Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
File:                     6ESHjyExP90FqcNFb_9ImIXcqmU.mft (raw, json)
Hash identifier:          7wd6QdhindxBiuAlZR/FjiJTR9kBWWYjR6S4DVJ3LeU=
Subject key identifier:   AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
Authority key identifier: E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65
Certificate issuer:       /CN=E844878F21313FDD05A9C3456FFF489885DCAA65
Certificate serial:       14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
Manifest number:          04A2
Signing time:             Sun 18 May 2025 22:33:57 +0000
Manifest this update:     Sun 18 May 2025 22:33:57 +0000
Manifest next update:     Mon 02 Jun 2025 22:33:57 +0000
Files and hashes:         1: 6ESHjyExP90FqcNFb_9ImIXcqmU.crl (hash: NO23lIcBYs0Zo2EYYIl36hfc6H/tEyfNgnWB0+ut2Tk=)
                          2: j5NlJ0VrmIclkfgLd_-j51w1G20.roa (hash: WdXn0L7OLssxTE5Ao/XuguozaQUV9PsHEr8f8RZDhKA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 22:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E844878F21313FDD05A9C3456FFF489885DCAA65
        Validity
            Not Before: May 15 01:43:04 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=AE2F860913AE68A889E4537453BF9E0CE2F53C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:80:a7:3d:3d:f5:9e:99:b0:98:7c:15:2c:
                    a1:11:4b:6b:bd:9a:f2:d8:08:68:81:78:7a:74:f4:
                    9b:82:91:0d:98:8b:8b:ce:89:61:91:46:a7:59:45:
                    5d:d3:bb:37:0a:aa:03:19:f7:82:e0:da:8d:89:2c:
                    d0:69:4b:81:98:21:8c:d4:a8:c3:ac:f7:1f:df:13:
                    23:63:06:67:61:81:2a:61:d9:f2:e0:c9:aa:f3:3e:
                    76:b0:48:1c:0a:12:cb:d8:e3:3d:c2:81:1a:13:1b:
                    4c:3e:b3:e3:89:d4:e6:95:35:86:59:92:64:69:f4:
                    02:3d:5b:ae:36:52:ba:a8:12:36:dc:22:f1:17:17:
                    54:fd:94:13:a7:e7:6c:22:78:90:10:37:77:c1:29:
                    93:e8:0c:e5:84:84:15:72:63:79:e3:8a:25:8d:70:
                    80:b1:ec:e7:d5:14:e6:28:3c:c9:3e:23:6e:3f:cf:
                    3f:eb:88:9f:0c:76:3c:86:2e:07:b7:97:1b:c5:d1:
                    d5:b2:85:d3:81:ec:75:b7:04:a5:a2:98:58:4b:0c:
                    8b:26:99:77:37:89:f0:8e:be:77:3f:50:8e:3e:53:
                    d8:5d:e4:7c:71:d3:ac:84:c0:24:6d:f5:67:ed:b5:
                    9a:f6:08:6d:b2:d9:28:b8:ec:b0:1c:5e:21:ce:f2:
                    7e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2F:86:09:13:AE:68:A8:89:E4:53:74:53:BF:9E:0C:E2:F5:3C:58
            X509v3 Authority Key Identifier:
                keyid:E8:44:87:8F:21:31:3F:DD:05:A9:C3:45:6F:FF:48:98:85:DC:AA:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6ESHjyExP90FqcNFb_9ImIXcqmU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30403/6ESHjyExP90FqcNFb_9ImIXcqmU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:93:46:28:c9:88:29:2b:60:e2:72:7d:59:2a:9f:a1:4e:
         30:37:b6:f5:29:14:ad:16:81:2a:c0:d9:08:8c:5f:bd:b3:28:
         26:92:ee:7f:3d:04:ab:73:2e:86:e7:50:b4:62:36:f8:f8:aa:
         86:24:5f:39:53:50:cd:c6:ca:b6:fb:a3:ce:35:a6:70:b7:31:
         94:1e:ec:00:dd:6f:1c:56:8b:a0:d9:9a:4c:06:95:09:e0:02:
         89:b2:27:27:f3:18:fe:12:a8:67:50:5d:80:70:e0:40:3d:05:
         b5:48:47:ae:44:93:88:aa:7f:ed:ed:a1:1d:75:e6:ce:5c:82:
         54:f8:c1:30:0e:6c:9e:1f:aa:10:9e:b3:72:66:a2:a5:00:59:
         db:ef:08:cc:ff:96:f8:8e:3a:89:2b:95:ff:1f:6f:8c:59:34:
         1c:49:bf:fa:e9:0d:a6:1e:5a:f8:05:4c:45:84:a2:a1:d2:76:
         d5:05:c5:91:51:57:18:bf:45:87:6a:9d:aa:4a:35:15:fa:a9:
         65:2f:35:76:0c:8a:c7:0a:37:9b:03:e5:0e:68:62:19:fc:96:
         bf:e3:d7:4f:ae:fc:9a:b2:bc:a8:3f:78:25:9c:45:98:75:4e:
         72:65:94:c6:cb:08:9b:33:97:61:ee:1f:b7:81:a2:e4:ec:60:
         19:8f:96:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 01:29:40 2025 by rpki-client