Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
File:                     RsHMLWUoO-OBBxn16hqHkDA6Ink.mft (raw, json)
Hash identifier:          MXeeG1sm4zFI+IwLyl/cqVyCtLc0nPAD8rigdRPk04E=
Subject key identifier:   ED:31:59:CE:9B:5C:FA:CF:0F:C5:DC:F7:0D:BB:BB:73:06:CF:24:B9
Authority key identifier: 46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79
Certificate issuer:       /CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
Certificate serial:       1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
Manifest number:          0437
Signing time:             Mon 28 Apr 2025 20:13:23 +0000
Manifest this update:     Mon 28 Apr 2025 20:13:23 +0000
Manifest next update:     Tue 13 May 2025 20:13:23 +0000
Files and hashes:         1: HbbxFcGk6epDKfPJZ5m9QY1alNw.roa (hash: lKlh3F0/3yMbKs4okc363/DhZtNEQG231y/MjgGzjms=)
                          2: P0F-ckXxBE3CebHxI3EQhfXGVdc.roa (hash: LC9xjF7IZHi/dvHNstdhrypDnCfBR2i3nPQ1quLP0CE=)
                          3: RsHMLWUoO-OBBxn16hqHkDA6Ink.crl (hash: c4Zlm8yDX1i1jSieymcJfiZ5dSj7zwXf2GgFiTLVRs8=)
                          4: kli7G8D_2RNIBStyXSbXW8Z0zxo.roa (hash: J1zdt+NW/EjOb9UzfmJwbcSO18RsKklhwYzwL30UmM0=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46C1CC2D65283BE3810719F5EA1A8790303A2279
        Validity
            Not Before: Apr 15 01:31:09 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ED3159CE9B5CFACF0FC5DCF70DBBBB7306CF24B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:64:0f:20:84:01:50:a1:be:7d:e4:09:b7:
                    88:e5:00:b2:b2:ee:01:b2:4c:ef:98:f1:d4:f5:73:
                    5a:c0:14:75:b2:33:c0:41:47:5e:8f:16:6a:2f:73:
                    18:c9:74:d6:8d:23:c0:7d:67:aa:e6:26:1d:22:d3:
                    72:d2:89:49:5d:33:17:4c:d3:72:71:db:0d:5b:03:
                    1d:48:a3:9f:77:ee:a0:93:81:f5:48:82:da:92:cf:
                    d6:e3:65:4f:d5:1d:83:02:0a:82:eb:42:f9:9d:19:
                    ce:44:b8:51:91:89:8c:36:e3:76:59:5a:c6:34:31:
                    d8:8e:94:c7:a2:34:48:7b:fa:a4:44:77:5e:41:8b:
                    0a:cf:64:0a:70:9b:37:0b:d6:a7:96:29:75:3a:49:
                    1a:06:b5:fa:5c:61:1e:12:8f:9d:35:f9:4a:13:b3:
                    f0:34:e5:67:02:ff:98:b0:b1:96:e9:7a:5e:51:a9:
                    89:99:a2:57:5e:6f:fa:7d:ca:6d:fb:3e:63:35:ff:
                    51:e0:eb:43:24:65:0c:8c:02:c5:85:1e:13:4a:86:
                    ce:06:b6:b7:4e:80:82:35:9e:e4:9c:0d:94:e9:5c:
                    71:52:b6:f7:6a:83:c5:0e:c0:ba:11:92:18:45:d8:
                    5a:49:98:fb:6e:f5:8d:ba:67:2f:8e:18:b7:b8:28:
                    df:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:59:CE:9B:5C:FA:CF:0F:C5:DC:F7:0D:BB:BB:73:06:CF:24:B9
            X509v3 Authority Key Identifier:
                keyid:46:C1:CC:2D:65:28:3B:E3:81:07:19:F5:EA:1A:87:90:30:3A:22:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RsHMLWUoO-OBBxn16hqHkDA6Ink.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20252/RsHMLWUoO-OBBxn16hqHkDA6Ink.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:59:9f:bd:0e:72:07:14:06:e5:5c:0c:c1:02:42:82:72:a6:
         90:90:aa:22:0e:af:3d:4a:20:e8:a9:0c:cd:93:76:b4:da:38:
         07:8a:58:c6:45:01:d8:05:9b:9d:08:bf:db:98:3a:e4:2e:de:
         37:dd:56:37:f5:e4:2f:c7:44:c1:0d:78:6f:6a:a9:dc:eb:06:
         9b:28:be:f3:de:92:0b:55:40:85:32:cc:49:a1:b1:56:78:ef:
         4c:41:1a:a7:48:19:b8:46:19:95:ec:4c:11:5d:2d:38:28:c7:
         32:6b:f1:89:92:04:5d:0d:64:b5:03:88:39:10:42:f1:7f:84:
         24:42:81:f2:b9:29:02:03:d0:82:e6:04:91:06:b4:14:04:65:
         20:7c:5d:28:83:3f:bf:48:a5:0e:1a:6d:98:e2:1c:6e:0b:6e:
         17:e0:46:3d:58:f1:c3:04:f1:de:f6:86:69:5f:02:45:7c:0b:
         ca:a7:2f:5c:e4:9b:b9:97:51:35:07:43:5a:c7:55:f6:c9:5f:
         ce:e1:76:d5:94:b3:f9:41:23:ed:b2:8b:41:3b:83:90:d0:1b:
         21:1d:f4:c4:37:b8:2c:fa:19:35:6f:2a:5f:ce:97:b8:a4:f9:
         33:38:5c:52:ec:b0:79:bc:60:68:71:cf:80:1f:8c:d9:9d:0e:
         10:6d:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:14 2025 by rpki-client on console.sobornost.net