Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
File:                     7k9xfADvQMIOGJGldGWWK9sj3ps.mft (raw, json)
Hash identifier:          uZPRRPdKN+HeIRob0R0HvvYlSxVgwC74Ze7+ORKjtGM=
Subject key identifier:   9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
Authority key identifier: EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B
Certificate issuer:       /CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
Certificate serial:       02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
Manifest number:          17
Signing time:             Sun 18 May 2025 02:20:14 +0000
Manifest this update:     Sun 18 May 2025 02:20:14 +0000
Manifest next update:     Mon 02 Jun 2025 02:20:14 +0000
Files and hashes:         1: 7k9xfADvQMIOGJGldGWWK9sj3ps.crl (hash: jhLlOTjGMywpzNm+fC1ZwqkkRQTftZ7gj8i4DrYtLFE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
        Validity
            Not Before: May 15 01:30:31 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=9A2791DC454A5B0DF7FA90175562263C323B8C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:a4:71:2d:1f:ce:a0:d6:54:25:4f:2e:dc:
                    c3:2d:73:fe:81:ff:c9:26:80:76:fc:f9:49:9b:34:
                    f1:3a:a9:16:91:96:b7:be:9b:1a:7f:41:c9:9d:25:
                    7d:39:9f:c0:90:12:9f:ac:16:74:3f:e7:05:c7:94:
                    de:82:a8:d6:b8:37:c3:89:6a:51:05:15:26:e2:2e:
                    74:34:4f:da:cb:5a:dd:5e:a2:57:0f:2f:4d:1e:d1:
                    a0:d5:c0:4a:fd:e6:6a:e8:fb:de:88:12:dc:7f:39:
                    0e:85:96:59:40:52:5c:09:89:6e:41:b7:86:20:62:
                    19:a3:71:22:8a:59:55:4e:07:9d:41:6b:64:5a:61:
                    67:03:6b:64:1b:e3:54:a8:b2:6c:08:ae:79:7c:09:
                    df:6c:8b:9a:9f:44:ce:d5:05:cc:ec:ca:bb:e9:7c:
                    7b:d2:31:3c:a5:0a:8a:01:19:de:86:26:e1:e0:be:
                    01:e0:ca:42:b7:f3:d6:c7:a7:b8:a9:b8:49:f6:db:
                    82:29:74:c8:8e:58:a9:8b:ed:fb:62:9d:d4:08:c7:
                    1e:24:2b:94:e9:55:55:73:a6:9d:9b:a1:8d:ae:d3:
                    ec:d6:b9:cc:d7:72:17:8b:b9:9d:4f:b2:2b:b6:a6:
                    c3:fc:47:e1:8f:27:71:09:ab:6d:c9:20:bb:c6:e8:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
            X509v3 Authority Key Identifier:
                keyid:EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:02:6e:22:2f:4e:ff:ac:ac:a2:89:dc:e1:5d:e3:72:95:a0:
         4e:b1:12:bc:89:5c:45:97:09:15:ab:42:47:e7:67:fa:73:df:
         f5:bf:35:ad:a1:2f:5d:b2:c4:8b:3d:0c:3c:3e:38:5f:38:af:
         cf:da:71:54:32:c9:49:56:53:7a:d9:a5:91:b9:b0:b4:fe:74:
         be:91:97:0b:5c:da:1d:c4:b8:b5:d7:c4:23:10:f3:db:1a:6e:
         fa:41:bf:fa:a8:78:78:50:32:04:b2:8e:e9:48:02:cf:6b:7c:
         b1:b9:3e:f4:ac:13:58:1f:06:57:30:67:e7:7a:58:3d:73:72:
         19:62:1a:02:d8:d2:a4:05:f8:f0:a7:d7:84:67:ba:b3:5d:43:
         ff:ef:5c:93:94:59:2b:92:1f:b7:b1:55:4b:c7:aa:9c:81:0f:
         2a:46:e2:45:d2:db:63:e4:17:b4:2c:24:1f:c5:b5:9b:5b:1c:
         ee:b9:e3:7f:1c:9e:94:b1:06:a5:04:3f:5e:5b:4f:04:12:9a:
         57:80:b0:b0:4d:74:35:01:d4:53:af:65:8b:21:7b:e6:2b:69:
         31:14:bd:f4:f5:98:92:24:72:f4:d8:5e:bf:51:31:00:79:79:
         f9:32:a8:e4:10:e9:77:47:bf:de:77:ee:fd:80:23:c2:87:a1:
         92:83:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:28:15 2025 by rpki-client