Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/FT0jbFurJDBD_quz4z416KrYRdU.mft
File:                     FT0jbFurJDBD_quz4z416KrYRdU.mft (raw, json)
Hash identifier:          AcdQPA7H2sS7QNFyiTZ87ajqgE+S8NQyf350YCj/yRE=
Subject key identifier:   50:78:77:BA:09:88:F8:3B:07:20:B8:B5:0E:B7:66:F3:A5:C6:B7:70
Authority key identifier: 15:3D:23:6C:5B:AB:24:30:43:FE:AB:B3:E3:3E:35:E8:AA:D8:45:D5
Certificate issuer:       /CN=153D236C5BAB243043FEABB3E33E35E8AAD845D5
Certificate serial:       47
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FT0jbFurJDBD_quz4z416KrYRdU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/FT0jbFurJDBD_quz4z416KrYRdU.mft
Manifest number:          0688
Signing time:             Fri 04 Jul 2025 17:33:48 +0000
Manifest this update:     Fri 04 Jul 2025 17:33:48 +0000
Manifest next update:     Sat 19 Jul 2025 17:33:48 +0000
Files and hashes:         1: FT0jbFurJDBD_quz4z416KrYRdU.crl (hash: CXQIA8FXhnLwzUEtHVimYhZHENGuQS7kaoekx8bR7ug=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/FT0jbFurJDBD_quz4z416KrYRdU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/FT0jbFurJDBD_quz4z416KrYRdU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FT0jbFurJDBD_quz4z416KrYRdU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153D236C5BAB243043FEABB3E33E35E8AAD845D5
        Validity
            Not Before: Jun 15 01:32:46 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=507877BA0988F83B0720B8B50EB766F3A5C6B770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f7:ca:92:1f:c9:f9:cd:3e:c4:3e:4e:2c:e3:
                    78:67:c1:1a:4d:b2:2f:ff:31:a9:83:b6:27:52:75:
                    7e:11:29:e0:4e:9b:6b:6b:c2:9e:42:6b:1f:09:98:
                    a5:ab:c0:23:a0:d2:f1:fd:c3:10:de:8f:b9:0f:df:
                    09:bd:95:8d:c1:50:8a:1b:7c:97:70:78:6d:53:a7:
                    28:91:a1:7c:2f:3c:ae:d6:a4:27:7e:2f:ba:a6:46:
                    70:b3:89:b4:2b:9f:a1:37:e2:23:c3:07:15:1e:e9:
                    86:c4:29:7f:e7:01:98:88:41:01:47:41:4f:ad:42:
                    5b:b7:b9:0a:c8:14:d2:ef:66:a9:ff:91:e5:54:06:
                    a3:7a:47:85:7b:6a:f6:4b:55:35:89:76:b0:cf:37:
                    da:b5:12:54:9e:af:85:a3:e0:ca:fd:40:f5:dc:12:
                    e4:86:3b:72:4a:93:78:83:ff:fe:bf:24:60:0b:da:
                    15:a3:99:2f:d9:9a:13:8e:04:80:89:ef:f5:69:6a:
                    33:c2:03:d2:fb:75:0e:81:6c:93:0d:58:a8:82:1f:
                    24:dd:3b:e8:0d:4a:ad:30:4f:5c:aa:88:28:ed:ee:
                    97:1b:73:88:36:0f:db:af:79:69:5a:2c:64:c7:95:
                    e8:69:53:64:2a:c7:c9:67:e2:cd:d2:0c:8b:26:a5:
                    5d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:77:BA:09:88:F8:3B:07:20:B8:B5:0E:B7:66:F3:A5:C6:B7:70
            X509v3 Authority Key Identifier:
                keyid:15:3D:23:6C:5B:AB:24:30:43:FE:AB:B3:E3:3E:35:E8:AA:D8:45:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/FT0jbFurJDBD_quz4z416KrYRdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FT0jbFurJDBD_quz4z416KrYRdU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/FT0jbFurJDBD_quz4z416KrYRdU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:84:8d:4a:29:26:42:89:21:25:08:18:02:8a:bd:69:7e:db:
         de:29:9b:c1:e2:7c:64:29:84:69:6f:b2:6f:cf:df:39:4b:be:
         46:e3:3b:f4:2a:34:93:ad:bd:bb:99:3e:b2:04:37:3f:cc:92:
         cf:36:be:fd:08:88:57:f0:a0:13:fd:bb:81:f9:60:ea:0b:30:
         5d:4c:a0:3b:f6:82:04:d8:98:df:f6:cd:c2:4e:94:0d:3b:57:
         36:04:6a:a2:ef:74:a2:a5:f3:c2:15:e0:d6:8d:ff:8a:68:d6:
         5c:87:f4:8b:3b:4c:4b:a0:e8:6f:41:15:c0:0b:24:74:c5:5a:
         93:8e:97:c5:3b:c6:86:d1:b1:56:ac:71:ac:d5:42:1f:be:59:
         fe:22:b2:93:2d:67:af:5c:70:46:c8:3c:dd:a5:a1:f0:b2:30:
         ba:c5:87:37:08:cd:44:10:3a:0b:62:aa:35:6c:5d:f3:c3:dc:
         be:bd:7b:83:dc:08:fb:92:4a:e6:f6:48:94:bd:11:35:af:4d:
         8c:e7:f4:1e:03:89:d2:72:36:ba:c9:d7:cc:21:cd:77:80:17:
         d4:9d:10:79:2a:c5:81:3a:b3:85:cd:e2:8f:15:06:07:55:a8:
         c9:58:fc:fb:ca:6e:27:d4:b6:b8:56:35:bd:26:4a:91:71:45:
         bd:25:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:25:51 2025 by rpki-client