Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
File:                     A2FO6cJj1BxMb07JdrGHIXyzkRI.mft (raw, json)
Hash identifier:          1WjHSB5AQUzZFW6J0n2o9DBsjieihm1xpk8krut2Q0o=
Subject key identifier:   F4:D3:19:EA:A1:42:F4:F1:0C:2E:AB:9B:59:8C:17:AA:37:68:67:C3
Authority key identifier: 03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12
Certificate issuer:       /CN=03614EE9C263D41C4C6F4EC976B187217CB39112
Certificate serial:       3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
Manifest number:          04D5
Signing time:             Mon 28 Apr 2025 20:16:34 +0000
Manifest this update:     Mon 28 Apr 2025 20:16:34 +0000
Manifest next update:     Tue 13 May 2025 20:16:34 +0000
Files and hashes:         1: A2FO6cJj1BxMb07JdrGHIXyzkRI.crl (hash: AoCe1j3vamyGDNYt5dI3pL89CXQKH0w3SfOyj4j1uUg=)
                          2: palEWz74XBOxEJ5sU61_O5pfu_8.roa (hash: Lvh+cFrwusu0QaKkuDKRrlvo86h/D2d8JyFn5u/i0ug=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03614EE9C263D41C4C6F4EC976B187217CB39112
        Validity
            Not Before: Apr 15 01:36:17 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F4D319EAA142F4F10C2EAB9B598C17AA376867C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:25:4a:77:1e:fb:26:2d:74:6b:1c:86:06:dd:
                    63:4b:6c:a2:22:e4:3d:b8:6f:44:5e:d6:dc:ce:fb:
                    00:39:87:7c:aa:52:59:36:13:1a:4c:be:1b:f0:0a:
                    6e:6d:d7:16:0b:63:63:c6:60:72:40:fa:50:3f:3f:
                    3a:5d:b7:b5:cb:b6:6b:69:dd:71:21:27:30:30:7d:
                    46:18:88:c4:6d:55:b4:39:57:63:7c:69:c7:3b:84:
                    f8:92:de:4d:06:0b:f9:47:3f:65:51:d9:96:7b:d0:
                    4d:a5:b2:ad:c8:84:20:07:19:67:c6:e9:ba:d3:0c:
                    6b:ee:b2:73:fe:91:a5:c7:32:94:f9:d6:e4:3c:27:
                    b8:7e:f9:f2:ec:1f:09:c4:3c:97:7b:a2:55:18:56:
                    51:6c:19:6f:46:2e:f0:9b:ef:5c:10:1b:c3:ea:f1:
                    ef:8b:64:d7:34:23:a6:fd:2e:9e:86:82:01:02:88:
                    9c:b3:6f:2b:a5:0b:49:ba:c1:7f:d6:81:2d:89:33:
                    5f:b0:70:e6:da:7e:3d:7d:98:d7:38:c9:4a:65:d1:
                    4c:e5:6f:a3:51:bf:c5:e7:8e:51:20:ff:a5:e9:64:
                    2d:9a:2a:48:d7:0c:b7:0d:78:3e:51:ee:41:0d:49:
                    d9:be:25:2b:b1:57:40:36:c3:dd:a1:9e:06:c0:bd:
                    00:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D3:19:EA:A1:42:F4:F1:0C:2E:AB:9B:59:8C:17:AA:37:68:67:C3
            X509v3 Authority Key Identifier:
                keyid:03:61:4E:E9:C2:63:D4:1C:4C:6F:4E:C9:76:B1:87:21:7C:B3:91:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A2FO6cJj1BxMb07JdrGHIXyzkRI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/A2FO6cJj1BxMb07JdrGHIXyzkRI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6d:9b:f7:60:46:90:ee:94:88:7a:1a:c5:0c:eb:d2:24:25:
         3d:e9:fa:9e:ed:2a:43:e8:af:9a:b3:62:e6:16:19:4f:5b:3f:
         e7:bb:21:ca:43:76:fc:2b:e2:73:c6:db:f7:29:5f:0c:ec:4f:
         58:2e:21:27:7e:dd:c8:09:39:5a:92:40:ab:42:85:a9:6c:df:
         70:ac:62:82:6d:49:8f:4f:b9:9d:e8:19:f6:5f:7e:e1:bf:35:
         bb:19:bc:fe:67:d1:79:7c:d4:2b:71:1c:10:b4:8a:d8:1a:1e:
         23:68:8f:22:d5:7b:fb:53:fc:2a:56:ab:47:31:87:d9:61:68:
         1c:d1:bf:d2:2b:e7:a7:dd:b9:1d:83:f8:c7:9a:52:6e:40:94:
         35:7d:b5:dc:c0:5e:c2:38:e2:ec:40:8a:c4:58:5a:06:57:60:
         58:e3:ab:14:55:78:38:fe:92:71:dd:09:9d:64:7b:bc:18:a5:
         d0:ef:2f:08:d3:c7:cd:b2:cc:e9:c8:70:a4:c7:29:e6:e8:9d:
         28:4b:ae:cc:82:9b:3f:4e:03:8e:68:5d:63:ba:28:ef:c9:1b:
         ac:68:23:d5:b7:32:21:bb:52:7f:ff:c9:7b:95:88:3c:ad:77:
         9b:0b:c7:0e:df:65:49:43:9a:af:1b:27:73:05:e7:26:b3:31:
         0c:d3:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:10 2025 by rpki-client on console.sobornost.net