Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
File:                     yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft (raw, json)
Hash identifier:          YqjZ0KF9qTTUqirZWvs26Z+ncH7zvRh3p7qeC3Jwrpg=
Subject key identifier:   0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA
Authority key identifier: C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D
Certificate issuer:       /CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
Certificate serial:       71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
Manifest number:          04EC
Signing time:             Mon 28 Apr 2025 20:20:22 +0000
Manifest this update:     Mon 28 Apr 2025 20:20:22 +0000
Manifest next update:     Tue 13 May 2025 20:20:22 +0000
Files and hashes:         1: 8Xm0Jp2w2Ajpb7-CYtMkbKoQAGw.roa (hash: zkAR/GLI6h8h63GVwbnKc90Ms7k0IC7g6WRp6F1AKnc=)
                          2: AGcxO0lq5DrjNC3YZiScytnEZnU.roa (hash: onpAVGfcuQg6/0KgDEDOjNm6tZmiFyAAD0MgbzlHMTM=)
                          3: Aa7ADv5NnF-wFnUb0JyymbNLqIM.roa (hash: KyumNROWSCbOqbLjdIZ8a6PNguWiZY5XDLI9Xe+U9jk=)
                          4: Qk-8LXBxbyBKRswe-o58EuzcsGE.roa (hash: TAKnW/t11wqj05KwTF72H2pPh6xtFcZVGca2ssy0Xxk=)
                          5: TA885idtPaG59BQ_WUr09acjxQk.roa (hash: wBrMEAugROY/eHd1gtogu1/8/2nFno4hbtPF67qpmJA=)
                          6: fZ94c28iDuI7MGsBoS6iCHh8ar8.roa (hash: Ro0NMQ39dZoY3uOSd+Pfpt6CFsVPP+YEGQHuhbqlvyU=)
                          7: oxwkvyF-4aGyN47HD7vjo1WvGog.roa (hash: xzsz30TlGDRpSl/mm8+Ikvtn+OdzwPkp4DRZaFnWlbI=)
                          8: pgibcTE6ePDqOW_5FyvpcNckS7k.roa (hash: wsoEnCIf7Uxe2yTHchZ5bX/N49GZpkYcZQZLOd+ymRM=)
                          9: sLwprKkFCHJNkFAsgYGNxO3TcVQ.roa (hash: FWcDl5euUnC8yVXfMAz++TVzl4gT3/pufZoeHU8SPZc=)
                          10: w2oz8CwzliUFZUBhLMZgjo7qp9Y.roa (hash: 9OSt33kZbVD7ilqYKMOujs9aoc5Q34yp9D02jiJpcF8=)
                          11: yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl (hash: c9Mh1TVhllQKn+01nrg9Rl5HfZxiIyf3H2NRgqeLQn4=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C814D85BD48360A65D9D4144EC6D20752C1EDC7D
        Validity
            Not Before: Apr 15 01:36:06 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=0D397B1E745D6DF46E3B8ECDFE54C93F66DD53EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d1:5c:88:61:a5:35:ad:2d:b1:ad:46:dc:9e:
                    ea:07:f0:d8:12:ab:1f:79:83:85:cd:88:dc:8e:a9:
                    1d:bd:2d:53:48:06:a9:f2:0a:07:2d:6a:a1:32:d7:
                    93:38:be:1a:eb:c9:46:19:9f:c9:53:4d:ae:be:8b:
                    14:7f:72:11:79:bc:7a:f7:ff:5c:50:e4:55:f2:77:
                    29:83:eb:7b:c7:73:91:15:9e:23:69:d7:b9:49:fa:
                    b7:1b:8f:d8:e8:56:61:c1:09:b3:cc:8c:35:72:3c:
                    6b:fa:c3:40:60:9b:75:b6:62:66:60:f1:07:03:e3:
                    5b:ea:3b:bf:e5:fc:e3:0b:f9:a1:52:80:c8:8d:a4:
                    e6:24:bb:77:15:fa:9e:1f:42:89:46:65:32:54:6c:
                    7f:08:1c:e7:fa:fc:0c:15:ae:52:c9:7e:a3:41:42:
                    40:af:9a:b8:f1:65:66:2f:1a:c3:d8:d0:0d:3e:04:
                    f3:70:a9:55:e0:25:c3:9d:46:46:89:8f:43:21:d8:
                    1a:4c:74:de:fc:fd:82:fd:13:76:96:da:bf:fb:a1:
                    fa:a9:40:46:f2:1d:be:4e:0d:cc:c1:3f:9d:09:63:
                    27:cd:6d:11:f8:de:e6:d8:48:1a:90:42:57:04:74:
                    35:fe:e1:a2:b7:a2:f4:fc:d1:0f:5d:65:f6:ce:16:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:7B:1E:74:5D:6D:F4:6E:3B:8E:CD:FE:54:C9:3F:66:DD:53:EA
            X509v3 Authority Key Identifier:
                keyid:C8:14:D8:5B:D4:83:60:A6:5D:9D:41:44:EC:6D:20:75:2C:1E:DC:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yBTYW9SDYKZdnUFE7G0gdSwe3H0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/573/yBTYW9SDYKZdnUFE7G0gdSwe3H0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:bb:e9:87:e0:07:1c:05:0f:94:e3:60:eb:5d:2b:bb:b3:
         44:45:e4:1a:f3:49:92:79:a1:bb:ed:59:58:2c:37:10:5a:f2:
         e1:27:76:81:1e:ec:05:41:6c:e1:7f:6e:b9:ff:1b:b5:7d:d3:
         6c:94:95:75:eb:8c:2f:aa:4b:b0:a9:19:6f:8d:25:ec:78:a1:
         d8:ea:e8:36:83:bf:47:b4:e7:99:b9:5a:d1:33:f4:f6:f6:75:
         f0:4d:ab:e4:c0:93:00:59:53:c4:0e:5a:6f:8f:9e:72:53:f1:
         c1:14:8b:aa:77:79:5c:7b:c0:e2:e0:b4:0c:51:d4:c1:ec:dd:
         b4:34:cc:e9:1e:6a:19:3f:0e:39:f4:cd:dd:e9:d6:35:d0:7b:
         3e:f8:41:e5:c8:b8:a3:1d:6f:7d:bc:4d:db:13:e4:ad:a8:37:
         94:d3:10:a8:a8:35:d3:99:18:b6:b4:36:20:df:6c:41:83:7b:
         d0:d7:54:49:63:24:3a:39:7d:a9:4a:4d:8a:37:46:3c:dd:2d:
         ed:53:7b:17:11:60:92:ae:a0:2b:94:c3:2e:53:03:8e:43:f5:
         1c:ba:e5:52:a6:43:fa:e2:8c:29:00:72:4d:df:c4:22:b7:95:
         eb:50:ff:3d:97:97:43:74:3b:26:32:fd:ca:4b:e3:29:1b:ce:
         d1:48:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:47 2025 by rpki-client on console.sobornost.net