Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
File:                     NkR8af6TQwpO9eshfECeu1tna7k.mft (raw, json)
Hash identifier:          Qs1ACEnzqXhgWySyfNBXAw1o7tWyCEjHCrqfu9Xuvrc=
Subject key identifier:   65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
Authority key identifier: 36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9
Certificate issuer:       /CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
Certificate serial:       27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
Manifest number:          04EF
Signing time:             Sun 18 May 2025 02:07:30 +0000
Manifest this update:     Sun 18 May 2025 02:07:30 +0000
Manifest next update:     Mon 02 Jun 2025 02:07:30 +0000
Files and hashes:         1: NkR8af6TQwpO9eshfECeu1tna7k.crl (hash: yc4R9XktljJElcx6Pa1wvzf/chvkwjlPYG8NP/EmXIo=)
                          2: ZbP_Zfa2mwHq82S6XSeyWX_NCCE.roa (hash: ThE65gZNrtvB6ORxoBbpvsXbWhOf17z9TZN9IB4gOGU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36447C69FE93430A4EF5EB217C409EBB5B676BB9
        Validity
            Not Before: May 15 01:34:23 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=650BE12441620DF97BEFDFB7F05D61EBBDB3DC76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5e:73:57:a6:3f:73:ca:54:d2:5f:23:96:dc:
                    b9:19:13:03:b1:1f:9c:e3:ce:83:2b:05:a6:e2:b9:
                    d8:49:6c:f1:62:ee:e6:a6:ea:8a:20:d1:09:ee:70:
                    98:4d:2f:bf:96:5f:fc:33:ca:df:4a:57:3d:59:4c:
                    89:6f:d2:bc:2d:7d:87:d5:b6:e3:48:bc:98:18:81:
                    45:df:28:82:23:d7:ff:9d:36:d6:f9:c8:64:84:fe:
                    5c:62:7d:c3:ff:f7:e1:10:40:f1:34:51:cc:cf:89:
                    74:d1:a5:98:26:62:15:15:7b:30:f8:e6:46:bc:87:
                    0d:11:a0:c2:d4:87:fa:f1:cb:ed:c3:14:15:87:bd:
                    eb:68:ce:89:d0:b7:92:95:1c:10:af:6d:ad:b4:18:
                    31:40:db:56:37:48:9e:3c:3a:cd:35:e0:3e:44:2a:
                    1e:df:50:4f:d1:8b:3b:bb:bd:7e:3c:8c:f1:ee:b1:
                    d6:e8:55:f0:f2:b1:43:a8:cb:eb:cb:18:20:67:6c:
                    bd:e4:d3:82:9f:ed:49:74:8d:ed:df:4c:55:88:2f:
                    27:44:4b:04:64:7c:40:f8:59:1b:a1:a3:54:1e:f6:
                    26:92:25:61:56:33:6b:8a:2d:3b:83:4e:4b:98:7c:
                    62:02:dc:4d:16:6a:eb:71:2f:33:b9:05:b2:26:0f:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0B:E1:24:41:62:0D:F9:7B:EF:DF:B7:F0:5D:61:EB:BD:B3:DC:76
            X509v3 Authority Key Identifier:
                keyid:36:44:7C:69:FE:93:43:0A:4E:F5:EB:21:7C:40:9E:BB:5B:67:6B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/NkR8af6TQwpO9eshfECeu1tna7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30138/NkR8af6TQwpO9eshfECeu1tna7k.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:a2:06:3b:9f:95:71:1c:61:f4:ab:8b:2e:b0:52:3a:c7:
         72:24:32:9b:19:1f:d4:41:15:1a:05:8f:75:2e:a2:79:3f:f8:
         66:64:fe:ce:83:4b:3f:c2:de:b8:43:bc:0b:b3:f3:39:43:71:
         c9:56:de:8f:da:5a:7d:e3:05:cf:f6:f3:c5:19:9f:7a:6c:ca:
         db:dd:df:ee:71:8d:d8:3c:72:ed:a5:15:f9:98:46:60:fe:b9:
         c1:0e:d4:9f:bc:d9:14:3a:b0:80:53:86:56:b9:ff:09:81:f6:
         74:d3:35:31:fc:fc:07:d2:11:08:0f:88:79:73:9d:7c:71:4a:
         83:00:a1:ec:37:39:49:a6:ff:bb:87:eb:b9:e5:86:06:5e:00:
         26:7f:3a:72:fb:54:78:48:48:d1:a9:6c:cd:f0:0c:79:e5:00:
         97:44:85:10:c7:8d:ec:d7:a1:d8:33:fc:b5:01:ce:2f:81:fc:
         8e:76:6a:c5:5c:c3:b3:84:1d:b4:d6:20:3d:9a:e1:96:66:1b:
         d5:c9:e8:1d:f5:b4:e4:f4:0a:55:84:26:96:b1:13:8d:9b:be:
         59:22:1d:45:c0:7c:98:99:73:49:ec:15:c9:3e:9a:dc:6f:80:
         54:90:0c:e0:0f:43:da:e2:11:84:89:95:96:c3:77:f4:5e:f1:
         7d:0a:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:24:52 2025 by rpki-client