Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
File:                     o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft (raw, json)
Hash identifier:          8aXlS6gQ215/mkNrFC7jJhNbB+jALS9+lIYcb+Nn4ZI=
Subject key identifier:   45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5
Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF
Certificate issuer:       /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
Certificate serial:       0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
Manifest number:          040A
Signing time:             Mon 28 Apr 2025 20:02:56 +0000
Manifest this update:     Mon 28 Apr 2025 20:02:56 +0000
Manifest next update:     Tue 13 May 2025 20:02:56 +0000
Files and hashes:         1: o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl (hash: UFVYgOcbZoVKZjKIUhtclGR0RLKhJpHG5hc62KpeqwQ=)
                          2: oNELch91mVrp659FXA3taW7FO4k.roa (hash: 0a6nekKiKtaDUpQ4xvwVMyz8TWCbny/YzDz6TIzdz2M=)
                          3: tjS7HcxgcNLO3-zYKYyNL5mMaSs.roa (hash: HRIGQqtngeIH1ecf5w8mvxqdiL8TLrGw2pzam5+IQT0=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF
        Validity
            Not Before: Apr 15 01:32:32 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=451744DF5FCC00491CBA9FA0CC7244F7419C48E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:35:fd:cf:5c:20:c0:7a:37:f9:5a:f4:7d:
                    2d:7e:77:ad:ef:f3:71:3a:f0:2f:bf:f1:15:ff:07:
                    fb:7c:5f:be:fd:8f:74:3a:8a:db:03:ae:79:b0:7a:
                    84:2f:db:93:37:2c:e2:e8:ab:bc:b2:55:f6:0c:02:
                    8b:67:dc:65:02:fa:9f:bd:4e:b1:b0:4f:32:1a:c0:
                    7d:a2:18:7f:38:81:c8:d0:5b:6c:19:a4:72:27:c3:
                    9c:b5:ee:4e:44:4d:88:ab:90:c8:f4:9f:c0:2d:a4:
                    95:49:6f:c7:db:b2:0b:b0:79:fa:63:5d:7b:f0:1b:
                    67:a5:6f:53:e4:d5:3d:c3:57:fd:72:e0:cb:fa:a3:
                    a2:28:d1:0c:2e:31:05:bb:1f:45:f3:c3:3f:6b:88:
                    22:4a:25:cf:7d:85:ae:59:4e:36:15:17:e1:a1:80:
                    17:03:88:e3:9c:13:26:55:af:14:49:3e:97:c9:b9:
                    47:db:26:f5:52:48:42:03:d5:92:e2:02:af:09:1a:
                    0a:c6:aa:a8:39:72:60:4c:4b:d9:e8:ff:6a:29:60:
                    fb:95:94:ed:57:3c:52:f1:e8:08:91:3e:a3:2d:7c:
                    52:09:4d:24:f9:9c:8b:5b:fa:a1:ae:da:87:c4:d3:
                    e8:84:25:e9:a2:4f:0e:1a:cc:7f:ed:76:64:cb:28:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5
            X509v3 Authority Key Identifier:
                keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1f:53:6e:40:d8:74:0b:1e:5e:ea:36:c9:e8:65:35:67:2c:
         9d:68:c8:e7:05:6e:b9:0b:ff:06:2f:20:e0:cc:11:45:87:61:
         11:0a:d5:2d:40:6f:f5:ff:b8:82:79:0c:1a:9d:5d:45:12:6b:
         4c:55:29:22:34:5f:dc:4d:3e:c3:45:cf:52:ec:59:58:bf:65:
         5e:8b:79:f5:65:27:0a:b3:90:3e:a6:9e:c9:78:82:46:77:45:
         05:e9:99:37:92:08:1d:ab:1b:71:37:b2:53:d6:43:f0:18:2e:
         93:76:aa:1a:6d:30:91:06:81:a6:90:94:6d:33:e5:e2:c2:86:
         df:e0:c7:a6:9c:ad:54:a7:19:a9:4a:16:f2:de:58:8f:39:14:
         dd:9d:00:7c:73:3a:39:1a:8e:78:e4:70:39:a5:9d:b8:0e:7b:
         7b:dd:56:24:78:c3:b4:ef:52:ba:87:e5:11:05:a5:05:83:38:
         ea:b7:61:1d:bc:50:5c:11:87:e5:b0:81:ea:dd:82:8f:6d:ba:
         56:24:8d:b1:51:4e:d3:e8:66:bc:83:89:c2:7a:ad:0c:ce:2c:
         e0:68:7a:23:df:66:0e:50:c4:8f:ba:4b:53:7a:37:fc:89:a1:
         53:21:6d:46:33:90:7f:dc:56:da:0b:59:54:85:7e:f2:c5:70:
         0c:0b:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:55 2025 by rpki-client on console.sobornost.net