Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
File:                     O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft (raw, json)
Hash identifier:          FH9ShCrxEz6dfJB+ryTfO886QLjOoy/EyZLuBRdkdeU=
Subject key identifier:   F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92
Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56
Certificate issuer:       /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
Certificate serial:       43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
Manifest number:          067A
Signing time:             Fri 04 Jul 2025 13:43:49 +0000
Manifest this update:     Fri 04 Jul 2025 13:43:49 +0000
Manifest next update:     Sat 19 Jul 2025 13:43:49 +0000
Files and hashes:         1: O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl (hash: Fs9mWsyBGG5tnIZNqp/iWvrSF+tXV5RT+MP8hoHV3sk=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756
        Validity
            Not Before: Jun 15 01:34:02 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=F06E8776EA62B8CDC8ACBF65C489B34409454092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:06:82:42:ba:96:33:b0:9b:38:82:fb:3b:e2:
                    7e:27:a4:65:5a:0a:63:af:f2:4b:54:e0:53:ac:20:
                    5c:af:a0:49:c7:41:fb:59:70:13:f3:9c:59:e6:f6:
                    fe:2a:1b:28:c6:2c:20:61:09:3b:9d:80:6b:f7:50:
                    91:83:55:0a:22:bc:54:49:13:c5:b3:ef:36:7b:5f:
                    57:6c:41:71:ad:6b:b3:92:a9:87:99:16:a7:a2:4e:
                    b7:42:64:5b:e5:9f:bb:94:f9:39:89:d4:df:b9:e1:
                    fd:eb:79:6f:e6:8d:86:f4:ad:d9:81:c7:9a:ef:e7:
                    45:6b:96:e3:ad:77:f7:59:3d:56:54:28:e0:72:b5:
                    9e:b2:4c:75:16:03:60:1b:99:24:81:e0:69:93:e8:
                    64:6a:3c:c7:96:fe:19:9c:e1:31:96:c6:62:2e:9d:
                    e7:f2:96:b5:f7:db:4e:c9:7c:43:3f:cc:2a:52:c2:
                    8c:01:17:a2:a4:b0:3d:f3:15:89:6e:71:3d:11:0c:
                    7e:7f:8b:5b:71:51:f4:03:55:31:1c:8c:4f:78:c9:
                    87:6c:3c:ab:8e:83:bf:55:46:56:c1:df:02:11:60:
                    df:c6:17:2d:9a:d1:01:59:7d:ab:e8:0a:2b:fb:bd:
                    54:ec:1a:3c:1b:30:0f:e3:13:11:a8:56:8c:d5:dd:
                    b7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92
            X509v3 Authority Key Identifier:
                keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:1a:a6:f4:b4:81:13:a7:b7:68:bf:33:f1:18:bc:34:86:
         f7:c0:9f:4e:c6:5e:78:4b:ef:d5:2a:00:86:42:85:00:e6:0a:
         7b:1e:23:d4:e8:e1:17:d6:85:e6:32:11:64:d6:44:25:2e:f7:
         0d:cd:5f:79:80:0f:12:61:f7:cf:e1:bd:7d:de:77:f3:c9:8b:
         7c:85:a6:8c:57:d6:b1:a3:7b:3c:a3:d6:65:f4:78:6d:74:9b:
         76:24:95:2f:48:71:81:e9:aa:1e:47:46:fa:80:6f:be:d5:24:
         04:12:40:c6:cd:81:e1:1b:87:b1:46:11:1e:f3:93:26:1e:69:
         af:8b:72:2b:37:8f:b9:11:78:f9:86:67:81:62:cc:7a:a7:8d:
         5d:57:90:17:7c:5b:64:96:dc:a5:32:ab:c1:57:f1:c0:4f:45:
         96:10:74:a7:07:08:92:42:ab:ff:76:eb:07:f8:80:57:e8:05:
         43:c4:01:41:5f:8a:74:ef:e4:ef:6f:c3:d2:bf:3f:95:c2:78:
         43:1d:9b:8e:ca:df:e3:e1:93:d0:29:82:6a:31:56:61:9e:93:
         25:87:b5:59:f6:60:2b:d6:db:f8:c7:3b:72:28:c1:63:af:c7:
         b6:39:3a:a4:2a:5f:17:c0:c9:90:73:d7:a3:85:91:a0:f3:ed:
         a1:5f:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:00:56 2025 by rpki-client