Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
File:                     jVezuNsxhZi2b03WYYyxmghWX_0.mft (raw, json)
Hash identifier:          g724JrXfqdq3kyp8oNf7SLSBjEDmwRsOxxOjy7cMQT0=
Subject key identifier:   AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
Authority key identifier: 8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD
Certificate issuer:       /CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
Certificate serial:       2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
Manifest number:          04DD
Signing time:             Thu 15 May 2025 01:34:32 +0000
Manifest this update:     Thu 15 May 2025 01:34:32 +0000
Manifest next update:     Fri 30 May 2025 01:34:32 +0000
Files and hashes:         1: LUSUrcqqOkY5Yr1a4qVLiPcWjEM.roa (hash: XRkyGpOHJUA5ShPrOxFFKDXmZrUhdl7h+5YR/70BD4k=)
                          2: jVezuNsxhZi2b03WYYyxmghWX_0.crl (hash: AT9gfp8nZ+k1KzYiaiE18ljo2uivqvPAIF5EfmcH/j8=)
                          3: sgJETk3keJ3pOizZKU4YP90fO8k.roa (hash: kmzZDvB/9f0dBbwnLQQ19JkDE9LPf90HpHpz17CiRKs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 09:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D57B3B8DB318598B66F4DD6618CB19A08565FFD
        Validity
            Not Before: May 15 01:34:32 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=AD6EADF148C8851D6A71D73A70FB2013037772E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:1c:e7:d1:ed:95:c2:02:0e:18:6d:c9:c0:
                    b6:07:f7:70:c5:22:fc:5c:b8:aa:b2:f7:92:a2:aa:
                    b9:d9:5a:86:c7:09:fd:3a:c0:0f:0e:d6:50:8e:2d:
                    13:6a:42:68:35:5b:95:75:0f:77:60:df:d6:95:cf:
                    1e:2c:6c:56:a9:2a:74:d6:b2:92:61:5d:c2:1c:87:
                    4b:45:4d:b6:95:60:46:da:fc:1b:96:ce:2a:4b:69:
                    f0:42:de:ea:1b:4f:f3:f3:af:88:3c:2f:f8:97:1d:
                    79:f3:1a:02:c6:40:ed:39:37:2b:97:85:83:fb:15:
                    64:bd:14:01:ec:19:a7:04:7b:62:fb:fb:2a:71:68:
                    8a:7d:08:06:fa:ac:41:71:a3:12:de:44:ab:1f:17:
                    d0:02:57:2f:af:31:d6:33:6f:d7:de:9b:97:7e:06:
                    29:01:7c:01:43:63:8d:66:ca:70:39:cc:68:6c:72:
                    07:3c:77:ba:74:c4:e4:4a:79:2e:6e:6d:87:6c:8f:
                    2b:4f:38:45:d1:df:c8:5f:ca:88:47:d0:0b:b9:ad:
                    be:98:2c:31:1e:79:74:a0:15:eb:51:e0:f1:c0:4b:
                    98:04:d7:b7:a0:4a:9d:fc:6a:17:ae:22:ef:f8:12:
                    48:44:2e:3f:c2:26:c9:a0:b5:50:aa:92:5e:1b:7e:
                    51:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:AD:F1:48:C8:85:1D:6A:71:D7:3A:70:FB:20:13:03:77:72:E6
            X509v3 Authority Key Identifier:
                keyid:8D:57:B3:B8:DB:31:85:98:B6:6F:4D:D6:61:8C:B1:9A:08:56:5F:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jVezuNsxhZi2b03WYYyxmghWX_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20199/jVezuNsxhZi2b03WYYyxmghWX_0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:64:3d:ba:fc:7c:28:42:2b:63:80:2a:b9:91:75:37:5f:c9:
         da:76:49:c8:19:01:fd:34:31:f7:a3:91:37:18:af:71:25:a0:
         f1:51:22:66:15:94:ce:55:86:1b:85:7a:2f:cd:c7:b1:ec:30:
         59:57:00:7b:c4:5f:b8:3f:e3:c3:85:a8:ef:ec:60:df:a5:76:
         8e:3b:50:c0:17:44:d2:19:77:bd:e1:b8:e2:c5:27:7d:33:05:
         19:8c:dd:0d:00:f7:93:31:87:2d:d8:a4:f2:3f:7a:69:95:2b:
         7a:c6:d9:10:6d:31:8a:58:bc:13:9e:0e:07:dc:15:fa:ef:4f:
         77:e0:12:e7:85:44:7f:04:0a:f1:de:a6:01:53:53:d0:4c:1a:
         ef:42:ca:d3:8f:4b:4c:e6:5d:e2:2d:fe:de:1a:49:49:11:21:
         dd:3a:20:8b:2c:fc:45:8f:e1:98:ec:25:b6:4f:c2:db:b7:2e:
         6f:10:c0:bc:be:b3:8c:b8:38:f3:0a:a2:d9:ee:84:bc:cc:87:
         b6:c8:55:b3:88:be:dd:73:f4:16:0c:dd:a5:ba:c9:f9:2e:f6:
         f6:51:a7:36:45:ce:14:65:80:38:c6:22:24:7c:b7:e8:b1:6d:
         99:5c:de:28:83:bd:d0:10:6e:c8:4a:21:0e:a0:d9:d3:90:80:
         d0:c8:dc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 12:01:29 2025 by rpki-client