Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
File:                     YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft (raw, json)
Hash identifier:          I2TqH4GycD506Kv5nWdnUnnCpaH2Gec/qy55LULOapM=
Subject key identifier:   DA:99:A9:D5:21:29:E4:40:37:AA:D7:43:63:01:EC:E5:E8:25:01:6A
Authority key identifier: 62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3
Certificate issuer:       /CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
Certificate serial:       25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
Manifest number:          0483
Signing time:             Mon 28 Apr 2025 20:18:14 +0000
Manifest this update:     Mon 28 Apr 2025 20:18:14 +0000
Manifest next update:     Tue 13 May 2025 20:18:14 +0000
Files and hashes:         1: YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl (hash: 6ffBChC88hjvZetKCDbd3vFcNSPpJUNlbx0TGeeQHCw=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
        Validity
            Not Before: Apr 15 01:37:44 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=DA99A9D52129E44037AAD7436301ECE5E825016A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:87:04:af:a6:a7:1a:3f:59:28:0d:10:71:
                    81:9e:16:1d:ee:bc:cc:4a:6c:01:dd:4e:69:07:f7:
                    5e:1a:08:58:bb:c3:93:06:65:7c:6b:9f:b3:5d:7c:
                    46:57:4d:07:ed:55:97:10:32:e1:3b:34:76:39:be:
                    f8:74:a9:73:5f:2b:f1:f0:62:76:95:c6:fb:27:b6:
                    b6:a4:dc:d0:35:db:07:54:7d:c6:d8:0a:b7:ae:8a:
                    30:bb:a1:d0:f4:a7:22:3e:3b:dc:8a:e9:76:aa:f6:
                    0b:08:c5:c3:0b:75:c2:ee:27:96:f3:c7:1f:6b:b2:
                    dc:72:10:be:f6:d6:80:af:80:0d:4e:cf:e6:74:39:
                    a2:81:0a:05:8e:95:f1:62:5d:cf:3e:e4:9e:bc:97:
                    cf:e3:be:aa:8c:af:f7:03:b6:03:54:1d:da:d7:d8:
                    53:4d:48:2d:f0:4e:c5:e4:9b:16:06:79:5f:d8:f3:
                    ae:fb:ad:a6:f8:21:97:4f:11:25:e6:85:27:e2:1d:
                    2a:9d:25:ba:c1:ac:62:17:6c:4d:8b:b0:eb:12:d0:
                    aa:95:bf:f0:9a:70:80:bb:41:4c:ea:cd:6e:bf:8c:
                    55:d3:a7:ec:52:16:65:5f:e2:5c:70:03:5e:26:07:
                    a1:2e:7f:5f:6f:03:99:0a:36:e9:8f:2f:26:aa:01:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:99:A9:D5:21:29:E4:40:37:AA:D7:43:63:01:EC:E5:E8:25:01:6A
            X509v3 Authority Key Identifier:
                keyid:62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:e2:e7:97:b1:5b:d6:a0:d4:2b:5b:b6:ab:92:c7:8f:f3:
         e5:ff:18:09:7e:1b:e2:91:46:09:5c:14:ca:43:c5:94:e3:8a:
         9c:31:91:3b:9e:de:35:3c:f7:0c:3b:15:94:87:ee:b4:1f:78:
         ea:b6:ea:f8:55:01:1b:e0:89:f7:50:bb:69:c6:7a:1d:d6:bf:
         f5:31:a3:1e:13:c5:c6:95:90:93:9d:84:d4:0c:05:23:b2:56:
         d7:48:ca:3e:84:ad:88:4c:c4:8f:ca:13:9e:46:96:85:00:1f:
         fd:9d:bf:aa:76:c0:6b:8c:67:89:d5:e8:e2:a2:7d:ae:57:d9:
         05:2f:58:e1:37:17:95:85:a7:10:1b:3b:12:04:32:9d:27:3c:
         6e:57:bd:0c:8d:2b:48:a0:d5:7c:62:48:60:de:3d:32:91:bd:
         7b:19:0b:93:15:a5:d3:3e:35:a9:4b:d8:61:44:2e:e3:01:3f:
         78:6d:a8:2d:92:ab:be:eb:79:af:b6:b4:9e:f7:da:59:8f:b8:
         e4:0b:17:7c:ff:26:cf:b2:6f:40:87:9e:3d:ee:f6:44:1d:37:
         4f:8b:ae:d8:b8:3d:1c:a6:4a:07:fc:df:48:89:89:99:7f:01:
         c4:6b:a5:6e:12:9b:0b:0b:a7:89:69:50:5b:d7:25:79:f1:92:
         db:9b:42:c2
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MjE5
OUE0OEYxQTcxRUQxODA5MzIwQzQ3MDI4RjAyNzlDMUQ5RUUzMB4XDTI1MDQxNTAx
Mzc0NFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoREE5OUE5RDUyMTI5RTQ0
MDM3QUFENzQzNjMwMUVDRTVFODI1MDE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANNShwSvpqcaP1koDRBxgZ4WHe68zEpsAd1OaQf3XhoIWLvDkwZl
fGufs118RldNB+1VlxAy4Ts0djm++HSpc18r8fBidpXG+ye2tqTc0DXbB1R9xtgK
t66KMLuh0PSnIj473Irpdqr2CwjFwwt1wu4nlvPHH2uy3HIQvvbWgK+ADU7P5nQ5
ooEKBY6V8WJdzz7knryXz+O+qoyv9wO2A1Qd2tfYU01ILfBOxeSbFgZ5X9jzrvut
pvghl08RJeaFJ+IdKp0lusGsYhdsTYuw6xLQqpW/8JpwgLtBTOrNbr+MVdOn7FIW
ZV/iXHADXiYHoS5/X28DmQo26Y8vJqoB19ECAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBTamanVISnkQDeq10NjAezl6CUBajAfBgNVHSMEGDAWgBRiGZpI8ace0YCTIMRw
KPAnnB2e4zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjIxNy9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1d2RudU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1
d2RudU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjIxNy9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1d2RudU0ubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAcO/i55exW9ag1CtbtquSx4/z5f8YCX4b4pFGCVwUykPFlOOKnDGRO57e
NTz3DDsVlIfutB946rbq+FUBG+CJ91C7acZ6Hda/9TGjHhPFxpWQk52E1AwFI7JW
10jKPoStiEzEj8oTnkaWhQAf/Z2/qnbAa4xnidXo4qJ9rlfZBS9Y4TcXlYWnEBs7
EgQynSc8ble9DI0rSKDVfGJIYN49MpG9exkLkxWl0z41qUvYYUQu4wE/eG2oLZKr
vut5r7a0nvfaWY+45AsXfP8mz7JvQIeePe72RB03T4uu2Lg9HKZKB/zfSImJmX8B
xGulbhKbCwuniWlQW9clefGS25tCwg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:15 2025 by rpki-client on console.sobornost.net