Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
File:                     UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft (raw, json)
Hash identifier:          +K4uInSMDytqfqTM2YedWCYCtT2HJKAldV9IYxucRAY=
Subject key identifier:   9F:26:8B:DF:9C:C0:28:39:80:EF:B7:FC:B4:A0:87:3B:C2:27:BE:87
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
Manifest number:          0434
Signing time:             Mon 28 Apr 2025 20:13:19 +0000
Manifest this update:     Mon 28 Apr 2025 20:13:19 +0000
Manifest next update:     Tue 13 May 2025 20:13:19 +0000
Files and hashes:         1: 6tx6GVPeY3i2kxydHb9RKzsFxD0.roa (hash: 8InLVB7vQhX3PORRG+hwlLKbL80DZGp4ZhTl9k06Oww=)
                          2: 8PCQLS1nHEqNn3kPSFfA7GZi_6A.roa (hash: GkDM0QvgbZNRpVUeRhwuwVQTLi3qvgkZyfQbynPT9/U=)
                          3: UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl (hash: x70mtPVxG+fBStz/lHRj4yENfepI8T9X8RgBXYPgG58=)
                          4: fsiQHMp5R5UHsR7YREP78jfQ3r4.roa (hash: Xh8BPBc1Cih4VA3hw0AwKPw0TVjhJlB8iFGBWtV3/r8=)
                          5: o6oqpOHB_2PDg7OFzgpcOA39H0Y.roa (hash: 9heYQ0YQH6ZCKh8pS5lBT2WlNryA/fjHs6z2U1yK3G4=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Apr 15 01:31:02 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=9F268BDF9CC0283980EFB7FCB4A0873BC227BE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:f4:c8:c7:73:47:05:3c:51:c3:8e:71:09:
                    92:72:72:ed:ff:87:83:93:06:42:c2:95:24:a2:5b:
                    9a:1e:71:c1:52:8e:0e:68:e2:8a:38:3c:37:91:0f:
                    54:a8:6f:ac:c5:c1:c0:5c:42:2d:7e:d6:75:6f:9f:
                    cf:a8:72:73:ad:0e:61:70:f8:29:85:f4:df:a3:96:
                    40:a1:e6:a5:30:db:a5:da:14:13:ce:38:16:44:7e:
                    f1:9b:8e:b9:8f:a3:ef:e7:3a:f0:bd:dd:ff:c1:e6:
                    0c:37:7b:4d:8d:bd:f3:89:c2:05:c3:b6:d2:6f:5a:
                    65:79:28:52:72:c4:9d:88:c0:d4:80:2e:a3:73:53:
                    3a:52:16:a1:56:04:21:b8:8a:f1:8c:59:63:6f:ba:
                    20:ee:19:4f:dd:76:13:e5:db:ef:f2:e8:fb:cc:5f:
                    0c:51:1e:1d:b3:8a:11:7b:74:67:f1:09:52:d5:a9:
                    80:ea:10:7e:67:f5:c6:95:ab:5d:02:49:be:30:dd:
                    40:d9:77:9e:4f:5d:81:17:9e:f1:7d:31:44:7d:af:
                    af:13:7e:dc:af:d0:de:6a:a2:3e:08:59:fa:8d:a8:
                    66:51:0a:85:73:1c:a9:52:21:66:67:2d:cb:ed:ec:
                    4e:df:3b:ef:b0:34:d9:5e:5b:bf:91:ea:61:46:50:
                    64:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:8B:DF:9C:C0:28:39:80:EF:B7:FC:B4:A0:87:3B:C2:27:BE:87
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d0:bb:9d:34:4a:61:c1:cd:0d:45:9c:e8:be:3d:e0:96:40:
         a6:73:ae:58:c3:02:5d:8d:45:75:a0:55:17:11:82:d6:45:43:
         2c:1f:69:ab:42:4e:00:19:43:16:7a:92:f8:28:78:87:bc:0d:
         7b:a0:44:fc:d9:6e:3b:e0:92:3b:92:17:5b:16:15:34:dd:b3:
         6c:66:06:b2:b6:81:db:be:3c:29:44:87:41:a1:28:31:2c:40:
         bd:92:93:c3:4f:60:15:08:35:c9:fa:be:4b:36:20:da:30:21:
         e7:7c:7e:01:a6:26:d0:55:3c:73:b5:55:6a:e3:c7:1b:cf:c1:
         08:37:51:28:6e:c7:ac:73:9c:c9:92:2f:85:78:c6:c6:91:ad:
         06:36:c2:62:e9:ab:c5:de:f4:88:ef:2f:10:40:67:92:f6:15:
         f8:1f:33:5a:55:50:b1:1f:8a:b0:6e:9d:11:87:a7:c6:10:6e:
         f2:f7:fb:31:be:ec:02:26:79:e1:ad:9c:da:79:45:bc:ea:82:
         21:fc:1a:b6:01:67:2f:00:ae:55:eb:6d:10:bb:8f:47:d8:b5:
         9d:ac:34:5e:a1:4d:61:23:d8:11:82:8c:b7:05:70:8a:9b:8d:
         2f:a3:d8:f6:4b:ee:3f:12:b2:7a:ed:a2:34:f8:be:bd:4d:f3:
         cc:09:5b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:51:23 2025 by rpki-client on console.sobornost.net