Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
File:                     FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft (raw, json)
Hash identifier:          aAlqfCYKSwXXC4GO7v0muGkpk0VRKQhC2Xmi4UKI80k=
Subject key identifier:   C7:73:81:B2:0D:31:62:4D:07:B2:5B:87:85:A9:58:F3:91:A9:FA:7A
Authority key identifier: 14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82
Certificate issuer:       /CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
Manifest number:          019D
Signing time:             Sun 18 May 2025 02:28:21 +0000
Manifest this update:     Sun 18 May 2025 02:28:21 +0000
Manifest next update:     Mon 02 Jun 2025 02:28:21 +0000
Files and hashes:         1: DgDKCG3ePf5gsklz245ibQDkhgk.roa (hash: ad3/kFuQ3Mdl3T1nM415+/Dr5KL43HWHojsdnNCX1tQ=)
                          2: FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl (hash: Qva75DC9LbTcNpZ4n82bYVeKjYjsHr+zCLuxg+zWXTk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147EB332823E1C1329DCE74AE8ED7D260CA8FD82
        Validity
            Not Before: May 15 01:30:09 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=C77381B20D31624D07B25B8785A958F391A9FA7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:e9:10:ca:34:0d:1f:a4:71:8b:e6:6f:5a:
                    0a:b3:38:1c:87:4e:fe:41:26:59:ef:6b:c7:8f:01:
                    de:d9:ea:75:2d:35:2b:a8:ae:7a:96:5e:05:bc:42:
                    dc:be:4c:9e:fc:7f:cf:44:f0:2b:c0:d0:2e:14:21:
                    a9:32:a4:6b:bb:39:e2:b5:09:06:fb:fd:f2:b3:57:
                    f8:51:2f:4b:dd:4c:62:d1:11:0f:e1:cf:38:89:02:
                    93:d7:1a:2a:fa:b3:bc:dc:07:56:af:55:88:f5:9f:
                    32:9d:91:34:3b:dc:3d:35:57:18:85:09:40:bb:c1:
                    9c:97:99:c3:f9:94:2b:90:d9:69:84:38:1b:ce:2b:
                    b8:84:4d:53:c2:78:6a:1a:c8:da:75:30:8f:b9:05:
                    23:c0:5b:da:51:36:9f:4d:51:36:18:62:04:99:2d:
                    a2:59:6f:ae:6a:5a:54:04:12:73:1b:14:e8:e0:91:
                    b1:2f:73:eb:46:a0:16:74:d4:f0:2d:d3:3b:00:ff:
                    a8:85:45:0c:56:21:8b:8b:c6:d6:44:17:c7:18:23:
                    98:b3:8d:42:a4:6b:7b:5b:ba:98:a3:0f:61:1a:29:
                    60:ba:c2:e0:fb:bc:28:20:60:f2:ba:e4:65:86:b9:
                    e8:17:6a:95:06:db:7b:82:e2:58:02:2d:e3:04:17:
                    49:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:73:81:B2:0D:31:62:4D:07:B2:5B:87:85:A9:58:F3:91:A9:FA:7A
            X509v3 Authority Key Identifier:
                keyid:14:7E:B3:32:82:3E:1C:13:29:DC:E7:4A:E8:ED:7D:26:0C:A8:FD:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FH6zMoI-HBMp3OdK6O19Jgyo_YI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30440/FH6zMoI-HBMp3OdK6O19Jgyo_YI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d4:c7:65:18:f2:50:22:c5:47:31:e7:6f:db:e2:6f:7d:bf:
         bd:b1:23:e2:6f:8c:7a:11:88:34:c5:4b:7a:c5:90:66:06:28:
         14:0a:b1:28:fb:a4:94:76:b7:63:f7:75:cc:71:ed:e8:08:79:
         23:4e:e8:02:74:fb:10:c4:d8:e9:5a:e6:0e:75:d2:20:4f:fd:
         d9:c1:1d:ec:74:ed:7c:32:90:45:3e:89:2a:bd:4a:ba:a1:a0:
         c2:2c:f0:1f:e3:fe:19:e9:83:00:f9:b3:42:0a:f9:73:cb:22:
         33:86:6b:dc:68:1a:25:b3:89:fd:7e:aa:ae:c5:4e:0f:30:29:
         50:c6:ef:37:28:c3:d9:da:cb:fb:a2:4d:11:bc:62:d8:4c:ab:
         49:d2:b0:a6:ec:0c:63:ed:29:89:7e:f8:20:8f:44:dd:00:ba:
         67:47:61:24:30:be:46:cc:9b:6b:4b:66:0a:df:e5:dc:96:ce:
         2e:d7:ed:a4:10:de:e6:22:a3:02:4b:aa:86:b6:ec:fb:2b:39:
         75:81:2f:74:a0:1e:cc:8d:91:20:c3:00:b2:59:6c:c8:ea:14:
         aa:f5:ee:94:07:96:1a:ec:09:02:dc:02:00:f5:46:16:ca:f3:
         9a:5b:1b:31:e4:ed:fd:fd:20:9d:bd:95:6d:f8:cd:78:33:c4:
         4e:4e:ef:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 21:43:55 2025 by rpki-client