Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
File:                     q2yEZLBStyD10sACDmQmtsftGGs.mft (raw, json)
Hash identifier:          5SMh+zP/nWGZpaLb5GPJxU4rFLit90QqZeP4lQvIkzc=
Subject key identifier:   69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
Authority key identifier: AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B
Certificate issuer:       /CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
Certificate serial:       1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
Manifest number:          06E4
Signing time:             Sat 23 Aug 2025 08:13:12 +0000
Manifest this update:     Sat 23 Aug 2025 08:13:12 +0000
Manifest next update:     Sun 07 Sep 2025 08:13:12 +0000
Files and hashes:         1: YsJIgATB39tNRPLD2FYqu0Fd-So.roa (hash: 85DDhX8IYygaLJEcJgCws9c9VwcXvzTFF9sd56k9d48=)
                          2: q2yEZLBStyD10sACDmQmtsftGGs.crl (hash: vufqgSNEA6MaRqfi6m2CR3mCpEr0nGJBcGG/RCloJjU=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6C8464B052B720F5D2C0020E6426B6C7ED186B
        Validity
            Not Before: Aug 15 01:42:41 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=69C644209752C31DA70DBDC998F223AB61A368FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:f0:08:38:21:92:25:0f:b8:70:8d:7b:a4:
                    28:ae:98:d3:4a:24:fc:7d:3c:99:9c:2a:cb:05:e8:
                    c9:26:39:e0:0e:cb:80:06:82:42:d3:a9:fb:01:4f:
                    eb:07:dc:b1:05:f3:9b:41:6b:e8:7e:8e:70:a9:0a:
                    ce:45:95:1e:83:9f:dd:b0:32:5e:fa:1d:aa:8c:49:
                    d2:ca:2a:8c:de:76:d4:b5:38:64:d7:a0:aa:eb:c8:
                    88:40:3a:86:2b:13:72:e7:78:d5:7d:31:db:cf:32:
                    1f:ec:e7:6f:ca:9b:94:ff:3a:68:1f:09:34:d3:6d:
                    bc:4e:df:57:da:5b:44:80:86:15:85:7e:7b:ec:5e:
                    2e:b8:43:e5:90:bb:1f:6b:76:ad:0a:46:93:a5:8f:
                    d3:40:88:4a:a3:87:27:29:07:a4:85:c8:3f:13:17:
                    37:ad:e7:4f:c1:fe:c1:85:ea:d6:a2:c4:95:2e:37:
                    ae:bf:9d:cf:07:e2:db:7c:9f:1c:a5:ad:d5:b5:b6:
                    08:11:b5:6e:70:be:99:98:bf:60:c4:6c:8d:98:35:
                    a2:44:9e:a1:69:03:d5:97:37:8b:3c:b4:0b:be:da:
                    f0:f1:f3:07:e7:7b:4c:3f:fe:3a:75:73:b3:f9:fe:
                    61:52:f9:a1:30:16:ef:d9:8b:99:50:3d:82:d1:35:
                    da:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C6:44:20:97:52:C3:1D:A7:0D:BD:C9:98:F2:23:AB:61:A3:68:FB
            X509v3 Authority Key Identifier:
                keyid:AB:6C:84:64:B0:52:B7:20:F5:D2:C0:02:0E:64:26:B6:C7:ED:18:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q2yEZLBStyD10sACDmQmtsftGGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30323/q2yEZLBStyD10sACDmQmtsftGGs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a0:19:0a:5f:22:20:1b:d0:bc:8f:12:01:ec:89:c9:57:de:
         c8:56:8a:dc:a5:fb:ba:0c:68:1c:1a:a7:ad:2c:d7:8d:bb:ac:
         bf:3e:a9:67:f7:ac:15:6e:52:ee:45:12:2e:56:ce:5c:37:7b:
         18:d0:16:3b:ad:db:4f:3a:1d:51:9e:db:79:53:1e:6a:d7:25:
         f6:9f:db:4f:25:ca:2e:b6:c0:ce:ae:f5:a3:32:b3:e2:a6:8b:
         97:68:cf:56:e0:8d:d7:bb:bc:1a:e4:ab:16:2d:6e:fb:ce:65:
         1f:50:ad:c0:01:73:f6:ad:ec:02:8c:ea:7a:c6:b4:47:1e:e7:
         ae:7d:df:13:65:d7:4a:e2:e9:18:69:1c:88:ff:20:db:cb:24:
         a7:18:70:8f:14:e0:a9:75:1f:58:26:29:87:44:de:35:e3:9c:
         45:99:56:ef:0e:e7:53:69:c7:1e:8a:56:9a:43:1a:21:bc:bd:
         43:2f:fa:a0:13:40:20:0b:e3:1a:69:fe:a4:5c:81:6c:ae:51:
         d2:bf:e1:71:f6:cb:5c:05:92:ce:52:c0:ee:1c:55:59:9f:a0:
         22:aa:c0:17:ef:50:aa:14:5b:3e:60:53:df:68:6f:71:c7:e8:
         c0:e3:48:10:1a:ba:83:98:3f:6b:da:9c:f6:7e:10:0b:5c:ef:
         79:cc:22:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:03:04 2025 by rpki-client