Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
File:                     MHpijAPBTRCCWMV5KXJv8PzSEE4.mft (raw, json)
Hash identifier:          0+BkWbjTYrQzppJt9qCkn573JpFWPdQijsbyqKnlSPw=
Subject key identifier:   E2:8F:46:3F:6E:8E:86:02:DB:60:BB:7D:A1:D0:60:64:A7:E7:E0:49
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Certificate issuer:       /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial:       1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
Manifest number:          04B1
Signing time:             Sun 18 May 2025 02:23:44 +0000
Manifest this update:     Sun 18 May 2025 02:23:44 +0000
Manifest next update:     Mon 02 Jun 2025 02:23:44 +0000
Files and hashes:         1: -XsZpY0HU11DMNttbEJiWutc_Cw.roa (hash: lEklsOAbgGj0+oMWG6igUrPA7ufprQWrcZkKkmuY0Cg=)
                          2: MHpijAPBTRCCWMV5KXJv8PzSEE4.crl (hash: XHsw0zuvvAj9Epx2PPlr2hBhuvqMMQ6S0VMt6UKYeaI=)
                          3: nOwEEDpeb8BUx4w1tJHIxrjEl90.roa (hash: VClpAJTAUhy+xv4MrmYVwsqitb1aTnZdGl+W6zA7kX0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 18:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
        Validity
            Not Before: May 15 01:39:59 2025 GMT
            Not After : May 15 01:30:03 2026 GMT
        Subject: CN=E28F463F6E8E8602DB60BB7DA1D06064A7E7E049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:60:3f:a2:18:4b:99:3f:65:40:74:1c:33:
                    66:33:f6:57:6e:be:9b:2d:0f:31:62:2a:8c:95:56:
                    a7:ed:3d:0a:01:51:b6:bb:ff:66:04:db:43:84:94:
                    0d:11:8f:31:e0:f1:a7:91:12:68:cd:54:d7:9d:7a:
                    d2:ba:88:ee:2d:d4:5a:3a:76:17:c5:fe:ed:4e:d6:
                    f8:64:f5:12:eb:b9:1b:48:ee:4c:dd:7a:a8:81:e4:
                    0a:18:2c:e2:4e:63:55:1e:55:fe:1f:07:8d:88:bd:
                    80:20:75:dc:d1:d2:5c:c5:66:65:ca:c6:69:67:23:
                    13:96:70:46:fa:de:ee:35:27:5b:6e:23:e8:6c:7b:
                    b9:55:c3:15:87:a9:e4:73:ae:b5:f1:58:2d:91:22:
                    f1:08:f1:ba:60:2d:d1:e0:4f:e7:f8:80:32:44:22:
                    84:8f:c0:bb:bd:8b:19:7c:21:9d:45:53:0d:a6:06:
                    00:6e:44:3b:1c:ca:f8:13:14:6a:78:92:43:eb:90:
                    4c:4a:78:2a:e6:6c:d8:17:7b:8b:9b:b4:bd:f5:b3:
                    13:81:15:b8:43:81:b1:bc:d6:55:55:31:e0:88:05:
                    c5:ef:7b:22:3c:a1:f7:68:bc:4a:f5:aa:3e:30:d5:
                    d7:de:f9:0f:a6:16:5a:08:4a:df:ad:78:c1:b3:06:
                    e3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:46:3F:6E:8E:86:02:DB:60:BB:7D:A1:D0:60:64:A7:E7:E0:49
            X509v3 Authority Key Identifier:
                keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:b5:91:70:dd:95:5d:04:c2:2e:4e:6c:a0:41:68:a8:b4:
         2f:05:c3:97:70:9d:3f:f7:93:98:94:25:8e:2a:f4:f7:56:47:
         97:0e:4e:64:8c:00:2f:b5:39:d9:1d:7d:17:05:12:26:a6:f2:
         89:09:ce:e3:d7:ce:ee:60:63:ad:1b:10:cf:39:3f:47:3d:c4:
         83:e0:25:d1:99:75:81:31:14:24:d0:a3:70:70:a8:3e:39:64:
         ca:53:70:1a:0e:b4:ba:e1:78:7c:8c:04:71:71:7e:79:89:a8:
         01:7d:53:97:14:d9:1d:ea:d8:a3:bf:69:ce:f5:25:5f:fa:01:
         06:54:e7:98:73:4c:83:12:3a:d7:fe:de:a3:86:9c:d3:68:32:
         cc:46:74:79:38:7d:fc:75:3d:f8:3a:fb:df:5a:80:4b:00:7c:
         38:f8:a4:90:2c:92:ac:9f:56:de:04:00:52:27:0b:82:8b:4d:
         b1:95:2e:e7:48:fa:9e:d4:55:51:32:e1:e7:70:1a:f1:6d:5c:
         c1:e9:37:b5:3c:de:74:d4:18:39:d2:45:92:17:63:92:b1:80:
         11:9a:b0:35:58:19:a4:b4:12:eb:9b:4f:39:a8:15:12:86:08:
         a3:f5:b5:f6:4c:d8:65:00:e5:ad:d3:39:ca:e2:8e:f6:2f:02:
         20:56:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 00:29:49 2025 by rpki-client