Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
File:                     pgghQ7zvUucStKW9XW5cGVN52Ro.mft (raw, json)
Hash identifier:          t0T7/smAy+fBlWhWHhfoLNb+6itLdEqm7s2v726t7Tg=
Subject key identifier:   58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Certificate issuer:       /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial:       48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
Manifest number:          0505
Signing time:             Mon 28 Apr 2025 20:16:18 +0000
Manifest this update:     Mon 28 Apr 2025 20:16:18 +0000
Manifest next update:     Tue 13 May 2025 20:16:18 +0000
Files and hashes:         1: -Oy3hbtoylygvfKGAtRnRkIYlOg.roa (hash: va4Ycs+zSzZOeMg52keuTyLLSIyqICpE2XPQLJvRRs8=)
                          2: pgghQ7zvUucStKW9XW5cGVN52Ro.crl (hash: 0SSLdp1Qag+wBkhwcBfelZdw5gEDuV85mmgbN93m0Hk=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
        Validity
            Not Before: Apr 15 01:35:39 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=5804F73CF83C642C8F639CED726829D51D803C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:bf:b6:f6:a6:14:59:a7:29:16:f3:81:63:
                    36:08:f7:33:09:a9:f0:18:37:23:37:b5:21:c5:a7:
                    0c:a4:de:36:04:57:73:76:45:57:71:11:3f:18:73:
                    75:23:df:ab:50:84:45:f2:0c:55:bc:98:39:1d:66:
                    a3:b8:2b:ae:c3:cf:8e:9f:58:5d:8e:39:15:ea:58:
                    24:da:2f:0e:cd:23:cc:3e:bc:87:c3:4a:10:b5:3b:
                    31:d5:25:8c:94:a1:1f:38:7a:6d:38:80:90:3c:27:
                    29:cb:ae:a4:35:06:25:27:76:21:09:be:8c:fe:6a:
                    a4:80:fd:1a:31:52:f2:a6:54:6b:fd:79:30:be:bd:
                    9e:5c:d4:73:27:21:f3:2e:fd:49:ab:ef:20:c4:8f:
                    a7:1d:78:51:4b:49:09:e8:32:1a:08:7c:cf:d8:70:
                    e1:a8:99:ed:ef:14:27:ce:cd:04:87:10:cb:fe:16:
                    a2:8e:4c:b5:82:4c:ca:36:ab:06:16:72:fa:0c:f1:
                    ad:88:56:0b:7b:c2:95:79:bd:7b:02:12:40:1a:b0:
                    18:ac:3e:5b:49:e2:97:07:fc:e8:6b:ee:be:54:32:
                    08:37:3c:5d:db:12:03:b6:9a:6e:57:c0:c6:f6:28:
                    ed:ac:e0:8d:a5:92:a8:db:27:43:44:6e:00:1e:0c:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
            X509v3 Authority Key Identifier:
                keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ad:b1:2a:60:78:69:ac:77:58:42:b5:2f:89:82:46:a9:6f:
         39:7e:aa:ea:92:37:47:1c:d1:d3:e7:fd:dc:3e:63:c4:fa:d4:
         a8:60:c3:8d:19:90:9e:d5:e0:ba:ce:1f:73:61:b8:82:58:26:
         79:94:b3:18:ed:98:39:e9:b3:ef:93:1c:50:df:6d:0c:ac:8c:
         51:d4:67:23:f1:b2:2b:14:7a:76:ef:be:3b:a3:95:df:ff:02:
         bd:2c:4c:72:89:a2:88:9d:9b:5a:13:19:aa:47:40:eb:26:62:
         f6:8b:09:55:d6:03:c1:13:9e:fc:42:70:6d:f3:f9:8e:a8:83:
         9e:44:9f:31:6c:f4:cd:c8:d1:63:c6:01:a5:2e:b6:81:3e:ae:
         55:33:2d:00:70:df:cc:a1:9f:e0:ab:67:13:32:7f:2b:be:44:
         40:60:cb:2a:f9:f4:bb:a3:bd:ce:1d:38:b1:22:6e:35:2c:de:
         7f:fd:05:33:72:27:0d:4c:e3:c7:cc:39:12:10:4f:95:bb:1f:
         86:af:d9:36:57:81:57:28:79:3c:f8:4f:5c:08:e6:92:02:e5:
         51:e1:b3:d1:aa:2f:2f:65:f0:7f:a9:9f:14:1c:f1:82:9d:a8:
         19:52:38:d9:96:d7:94:9c:bc:0f:20:52:a5:8a:77:24:36:f2:
         4b:27:96:55
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjA4
MjE0M0JDRUY1MkU3MTJCNEE1QkQ1RDZFNUMxOTUzNzlEOTFBMB4XDTI1MDQxNTAx
MzUzOVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNTgwNEY3M0NGODNDNjQy
QzhGNjM5Q0VENzI2ODI5RDUxRDgwM0M3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4qv7b2phRZpykW84FjNgj3Mwmp8Bg3Ize1IcWnDKTeNgRXc3ZF
V3ERPxhzdSPfq1CERfIMVbyYOR1mo7grrsPPjp9YXY45FepYJNovDs0jzD68h8NK
ELU7MdUljJShHzh6bTiAkDwnKcuupDUGJSd2IQm+jP5qpID9GjFS8qZUa/15ML69
nlzUcych8y79SavvIMSPpx14UUtJCegyGgh8z9hw4aiZ7e8UJ87NBIcQy/4Woo5M
tYJMyjarBhZy+gzxrYhWC3vClXm9ewISQBqwGKw+W0nilwf86GvuvlQyCDc8XdsS
A7aablfAxvYo7azgjaWSqNsnQ0RuAB4MEE0CAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBRYBPc8+DxkLI9jnO1yaCnVHYA8dTAfBgNVHSMEGDAWgBSmCCFDvO9S5xK0pb1d
blwZU3nZGjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxNi9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dWTjUyUm8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dW
TjUyUm8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjcxNi9wZ2doUTd6dlV1Y1N0S1c5WFc1Y0dWTjUyUm8ubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEASK2xKmB4aax3WEK1L4mCRqlvOX6q6pI3RxzR0+f93D5jxPrUqGDDjRmQ
ntXgus4fc2G4glgmeZSzGO2YOemz75McUN9tDKyMUdRnI/GyKxR6du++O6OV3/8C
vSxMcomiiJ2bWhMZqkdA6yZi9osJVdYDwROe/EJwbfP5jqiDnkSfMWz0zcjRY8YB
pS62gT6uVTMtAHDfzKGf4KtnEzJ/K75EQGDLKvn0u6O9zh04sSJuNSzef/0FM3In
DUzjx8w5EhBPlbsfhq/ZNleBVyh5PPhPXAjmkgLlUeGz0aovL2Xwf6mfFBzxgp2o
GVI42ZbXlJy8DyBSpYp3JDbySyeWVQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:19 2025 by rpki-client on console.sobornost.net