Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
File:                     P1xSJCKPmDVrLOk5xuoGASJR-jo.mft (raw, json)
Hash identifier:          /NyFaIzI5+oBCnTy2oOfHyfsoOZqqXc1oEJ2xt8ML2s=
Subject key identifier:   52:74:94:45:76:3C:7A:2D:16:93:64:56:74:1E:9B:73:2F:D6:F2:07
Authority key identifier: 3F:5C:52:24:22:8F:98:35:6B:2C:E9:39:C6:EA:06:01:22:51:FA:3A
Certificate issuer:       /CN=3F5C5224228F98356B2CE939C6EA06012251FA3A
Certificate serial:       0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
Manifest number:          0520
Signing time:             Fri 04 Jul 2025 11:27:20 +0000
Manifest this update:     Fri 04 Jul 2025 11:27:20 +0000
Manifest next update:     Sat 19 Jul 2025 11:27:20 +0000
Files and hashes:         1: P1xSJCKPmDVrLOk5xuoGASJR-jo.crl (hash: vfz0rznH5Q++GUw/UCtbM4Zi1UGHxJUohFcLohPUFuU=)
                          2: qVOSvWIr4rCjB0xKLCBAqxLIEfA.roa (hash: iWmxhiB51l2Qp7yLH36gU1BIzktgcyPyMj6AHtiI0FE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F5C5224228F98356B2CE939C6EA06012251FA3A
        Validity
            Not Before: Jun 15 01:37:15 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=52749445763C7A2D16936456741E9B732FD6F207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:aa:df:14:8e:24:43:6f:d9:6a:b6:36:22:
                    a1:d7:15:76:ac:4e:d6:07:e7:7d:97:4c:ad:e4:1c:
                    a1:62:70:ff:65:f2:8c:8d:48:45:b2:c6:30:90:ba:
                    f9:47:01:7a:c1:c5:b0:8f:0b:61:ed:1d:39:22:19:
                    06:0f:15:bf:9b:9a:bf:b2:22:a5:f9:a7:67:e2:4e:
                    7b:5f:da:2e:47:38:a2:e3:ce:dc:de:23:50:ef:d9:
                    86:45:67:22:af:14:b9:9a:a0:a1:2c:88:73:a1:42:
                    17:01:86:fc:5c:78:62:12:7c:e3:7f:28:dc:35:36:
                    88:a5:7e:c2:5b:d1:b7:57:b7:c5:b1:bb:fe:d6:3b:
                    8a:29:fc:2f:c9:7b:25:98:d6:c1:50:1e:a2:92:31:
                    7e:66:a4:dc:b8:04:65:82:90:de:95:96:67:56:ca:
                    9c:3e:c3:55:d0:11:30:5a:fb:7e:55:70:56:20:ba:
                    f1:d6:e9:f0:17:2f:94:23:2e:a4:26:f8:03:3d:b9:
                    08:b9:c8:af:f6:e8:6a:6a:c1:f4:02:1b:53:df:07:
                    c2:74:aa:74:0e:b6:44:1e:ad:84:40:23:60:08:d5:
                    89:53:c8:cc:f4:b2:08:c6:c7:0a:3d:9b:e1:0e:31:
                    a5:b4:f5:ce:4c:af:31:12:c8:e0:67:24:e8:18:c8:
                    1a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:74:94:45:76:3C:7A:2D:16:93:64:56:74:1E:9B:73:2F:D6:F2:07
            X509v3 Authority Key Identifier:
                keyid:3F:5C:52:24:22:8F:98:35:6B:2C:E9:39:C6:EA:06:01:22:51:FA:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P1xSJCKPmDVrLOk5xuoGASJR-jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39058/P1xSJCKPmDVrLOk5xuoGASJR-jo.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0b:74:98:69:b7:b4:15:60:89:ca:77:33:95:3c:47:21:30:
         53:f0:27:f4:35:7b:a4:19:4e:15:a9:06:7f:75:77:2d:28:71:
         7d:b8:8f:81:a5:38:df:f3:30:ab:5e:e9:a9:2c:74:38:b7:e2:
         6f:21:ac:f9:f5:de:a1:f7:dc:fa:29:ed:f5:c6:08:f0:07:1a:
         17:d7:7e:01:89:f7:49:d2:b8:90:b3:eb:fc:f7:d1:ae:4c:91:
         a9:80:55:6d:28:b9:ce:9c:12:38:b3:a9:49:3c:8f:25:c8:b7:
         ed:ce:0f:c6:e9:ac:60:bc:d9:5d:a0:b7:a0:2a:1e:9c:68:90:
         b4:8d:5f:06:da:2a:65:90:c8:a8:40:c3:21:24:d1:1a:3b:3a:
         95:8f:c0:5d:a4:76:43:ba:a5:59:5e:67:98:cc:c3:fb:56:ba:
         6c:b6:70:0a:a5:b5:fc:16:6c:45:0a:cb:30:7c:eb:92:e4:b1:
         ef:5b:94:5a:89:66:8d:1c:1f:6b:48:35:e4:e4:d7:e0:29:e0:
         6f:f5:e9:92:fb:0b:f9:dc:c0:2b:17:be:9e:5f:15:c7:a8:d8:
         38:f6:39:07:65:27:47:16:39:47:a2:3b:c7:ed:ac:cc:e0:a3:
         c6:65:ad:26:5e:c7:24:37:c4:71:3a:fe:db:62:97:55:7b:61:
         a9:12:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:47:39 2025 by rpki-client