Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/52/eU5wHWbxsR9_0siWW1die7oYqsQ.mft
File:                     eU5wHWbxsR9_0siWW1die7oYqsQ.mft (raw, json)
Hash identifier:          7WFfGX7dzcXpkmNcLDDY+bHjMam+hsgZYWcc0/ceENU=
Subject key identifier:   F8:79:BF:66:84:47:E1:3D:1C:96:D6:C6:62:16:69:FC:BE:FF:80:55
Authority key identifier: 79:4E:70:1D:66:F1:B1:1F:7F:D2:C8:96:5B:57:62:7B:BA:18:AA:C4
Certificate issuer:       /CN=794E701D66F1B11F7FD2C8965B57627BBA18AAC4
Certificate serial:       1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eU5wHWbxsR9_0siWW1die7oYqsQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/52/eU5wHWbxsR9_0siWW1die7oYqsQ.mft
Manifest number:          0451
Signing time:             Mon 28 Apr 2025 19:42:29 +0000
Manifest this update:     Mon 28 Apr 2025 19:42:29 +0000
Manifest next update:     Tue 13 May 2025 19:42:29 +0000
Files and hashes:         1: eU5wHWbxsR9_0siWW1die7oYqsQ.crl (hash: SuJp+214LmCLwcCU8svtOd0+fUQ3gnfCriRKLNrmlDE=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/52/eU5wHWbxsR9_0siWW1die7oYqsQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/52/eU5wHWbxsR9_0siWW1die7oYqsQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eU5wHWbxsR9_0siWW1die7oYqsQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794E701D66F1B11F7FD2C8965B57627BBA18AAC4
        Validity
            Not Before: Apr 15 01:30:08 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=F879BF668447E13D1C96D6C6621669FCBEFF8055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e5:e4:97:31:88:12:28:8c:86:38:df:cc:d8:
                    94:11:c8:bd:33:63:8d:ef:82:f4:39:54:69:0e:5b:
                    07:35:74:ac:d3:c6:b0:35:69:3a:00:68:91:84:bd:
                    1c:9f:35:23:7b:02:48:02:03:f0:9d:8b:8f:14:8c:
                    da:11:86:05:49:0a:3a:95:49:ea:fb:e9:0f:29:d4:
                    f9:c0:e9:e3:8c:d1:7c:57:10:80:ef:40:09:68:9d:
                    e2:f0:25:21:38:3b:d8:fd:07:a8:5b:d4:99:8d:1f:
                    c4:8b:81:f9:e4:af:fc:9d:55:0d:35:78:3c:53:39:
                    92:e9:64:1a:83:fd:d6:1a:ee:9c:63:0a:f4:96:27:
                    60:f3:a5:61:95:f7:c9:80:23:6a:b5:11:50:df:5f:
                    9b:b2:5d:d1:8e:0f:5d:79:91:64:9f:14:2b:54:b2:
                    3a:6e:38:c3:5d:9e:03:5a:85:72:11:8f:5a:7e:21:
                    fd:e9:ac:57:eb:2f:d8:bd:d2:cb:7f:1d:72:a7:03:
                    89:9b:4b:62:f1:0a:b7:aa:b4:47:d2:45:b2:b1:65:
                    b4:e4:d8:1b:82:5f:8c:4b:64:9e:1f:ab:72:65:34:
                    94:0f:2a:79:44:e6:0f:04:e0:1b:dc:1f:5a:e3:25:
                    98:62:19:fd:a4:ca:ea:53:0b:1e:4f:9e:c9:86:08:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:79:BF:66:84:47:E1:3D:1C:96:D6:C6:62:16:69:FC:BE:FF:80:55
            X509v3 Authority Key Identifier:
                keyid:79:4E:70:1D:66:F1:B1:1F:7F:D2:C8:96:5B:57:62:7B:BA:18:AA:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/52/eU5wHWbxsR9_0siWW1die7oYqsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eU5wHWbxsR9_0siWW1die7oYqsQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/52/eU5wHWbxsR9_0siWW1die7oYqsQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6d:d8:0f:e1:c6:91:3a:6f:26:a1:bc:51:5d:da:1e:3f:8b:
         3a:45:47:fb:9e:ce:78:e9:ac:41:82:14:df:e7:4a:62:a5:70:
         4f:fc:e6:45:1f:f4:f5:c9:05:fe:7a:ae:8a:2e:f9:8b:49:bc:
         f6:24:0c:05:4f:30:d9:f0:76:fa:6f:b4:19:b6:c9:84:62:27:
         4e:b3:b3:48:87:0a:eb:b9:a9:e9:79:a8:eb:0b:3a:0c:e8:c4:
         66:71:61:53:b1:6c:06:32:fd:e7:14:9e:a4:de:12:55:ca:12:
         c5:3a:b9:d9:d8:c9:24:75:97:d0:6a:35:05:c9:c7:60:07:c0:
         31:0a:ad:65:34:75:ff:12:0f:08:01:6c:91:b5:04:fb:24:89:
         cc:ed:45:30:11:a2:92:9b:59:40:73:8a:c9:54:3b:4c:53:1e:
         e5:e3:10:3c:e7:8e:20:35:d5:a0:24:42:89:5e:e1:d5:ae:c1:
         85:11:44:d2:d1:58:fe:53:45:9b:ef:05:5c:6a:e0:bb:4f:94:
         ab:41:6d:1b:77:bf:e5:d7:8b:0c:05:ce:38:89:d4:1a:15:24:
         ff:ce:d9:7b:8b:73:09:12:65:d2:8a:fe:a0:42:94:b0:97:fe:
         88:cb:96:08:5c:56:3b:e4:d8:c8:d7:a3:fa:19:f5:63:2e:86:
         85:af:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:42 2025 by rpki-client on console.sobornost.net