Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
File:                     SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft (raw, json)
Hash identifier:          tkDRZtKNcG6veb2TspuigCOH7ZxRJVdf9EVVPqUtEMQ=
Subject key identifier:   A4:8C:4A:74:F0:E7:7A:CD:21:3B:10:DC:AB:4C:39:C3:5D:72:4C:97
Authority key identifier: 48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F
Certificate issuer:       /CN=48CD162824C1F863871899267CC160280776531F
Certificate serial:       3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
Manifest number:          04D5
Signing time:             Mon 28 Apr 2025 20:16:34 +0000
Manifest this update:     Mon 28 Apr 2025 20:16:34 +0000
Manifest next update:     Tue 13 May 2025 20:16:34 +0000
Files and hashes:         1: SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl (hash: xP9SkPe65KkAwfqC86Z2J5DvE39bVR+rSshu/QAPQCA=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CD162824C1F863871899267CC160280776531F
        Validity
            Not Before: Apr 15 01:36:17 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=A48C4A74F0E77ACD213B10DCAB4C39C35D724C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:be:a3:c4:e1:55:4a:db:1c:a5:4c:7a:c3:
                    2d:70:18:c2:1b:1c:98:59:f0:d5:19:44:f7:ad:4e:
                    3c:9d:18:26:8e:82:95:d0:32:16:2a:1d:69:f4:eb:
                    a3:9b:34:8d:ca:96:ff:27:17:4a:50:e5:82:8c:fa:
                    2a:d2:36:29:fa:28:3e:bf:ad:c9:7f:73:26:99:81:
                    d1:1d:36:6b:0f:13:4c:b8:b1:9b:1e:db:47:0b:f6:
                    ec:84:d6:3a:79:18:b8:a0:bb:9b:12:2d:0a:cd:fc:
                    f4:3d:de:17:cf:e2:58:b0:da:98:55:69:f5:c9:73:
                    e1:2e:fc:d9:bc:80:ab:a1:41:c4:50:2d:6a:4e:d7:
                    7f:7d:2c:1d:ed:87:e3:9d:e5:88:4e:6b:65:93:a0:
                    4c:01:9f:4d:a9:79:8c:ef:87:98:1d:a2:3f:84:c6:
                    bf:34:b3:6f:d0:e3:e7:c9:c4:47:3f:00:5e:ca:d8:
                    cf:b9:46:bc:ff:42:1f:e3:f2:15:00:d7:48:e9:da:
                    2b:5e:23:db:a1:8b:5b:d0:e4:83:85:f9:ec:bc:29:
                    4f:d6:73:ab:ae:87:20:99:fb:bb:20:43:51:7f:e3:
                    13:5f:d2:5f:66:6c:79:26:d0:4e:0e:35:af:8b:6d:
                    4c:50:f1:1c:6c:1f:84:ec:32:ea:64:1b:cf:e4:1e:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:8C:4A:74:F0:E7:7A:CD:21:3B:10:DC:AB:4C:39:C3:5D:72:4C:97
            X509v3 Authority Key Identifier:
                keyid:48:CD:16:28:24:C1:F8:63:87:18:99:26:7C:C1:60:28:07:76:53:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20088/SM0WKCTB-GOHGJkmfMFgKAd2Ux8.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:cb:ad:d8:f8:69:cb:59:8c:fd:2e:aa:30:f1:6d:ea:53:
         a9:3c:03:a1:2a:9b:ca:21:ec:7e:32:fd:29:08:c3:a7:22:65:
         a3:15:9d:92:c9:08:58:d8:d7:f7:37:c6:33:ae:f6:16:47:c0:
         84:b5:84:a2:e4:66:24:b4:e9:67:99:d3:fb:59:8e:fb:7e:b0:
         a2:bd:17:22:b4:f8:dc:cc:bc:fb:00:3e:91:dc:a2:e1:ef:a8:
         b2:e0:86:da:24:a3:3d:f2:e8:37:f1:b5:76:db:50:74:b3:ca:
         96:cb:24:17:77:c4:f9:bb:f7:0d:69:7a:a5:33:87:37:17:bc:
         7e:91:6a:88:7b:d5:eb:e9:c1:f7:66:03:ed:fa:c6:c2:82:0e:
         bc:9a:8c:88:1f:f1:18:8d:a1:60:b9:c8:56:80:a3:e9:f4:95:
         11:c1:77:57:84:74:2a:15:32:98:bd:17:bd:5c:2b:38:52:ae:
         04:fe:5f:cf:98:44:0b:15:0d:71:d7:ec:e2:49:8d:dc:1c:dc:
         52:dd:e3:e9:41:f3:57:6d:5a:ff:4f:57:c5:ff:19:6f:25:98:
         36:3e:b4:37:e9:fe:65:e4:43:9f:d5:4e:1f:b5:0b:f9:b4:99:
         be:3e:1b:f4:5b:98:c2:bd:ff:0e:de:4f:cf:a1:89:30:54:e5:
         96:e8:ba:40
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBPDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0OENE
MTYyODI0QzFGODYzODcxODk5MjY3Q0MxNjAyODA3NzY1MzFGMB4XDTI1MDQxNTAx
MzYxN1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQTQ4QzRBNzRGMEU3N0FD
RDIxM0IxMERDQUI0QzM5QzM1RDcyNEM5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfvvqPE4VVK2xylTHrDLXAYwhscmFnw1RlE961OPJ0YJo6CldAy
FiodafTro5s0jcqW/ycXSlDlgoz6KtI2KfooPr+tyX9zJpmB0R02aw8TTLixmx7b
Rwv27ITWOnkYuKC7mxItCs389D3eF8/iWLDamFVp9clz4S782byAq6FBxFAtak7X
f30sHe2H453liE5rZZOgTAGfTal5jO+HmB2iP4TGvzSzb9Dj58nERz8AXsrYz7lG
vP9CH+PyFQDXSOnaK14j26GLW9Dkg4X57LwpT9Zzq66HIJn7uyBDUX/jE1/SX2Zs
eSbQTg41r4ttTFDxHGwfhOwy6mQbz+QeZlUCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBSkjEp08Od6zSE7ENyrTDnDXXJMlzAfBgNVHSMEGDAWgBRIzRYoJMH4Y4cYmSZ8
wWAoB3ZTHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODgvU00wV0tDVEItR09IR0prbWZNRmdLQWQyVXg4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvU00wV0tDVEItR09IR0prbWZNRmdL
QWQyVXg4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDg4L1NNMFdLQ1RCLUdPSEdKa21mTUZnS0FkMlV4OC5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC3nsut2Phpy1mM/S6qMPFt6lOpPAOhKpvKIex+Mv0pCMOnImWjFZ2S
yQhY2Nf3N8YzrvYWR8CEtYSi5GYktOlnmdP7WY77frCivRcitPjczLz7AD6R3KLh
76iy4IbaJKM98ug38bV221B0s8qWyyQXd8T5u/cNaXqlM4c3F7x+kWqIe9Xr6cH3
ZgPt+sbCgg68moyIH/EYjaFguchWgKPp9JURwXdXhHQqFTKYvRe9XCs4Uq4E/l/P
mEQLFQ1x1+ziSY3cHNxS3ePpQfNXbVr/T1fF/xlvJZg2PrQ36f5l5EOf1U4ftQv5
tJm+Phv0W5jCvf8O3k/PoYkwVOWW6LpA
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:10 2025 by rpki-client on console.sobornost.net