Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
File:                     NpZu7Bk79ap-O4kiglX9RfOnwqo.mft (raw, json)
Hash identifier:          vQwad1tEkAgDQW3FWj/RbeT62nIOtU7Z6NfdcsPJI/U=
Subject key identifier:   38:29:EF:3C:82:11:D1:EB:DD:08:C9:A3:3E:10:9D:C8:DE:03:11:90
Authority key identifier: 36:96:6E:EC:19:3B:F5:AA:7E:3B:89:22:82:55:FD:45:F3:A7:C2:AA
Certificate issuer:       /CN=36966EEC193BF5AA7E3B89228255FD45F3A7C2AA
Certificate serial:       42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
Manifest number:          050D
Signing time:             Mon 28 Apr 2025 20:16:14 +0000
Manifest this update:     Mon 28 Apr 2025 20:16:14 +0000
Manifest next update:     Tue 13 May 2025 20:16:14 +0000
Files and hashes:         1: NpZu7Bk79ap-O4kiglX9RfOnwqo.crl (hash: 3kzysxpjzmbf731ISdIWUXFAVjEzUvKz3G2lnx7FTv0=)

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36966EEC193BF5AA7E3B89228255FD45F3A7C2AA
        Validity
            Not Before: Apr 15 01:35:30 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=3829EF3C8211D1EBDD08C9A33E109DC8DE031190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:df:5a:6b:90:90:62:3e:71:ca:be:7d:bf:8d:
                    d0:2b:0c:56:50:94:b9:b4:bb:62:fd:d9:56:76:68:
                    2d:75:47:40:1b:01:c7:66:3b:81:3e:c7:eb:a6:be:
                    c4:2b:bd:8c:b3:4d:9f:bc:a0:48:d6:c9:02:41:9e:
                    69:ee:26:d8:5c:ba:26:00:4f:75:c7:59:4e:c8:cd:
                    fd:24:92:fc:3b:a0:b7:ec:3b:a7:5c:5a:14:90:30:
                    26:17:35:64:00:a8:d0:74:3e:c4:fb:53:73:b3:53:
                    8c:9b:b1:81:de:57:fd:57:60:d4:a2:83:50:06:e0:
                    3e:a9:48:b3:df:5d:34:fd:9a:4e:9d:a7:a7:f5:1c:
                    8f:fb:66:50:6c:a7:54:3b:e6:92:09:67:1c:54:63:
                    14:2d:bf:c1:36:01:d6:f7:9f:4e:6e:a8:0e:22:c4:
                    f9:da:44:d5:2f:7a:79:35:d5:10:49:57:ae:0c:20:
                    2a:e5:3a:f5:9f:9b:c2:0d:e3:aa:b4:36:52:1b:48:
                    56:03:b4:10:83:f6:12:7e:8a:e8:b8:42:6b:24:10:
                    ce:fd:53:9b:7f:8b:9f:21:24:03:da:07:dc:63:54:
                    a3:00:ee:04:5d:40:fd:54:a4:69:f0:55:49:27:70:
                    07:7e:54:7d:70:0e:23:10:ed:56:74:f5:b3:29:40:
                    12:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:29:EF:3C:82:11:D1:EB:DD:08:C9:A3:3E:10:9D:C8:DE:03:11:90
            X509v3 Authority Key Identifier:
                keyid:36:96:6E:EC:19:3B:F5:AA:7E:3B:89:22:82:55:FD:45:F3:A7:C2:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NpZu7Bk79ap-O4kiglX9RfOnwqo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/632/NpZu7Bk79ap-O4kiglX9RfOnwqo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:09:d8:9e:c1:8e:72:6f:41:12:f2:29:b8:b1:d8:4a:5b:
         86:ca:36:49:5b:35:cd:12:b6:af:2c:e1:3e:96:0e:dd:91:43:
         01:7b:0c:4f:2b:13:40:9b:3d:c0:17:23:7b:8c:85:32:96:88:
         95:17:50:17:73:c6:52:2c:8a:0a:18:c7:45:1f:83:fb:3a:8c:
         17:68:2a:39:01:40:6d:1a:0c:3d:47:0c:53:b1:0c:c5:c7:41:
         fa:40:52:85:24:b9:47:59:55:d3:a5:64:7a:60:09:54:6d:f3:
         9a:66:44:4e:84:ef:3a:07:4f:14:23:39:14:ca:ec:f3:4d:82:
         99:07:c9:cf:b8:2a:15:75:27:94:ba:9f:59:f1:08:ee:40:88:
         10:7a:ad:cb:d7:32:48:f2:cc:51:91:bd:23:1b:ef:f1:5a:64:
         16:3e:6b:8b:a7:1a:de:6c:54:29:0f:19:b3:03:14:d6:78:a6:
         1e:33:d3:3c:d1:40:5e:9f:bf:f1:5b:85:f6:17:1d:0a:02:d6:
         44:b6:b7:41:98:aa:92:18:f9:69:41:95:db:80:77:d8:84:1f:
         49:bd:62:f1:d0:8f:91:83:10:06:d1:90:ae:b4:48:83:34:c2:
         f9:49:7f:5f:bf:d9:83:53:c6:6c:38:64:ba:11:3b:a1:cb:b3:
         df:d0:78:79
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNjk2
NkVFQzE5M0JGNUFBN0UzQjg5MjI4MjU1RkQ0NUYzQTdDMkFBMB4XDTI1MDQxNTAx
MzUzMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMzgyOUVGM0M4MjExRDFF
QkREMDhDOUEzM0UxMDlEQzhERTAzMTE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/fWmuQkGI+ccq+fb+N0CsMVlCUubS7Yv3ZVnZoLXVHQBsBx2Y7
gT7H66a+xCu9jLNNn7ygSNbJAkGeae4m2Fy6JgBPdcdZTsjN/SSS/Dugt+w7p1xa
FJAwJhc1ZACo0HQ+xPtTc7NTjJuxgd5X/Vdg1KKDUAbgPqlIs99dNP2aTp2np/Uc
j/tmUGynVDvmkglnHFRjFC2/wTYB1vefTm6oDiLE+dpE1S96eTXVEElXrgwgKuU6
9Z+bwg3jqrQ2UhtIVgO0EIP2En6K6LhCayQQzv1Tm3+LnyEkA9oH3GNUowDuBF1A
/VSkafBVSSdwB35UfXAOIxDtVnT1sylAEsECAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ4Ke88ghHR690IyaM+EJ3I3gMRkDAfBgNVHSMEGDAWgBQ2lm7sGTv1qn47iSKC
Vf1F86fCqjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjMyL05wWnU3Qms3OWFwLU80a2lnbFg5UmZPbndxby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL05wWnU3Qms3OWFwLU80a2lnbFg5UmZP
bndxby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MzIvTnBadTdCazc5YXAtTzRraWdsWDlSZk9ud3FvLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAEQcCdiewY5yb0ES8im4sdhKW4bKNklbNc0Stq8s4T6WDt2RQwF7DE8rE0Cb
PcAXI3uMhTKWiJUXUBdzxlIsigoYx0Ufg/s6jBdoKjkBQG0aDD1HDFOxDMXHQfpA
UoUkuUdZVdOlZHpgCVRt85pmRE6E7zoHTxQjORTK7PNNgpkHyc+4KhV1J5S6n1nx
CO5AiBB6rcvXMkjyzFGRvSMb7/FaZBY+a4unGt5sVCkPGbMDFNZ4ph4z0zzRQF6f
v/FbhfYXHQoC1kS2t0GYqpIY+WlBlduAd9iEH0m9YvHQj5GDEAbRkK60SIM0wvlJ
f1+/2YNTxmw4ZLoRO6HLs9/QeHk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:52:49 2025 by rpki-client on console.sobornost.net