Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
File:                     GbT9rpYvSWBYix0r5qHtQvE3CY4.mft (raw, json)
Hash identifier:          vVvcSo78/9MMynWhhmmu4Xaib03BbBrVbjCYm1abH2w=
Subject key identifier:   D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       57
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
Manifest number:          08BC
Signing time:             Mon 28 Apr 2025 18:09:30 +0000
Manifest this update:     Mon 28 Apr 2025 18:09:30 +0000
Manifest next update:     Tue 13 May 2025 18:09:30 +0000
Files and hashes:         1: 5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (hash: aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=)
                          2: GbT9rpYvSWBYix0r5qHtQvE3CY4.crl (hash: yqHmOciduRaLdQDo980Md0nsmSbVn9r95HuC9MDCW0Y=)
                          3: _O1GniIa9Sv6jEx8l2n-SZu-m9A.roa (hash: 2pH7lB602EN4j0SDFwl5fVcd5IWbNlPs5sWwipuVQ6k=)
                          4: skQok6BMG5hOtqlBCcPAOegtqC4.roa (hash: dqm/XgGn73MgdB3XJ08x2NWplA/p6c6Hpc/PBVbmfFs=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Apr 15 01:33:07 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=D1750D0733AA1684F4CE10B917B062CC4100D2E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:e5:21:f4:cd:32:dd:b0:8f:ac:e3:88:d9:
                    47:e2:4c:cf:5d:7a:74:c5:77:e8:83:20:c1:06:74:
                    2e:ae:69:58:ce:3c:56:74:11:ff:62:e6:71:25:55:
                    3e:05:e5:cf:47:56:3e:96:db:eb:6c:8a:f7:0c:2e:
                    80:41:ea:2a:72:97:19:e9:17:9c:31:6b:ea:9e:f0:
                    16:0a:88:ec:9d:84:22:a2:2f:a6:a1:04:dd:ad:e8:
                    a5:8d:a9:ea:49:f8:25:51:89:30:cd:51:e8:78:20:
                    fc:90:72:59:fd:a4:76:e2:26:38:50:fd:78:40:13:
                    c4:65:91:a8:d7:f8:8a:8c:b3:58:96:ee:ac:d9:d8:
                    8c:cf:6a:e3:8c:b6:50:a8:ec:d8:c3:15:05:7b:16:
                    45:ac:13:36:c7:f0:e5:af:3f:18:77:60:a9:2c:9c:
                    cd:19:a2:c2:92:c5:7c:92:b6:54:8a:98:b3:45:36:
                    f0:af:66:4c:e4:e1:9a:45:10:63:a8:60:1d:e1:63:
                    aa:9d:17:c8:4d:f3:8a:f6:0a:b5:d9:0b:e2:ee:ac:
                    f6:34:38:75:81:02:b3:7b:7a:5c:d5:21:3c:d7:5e:
                    fc:a8:4c:5c:5e:38:03:15:5a:d1:78:a5:47:aa:77:
                    38:b1:d3:37:24:cb:93:a3:fe:c5:96:ff:0b:fb:72:
                    0d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:7d:c6:da:03:f3:85:39:00:43:74:c9:33:30:d0:64:ba:
         0f:73:f4:8d:39:81:66:6d:4e:15:15:49:af:90:b4:6d:ab:fa:
         00:79:39:90:bf:6f:ab:b7:ed:16:af:75:95:da:a5:85:b1:79:
         d9:d5:1d:c9:87:ac:49:17:cd:69:83:20:be:ff:e1:fc:38:d1:
         88:d4:4b:4f:22:ca:00:93:ac:c2:50:38:e8:61:09:43:1b:50:
         23:a0:44:7d:a6:c2:03:b0:7c:a9:ab:fa:82:c5:4f:38:a3:ef:
         cd:c8:e9:7b:3a:23:84:21:a7:2e:dc:5e:8e:8f:35:a2:d2:6e:
         af:94:2b:36:f5:1a:e9:83:e5:bf:bb:83:97:35:7f:37:d1:2c:
         e5:73:13:04:8b:1d:ed:4e:96:60:41:42:0f:f6:2f:16:91:f1:
         e1:2c:3a:fe:5a:d7:8c:19:f3:d8:79:27:fd:6e:aa:b4:f4:1e:
         39:f5:91:59:2c:02:8f:40:3f:44:3b:ab:e9:e1:68:8a:b7:89:
         3c:a1:5e:b9:ec:d6:03:fa:09:9a:bb:6b:7d:bb:2c:45:57:f5:
         1a:7c:63:1e:38:f9:35:ba:f0:e5:64:c5:51:a9:77:3e:35:c9:
         9a:85:a7:29:08:f2:9b:9f:ec:6f:64:ac:82:45:20:be:7e:d0:
         1c:85:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:56 2025 by rpki-client on console.sobornost.net