Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
File:                     q2yEZLBStyD10sACDmQmtsftGGs.mft (raw, json)
Hash identifier:          jO10rbza5VOmbHPvZIWspC/qA4bcVsDPAMDxaehxME8=
Subject key identifier:   69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Certificate issuer:       /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial:       14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
Manifest number:          041E
Signing time:             Sat 26 Apr 2025 07:37:59 +0000
Manifest this update:     Sat 26 Apr 2025 07:37:59 +0000
Manifest next update:     Sun 11 May 2025 07:37:59 +0000
Files and hashes:         1: YsJIgATB39tNRPLD2FYqu0Fd-So.roa (hash: 85DDhX8IYygaLJEcJgCws9c9VwcXvzTFF9sd56k9d48=)
                          2: q2yEZLBStyD10sACDmQmtsftGGs.crl (hash: 3p5HGUbzRuk7CWs/b7AwCnsb44gA9JTSZoz+rUhvuQU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
        Validity
            Not Before: Apr 15 01:31:11 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=69C644209752C31DA70DBDC998F223AB61A368FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:f0:08:38:21:92:25:0f:b8:70:8d:7b:a4:
                    28:ae:98:d3:4a:24:fc:7d:3c:99:9c:2a:cb:05:e8:
                    c9:26:39:e0:0e:cb:80:06:82:42:d3:a9:fb:01:4f:
                    eb:07:dc:b1:05:f3:9b:41:6b:e8:7e:8e:70:a9:0a:
                    ce:45:95:1e:83:9f:dd:b0:32:5e:fa:1d:aa:8c:49:
                    d2:ca:2a:8c:de:76:d4:b5:38:64:d7:a0:aa:eb:c8:
                    88:40:3a:86:2b:13:72:e7:78:d5:7d:31:db:cf:32:
                    1f:ec:e7:6f:ca:9b:94:ff:3a:68:1f:09:34:d3:6d:
                    bc:4e:df:57:da:5b:44:80:86:15:85:7e:7b:ec:5e:
                    2e:b8:43:e5:90:bb:1f:6b:76:ad:0a:46:93:a5:8f:
                    d3:40:88:4a:a3:87:27:29:07:a4:85:c8:3f:13:17:
                    37:ad:e7:4f:c1:fe:c1:85:ea:d6:a2:c4:95:2e:37:
                    ae:bf:9d:cf:07:e2:db:7c:9f:1c:a5:ad:d5:b5:b6:
                    08:11:b5:6e:70:be:99:98:bf:60:c4:6c:8d:98:35:
                    a2:44:9e:a1:69:03:d5:97:37:8b:3c:b4:0b:be:da:
                    f0:f1:f3:07:e7:7b:4c:3f:fe:3a:75:73:b3:f9:fe:
                    61:52:f9:a1:30:16:ef:d9:8b:99:50:3d:82:d1:35:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
            X509v3 Authority Key Identifier:
                keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2c:e0:fc:57:87:b4:b7:9b:9b:ca:8b:ca:25:ab:df:79:d5:
         2c:4e:11:20:12:9a:f1:41:e7:61:cd:05:c6:11:9f:68:4d:a7:
         c0:21:c6:da:f0:51:ab:d7:4c:83:ef:9f:07:9d:91:d0:6a:bc:
         01:c7:c4:42:bf:bf:60:62:60:4b:93:c8:0d:21:25:e0:4f:a1:
         6f:6d:1c:b8:0e:ad:a1:2f:c7:35:73:8a:2e:62:7a:db:95:b7:
         77:13:c5:d9:74:76:d0:54:3a:cb:79:10:6c:42:60:cf:82:47:
         43:b6:11:37:d6:d1:39:e1:43:66:c8:74:4e:a9:0f:69:fc:6c:
         19:26:c4:c4:b4:7c:80:eb:c2:f2:6d:0f:73:c8:ea:48:f8:aa:
         d0:0b:1a:e6:a1:d3:2e:26:76:f4:9b:fd:eb:0c:8a:c6:7c:dd:
         a7:d9:41:55:ee:97:71:2e:c8:0e:32:ae:20:05:3a:7d:05:5e:
         63:56:ee:07:ab:06:10:cb:9e:7d:f5:19:08:dc:c9:85:cb:b0:
         bf:ba:df:44:57:9e:95:52:b5:b7:cf:a1:bb:21:32:c5:4c:f3:
         51:6e:ec:f0:ec:12:f3:2b:9f:f5:16:87:da:9d:5d:a6:db:43:
         c1:e5:39:f1:91:50:01:a2:6b:95:94:3b:87:ad:e3:71:70:73:
         b4:4e:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:40:38 2025 by rpki-client