0kd67zBzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1
uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr
TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/3d+oT9qxlN1YPC4jDafThd9susL59k/YMVfsy8LC0qVqao4jJp6h
JnszKcjVf/naMUF7/ZnId4l4oWoFSXTHgO0a5E+Pz5czs8KAbFOZbiSzIkV/nswZ
29z4PjS7kgwXc1qv699pdOYhKzqxhYZiw2iwsAGkauv+K8BEGOnD67kxwZPJWJFG
WcFeJTjT9q8lA13TlX22ZCB7XotGmjqy71Pr2ALqn0BVzzOyibS28LTRixvbM4pl
ihdTQ7xKcLhKAtKkmzq3KtwFrBREpao912QmMWG3R+uCv1X+ki0T1qQNAH9SxXUJ
iq//uKTOc9HsLCryKBk/1H2dbgEVbixm
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:54 2025 by rpki-client on console.sobornost.net