Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
File:                     q2yEZLBStyD10sACDmQmtsftGGs.mft (raw, json)
Hash identifier:          Ko13n9ibJEanXvvFsDZjhA53KYzDsfZR7M6nPVZUZ2M=
Subject key identifier:   69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Certificate issuer:       /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial:       18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
Manifest number:          0506
Signing time:             Tue 03 Jun 2025 21:17:02 +0000
Manifest this update:     Tue 03 Jun 2025 21:17:02 +0000
Manifest next update:     Wed 18 Jun 2025 21:17:02 +0000
Files and hashes:         1: YsJIgATB39tNRPLD2FYqu0Fd-So.roa (hash: 85DDhX8IYygaLJEcJgCws9c9VwcXvzTFF9sd56k9d48=)
                          2: q2yEZLBStyD10sACDmQmtsftGGs.crl (hash: qfZzgTz0PWz7kpizQzIhF/9B1+s/aXzroLQ7MSDKCc4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
        Validity
            Not Before: May 23 10:02:39 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=69C644209752C31DA70DBDC998F223AB61A368FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:f0:08:38:21:92:25:0f:b8:70:8d:7b:a4:
                    28:ae:98:d3:4a:24:fc:7d:3c:99:9c:2a:cb:05:e8:
                    c9:26:39:e0:0e:cb:80:06:82:42:d3:a9:fb:01:4f:
                    eb:07:dc:b1:05:f3:9b:41:6b:e8:7e:8e:70:a9:0a:
                    ce:45:95:1e:83:9f:dd:b0:32:5e:fa:1d:aa:8c:49:
                    d2:ca:2a:8c:de:76:d4:b5:38:64:d7:a0:aa:eb:c8:
                    88:40:3a:86:2b:13:72:e7:78:d5:7d:31:db:cf:32:
                    1f:ec:e7:6f:ca:9b:94:ff:3a:68:1f:09:34:d3:6d:
                    bc:4e:df:57:da:5b:44:80:86:15:85:7e:7b:ec:5e:
                    2e:b8:43:e5:90:bb:1f:6b:76:ad:0a:46:93:a5:8f:
                    d3:40:88:4a:a3:87:27:29:07:a4:85:c8:3f:13:17:
                    37:ad:e7:4f:c1:fe:c1:85:ea:d6:a2:c4:95:2e:37:
                    ae:bf:9d:cf:07:e2:db:7c:9f:1c:a5:ad:d5:b5:b6:
                    08:11:b5:6e:70:be:99:98:bf:60:c4:6c:8d:98:35:
                    a2:44:9e:a1:69:03:d5:97:37:8b:3c:b4:0b:be:da:
                    f0:f1:f3:07:e7:7b:4c:3f:fe:3a:75:73:b3:f9:fe:
                    61:52:f9:a1:30:16:ef:d9:8b:99:50:3d:82:d1:35:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
            X509v3 Authority Key Identifier:
                keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:99:10:a1:f5:07:9a:f0:46:55:42:4c:9d:f6:af:b3:ba:36:
         02:0c:9d:0b:75:f5:ed:da:25:2f:4e:79:a7:d3:94:d3:97:d2:
         7a:f1:12:84:ca:88:1e:f9:a0:97:45:cd:68:b3:52:48:d3:50:
         cb:fd:56:68:66:6a:d6:b5:4b:23:20:ca:fb:68:57:29:8f:70:
         c5:fa:1f:14:d0:61:59:9e:35:23:dc:0c:1e:b4:98:c8:ce:5e:
         f7:e9:57:ef:b8:36:c5:e6:09:55:88:e4:a5:00:6e:1f:f4:53:
         97:80:7d:78:c3:1b:11:2c:c5:e1:af:5d:5e:4f:7f:10:fa:ef:
         04:6e:b3:ed:88:7c:53:81:1c:86:b2:5a:f9:41:42:52:a1:46:
         57:6c:e1:99:0e:4c:0a:81:ce:b9:f6:9a:9e:96:f9:b1:bd:57:
         22:16:34:1d:e3:39:54:d6:73:de:e5:d2:bb:17:d0:dd:40:f4:
         27:93:26:df:4e:c9:32:6b:67:e4:16:6a:77:0e:67:5b:1a:99:
         a6:2e:2c:f3:20:c3:c3:41:04:5e:e8:0a:12:9a:63:ff:5d:98:
         d1:97:7e:c9:d3:52:90:df:2a:64:3a:09:5b:0f:da:c6:d8:22:
         b2:d0:a8:c7:3f:9c:1d:6e:f7:d2:7a:3e:ca:99:6d:06:e1:d1:
         7c:f9:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:16 2025 by rpki-client