Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
File:                     7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft (raw, json)
Hash identifier:          KrVMADjX5G8JJCYv1jm2c2dle7UPa0xWMjwnH0NppaA=
Subject key identifier:   2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
Authority key identifier: EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76
Certificate issuer:       /CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
Manifest number:          044A
Signing time:             Mon 28 Apr 2025 20:00:47 +0000
Manifest this update:     Mon 28 Apr 2025 20:00:47 +0000
Manifest next update:     Tue 13 May 2025 20:00:47 +0000
Files and hashes:         1: 7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl (hash: SkJtJjBJ7XSa1/62xgOhtJysLhnjU6w7ir78Wp1rzCE=)
                          2: 8UFYffDjKxClLWcJR16pt9dZqZg.roa (hash: H2zS+0uBqv8G0V3/iM1B+v9OKY0Hd8KO/eW6OT2h17k=)
                          3: 9_fL4NSUlJHj0OEg9QVbq6mpnHQ.roa (hash: mbvS9dyY1F/Ee11tlu/FPHLdQqX9wspE28b+b7rTQ+s=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE749AEDB27453827DBA8325F42984FA79C3CF76
        Validity
            Not Before: Apr 15 01:30:30 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=2A59330303DE16FE6523A526B03C8F0915B697BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:4a:5a:51:9c:d6:a4:8d:a4:75:f6:a1:38:
                    e0:b6:0e:0a:ce:9a:87:aa:b6:d1:65:d7:1c:71:da:
                    bf:f7:68:15:db:43:35:17:2c:0d:ae:06:97:7c:e1:
                    2f:6b:9f:c0:20:d5:2c:4e:5f:51:e6:f1:d2:93:aa:
                    6a:6e:f1:95:2f:4b:e3:7b:ee:7d:73:d2:55:86:39:
                    c0:c5:a7:91:21:aa:a7:c2:bc:05:27:43:d5:31:99:
                    52:47:21:34:ec:ea:d1:83:7b:55:18:eb:36:f6:d0:
                    fb:55:0c:ff:d4:f9:e2:ac:9b:2f:08:ee:f9:90:db:
                    f3:c9:d5:e3:9e:f7:3d:c5:b9:c4:0a:d3:18:fb:1d:
                    52:fe:59:6d:39:42:e9:33:9a:ce:7c:59:bc:1a:f5:
                    a5:a8:17:7a:5c:0f:49:fe:0f:61:33:73:34:85:9e:
                    c7:1b:40:d7:de:30:31:e1:32:17:02:a0:31:d4:ba:
                    ff:2c:84:1e:15:58:e5:23:54:27:b9:b0:61:a1:85:
                    55:f5:36:87:61:66:1e:5c:1c:72:f0:36:a3:cf:cf:
                    b4:5b:ec:1e:b2:00:bf:ef:a5:16:1b:a8:39:4e:0f:
                    21:c5:c5:8c:74:51:0c:b6:3d:31:c0:69:96:17:ef:
                    2e:50:43:d3:11:2f:8c:ef:d1:38:54:e8:41:87:97:
                    7d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:59:33:03:03:DE:16:FE:65:23:A5:26:B0:3C:8F:09:15:B6:97:BC
            X509v3 Authority Key Identifier:
                keyid:EE:74:9A:ED:B2:74:53:82:7D:BA:83:25:F4:29:84:FA:79:C3:CF:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/7nSa7bJ0U4J9uoMl9CmE-nnDz3Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:bc:a9:8d:5f:03:4e:7d:6e:8f:82:7f:3d:48:d8:ac:e5:93:
         87:26:dc:93:e9:e3:b2:37:92:92:87:06:80:74:99:a6:c9:c0:
         f4:f2:10:56:89:76:ea:ac:82:7e:d9:df:7b:2e:22:0c:a8:39:
         cc:5e:28:10:ba:13:f8:52:5d:f9:12:95:b4:d2:51:9a:78:05:
         f2:2f:74:f8:6e:76:c4:c6:1d:ae:4a:f0:32:fb:a0:fd:f8:52:
         d1:89:ef:d0:aa:d4:f0:0c:f8:bf:38:7e:73:b9:25:28:5f:c4:
         ad:6f:fb:93:04:7e:bc:7a:52:5a:ce:5e:8e:77:64:53:27:fb:
         66:e0:0e:96:46:c9:c7:a3:11:88:27:61:fd:d9:76:c4:63:24:
         80:2e:12:9e:42:85:91:4a:e8:3a:02:b0:89:b4:c6:a8:f0:8c:
         0b:06:b2:20:83:da:7c:d0:75:cd:98:f0:15:7e:be:37:50:3c:
         d3:27:52:7b:46:61:38:68:13:de:52:35:aa:19:9a:9a:4b:3f:
         21:6b:7c:8e:66:f2:f3:b9:03:b4:ff:10:ef:90:0d:aa:1b:ca:
         67:43:24:30:2a:0b:b4:e4:a3:a2:21:da:f6:35:d4:b3:80:6c:
         8b:cc:ef:97:09:56:de:63:6f:78:c8:58:20:23:bc:6e:f9:48:
         4d:ba:14:47
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTc0
OUFFREIyNzQ1MzgyN0RCQTgzMjVGNDI5ODRGQTc5QzNDRjc2MB4XDTI1MDQxNTAx
MzAzMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMkE1OTMzMDMwM0RFMTZG
RTY1MjNBNTI2QjAzQzhGMDkxNUI2OTdCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALr7SlpRnNakjaR19qE44LYOCs6ah6q20WXXHHHav/doFdtDNRcs
Da4Gl3zhL2ufwCDVLE5fUebx0pOqam7xlS9L43vufXPSVYY5wMWnkSGqp8K8BSdD
1TGZUkchNOzq0YN7VRjrNvbQ+1UM/9T54qybLwju+ZDb88nV4573PcW5xArTGPsd
Uv5ZbTlC6TOaznxZvBr1pagXelwPSf4PYTNzNIWexxtA194wMeEyFwKgMdS6/yyE
HhVY5SNUJ7mwYaGFVfU2h2FmHlwccvA2o8/PtFvsHrIAv++lFhuoOU4PIcXFjHRR
DLY9McBplhfvLlBD0xEvjO/ROFToQYeXfU0CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQqWTMDA94W/mUjpSawPI8JFbaXvDAfBgNVHSMEGDAWgBTudJrtsnRTgn26gyX0
KYT6ecPPdjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDQvN25TYTdiSjBVNEo5dW9NbDlDbUUtbm5EejNZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN25TYTdiSjBVNEo5dW9NbDlDbUUt
bm5EejNZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQ0LzduU2E3YkowVTRKOXVvTWw5Q21FLW5uRHozWS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9vKmNXwNOfW6Pgn89SNis5ZOHJtyT6eOyN5KShwaAdJmmycD08hBW
iXbqrIJ+2d97LiIMqDnMXigQuhP4Ul35EpW00lGaeAXyL3T4bnbExh2uSvAy+6D9
+FLRie/QqtTwDPi/OH5zuSUoX8Stb/uTBH68elJazl6Od2RTJ/tm4A6WRsnHoxGI
J2H92XbEYySALhKeQoWRSug6ArCJtMao8IwLBrIgg9p80HXNmPAVfr43UDzTJ1J7
RmE4aBPeUjWqGZqaSz8ha3yOZvLzuQO0/xDvkA2qG8pnQyQwKgu05KOiIdr2NdSz
gGyLzO+XCVbeY294yFggI7xu+UhNuhRH
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:08 2025 by rpki-client on console.sobornost.net