Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
File:                     rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft (raw, json)
Hash identifier:          M2L4qy2iKZG3hh/n6Kq1luWkFlUEhKefmOIwfHe4tqY=
Subject key identifier:   ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
Authority key identifier: AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7
Certificate issuer:       /CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
Certificate serial:       09
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
Manifest number:          03E5
Signing time:             Mon 28 Apr 2025 20:02:58 +0000
Manifest this update:     Mon 28 Apr 2025 20:02:58 +0000
Manifest next update:     Tue 13 May 2025 20:02:58 +0000
Files and hashes:         1: Emj_BQ-1tt-bUYaMQry9iGeC0dg.roa (hash: OW1a9fJXbnd5dRA6aPAoX3XECFuiihiMUNsm3zVdQQ0=)
                          2: rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl (hash: 1obVxqCy3xrR3n7NIVtPWJwSP4Exme5OMDgns1UPCXU=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACD36E4969935C74C6F69521588816C2F3D5F4B7
        Validity
            Not Before: Apr 15 01:32:34 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=ED5BCE6391E956982A8B963C430979A1AE437821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0b:81:fd:b5:37:0f:c5:f1:1c:dc:53:fa:bc:
                    40:ed:aa:ec:51:6f:d4:be:58:85:4f:97:e0:f0:0f:
                    0d:86:1f:1d:26:a4:85:61:27:34:c8:1a:c1:80:ae:
                    cf:d9:a7:4b:06:de:9a:6f:c1:7c:bc:18:95:64:59:
                    bd:5a:48:4c:18:33:57:e2:53:7e:28:a9:c8:2d:e6:
                    f4:02:d3:7d:c6:33:9b:47:b1:c3:13:17:33:d7:45:
                    9f:0a:19:e1:0b:09:76:dd:2d:5c:aa:28:1a:bf:a2:
                    d0:fd:ab:5b:e3:b4:8d:a7:ed:99:67:bc:6d:b8:13:
                    56:33:5e:67:89:58:9a:59:c0:6e:81:50:be:81:32:
                    ee:2b:b0:94:99:11:8b:f3:e0:0c:f5:42:04:2f:87:
                    cd:df:f9:f8:85:0e:26:97:f2:c0:35:10:84:f0:30:
                    ef:90:b5:63:e2:06:ad:00:cc:55:44:ff:c2:06:b1:
                    c4:dc:0a:a8:df:f1:01:94:0d:a1:a3:01:b1:69:4c:
                    8c:47:f6:83:b9:96:54:6c:55:f1:0b:f5:fc:f8:ce:
                    a5:3c:91:62:ef:02:ab:b0:ed:0b:ca:ad:f0:1f:91:
                    35:31:c8:35:b0:b3:f8:97:18:45:8f:0c:e3:4d:d1:
                    3a:93:ba:b8:eb:9d:5c:f2:8b:3a:2f:29:54:ff:1e:
                    4a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:CE:63:91:E9:56:98:2A:8B:96:3C:43:09:79:A1:AE:43:78:21
            X509v3 Authority Key Identifier:
                keyid:AC:D3:6E:49:69:93:5C:74:C6:F6:95:21:58:88:16:C2:F3:D5:F4:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20272/rNNuSWmTXHTG9pUhWIgWwvPV9Lc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f8:45:cd:11:fd:ce:87:46:25:e1:23:75:c3:99:17:69:78:
         77:58:08:43:73:f7:45:32:f8:41:52:0b:29:01:dd:54:12:0e:
         31:91:5c:89:cf:23:ec:57:f0:45:d7:2b:78:52:dd:56:60:b9:
         e7:95:d4:0d:39:3e:73:ad:e7:b9:a9:7c:fc:9e:44:09:a9:08:
         ac:b2:cd:61:a9:8c:d9:11:b5:98:cc:3b:f2:3a:f7:3a:ba:3c:
         a3:94:8d:23:ed:1c:32:2a:42:cb:9e:b5:b6:d6:bb:50:ec:6a:
         f6:ed:1b:66:d4:61:40:1a:81:4d:18:0b:ac:71:a7:0b:79:7e:
         86:9e:ba:c9:09:27:52:18:fc:48:7a:05:08:da:73:bc:40:97:
         f6:3e:f9:34:6d:6a:59:8c:ea:f2:34:f6:f7:1c:c8:1b:8e:83:
         42:f4:61:c0:52:09:85:4a:2e:c1:be:0d:70:ce:60:ce:67:07:
         c5:81:c6:28:32:9d:93:1e:bf:6c:c8:72:71:0e:9b:7f:e7:09:
         95:26:2b:63:29:21:35:95:a7:26:db:a3:c9:7a:4d:68:09:12:
         b9:2c:04:6a:5e:ee:e9:27:43:fd:69:b1:3d:a6:2c:d4:50:ad:
         19:f4:f5:30:7d:23:77:cb:7f:be:07:91:9c:55:4e:ef:67:0a:
         ef:ec:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:14 2025 by rpki-client on console.sobornost.net