Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
File:                     7k9xfADvQMIOGJGldGWWK9sj3ps.mft (raw, json)
Hash identifier:          KspGGa6L8KEiXN3lNBd/0bsXqi2AzGIPeqYB+tINrC4=
Subject key identifier:   9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
Authority key identifier: EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B
Certificate issuer:       /CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
Certificate serial:       0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
Manifest number:          03B8
Signing time:             Mon 20 Oct 2025 19:20:55 +0000
Manifest this update:     Mon 20 Oct 2025 19:20:55 +0000
Manifest next update:     Tue 04 Nov 2025 19:20:55 +0000
Files and hashes:         1: 7k9xfADvQMIOGJGldGWWK9sj3ps.crl (hash: PoK7FxxYzcvlV4q+xc9kAUEKOZKGBr2kjtLthLw+E0I=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE4F717C00EF40C20E1891A57465962BDB23DE9B
        Validity
            Not Before: Oct 15 01:44:11 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=9A2791DC454A5B0DF7FA90175562263C323B8C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:a4:71:2d:1f:ce:a0:d6:54:25:4f:2e:dc:
                    c3:2d:73:fe:81:ff:c9:26:80:76:fc:f9:49:9b:34:
                    f1:3a:a9:16:91:96:b7:be:9b:1a:7f:41:c9:9d:25:
                    7d:39:9f:c0:90:12:9f:ac:16:74:3f:e7:05:c7:94:
                    de:82:a8:d6:b8:37:c3:89:6a:51:05:15:26:e2:2e:
                    74:34:4f:da:cb:5a:dd:5e:a2:57:0f:2f:4d:1e:d1:
                    a0:d5:c0:4a:fd:e6:6a:e8:fb:de:88:12:dc:7f:39:
                    0e:85:96:59:40:52:5c:09:89:6e:41:b7:86:20:62:
                    19:a3:71:22:8a:59:55:4e:07:9d:41:6b:64:5a:61:
                    67:03:6b:64:1b:e3:54:a8:b2:6c:08:ae:79:7c:09:
                    df:6c:8b:9a:9f:44:ce:d5:05:cc:ec:ca:bb:e9:7c:
                    7b:d2:31:3c:a5:0a:8a:01:19:de:86:26:e1:e0:be:
                    01:e0:ca:42:b7:f3:d6:c7:a7:b8:a9:b8:49:f6:db:
                    82:29:74:c8:8e:58:a9:8b:ed:fb:62:9d:d4:08:c7:
                    1e:24:2b:94:e9:55:55:73:a6:9d:9b:a1:8d:ae:d3:
                    ec:d6:b9:cc:d7:72:17:8b:b9:9d:4f:b2:2b:b6:a6:
                    c3:fc:47:e1:8f:27:71:09:ab:6d:c9:20:bb:c6:e8:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:91:DC:45:4A:5B:0D:F7:FA:90:17:55:62:26:3C:32:3B:8C:4A
            X509v3 Authority Key Identifier:
                keyid:EE:4F:71:7C:00:EF:40:C2:0E:18:91:A5:74:65:96:2B:DB:23:DE:9B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7k9xfADvQMIOGJGldGWWK9sj3ps.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1879/7k9xfADvQMIOGJGldGWWK9sj3ps.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:30:09:74:ee:23:d9:71:18:5b:63:45:cc:76:4e:38:10:63:
         a6:bf:c9:8d:c5:18:f7:e5:de:c3:fb:ad:d0:74:81:5e:f7:e3:
         cf:d0:ca:46:61:e7:ad:ad:bc:48:d8:bf:bb:0e:9c:38:e8:11:
         b3:43:1e:29:e8:b1:36:fe:ca:8b:bf:7b:98:bb:ef:e7:cd:65:
         91:b0:27:b3:06:ca:c1:5a:3b:6c:ae:b4:83:61:d0:b7:b5:14:
         62:8f:74:e4:19:ee:f0:23:8d:22:85:9e:ef:f8:10:a2:c9:60:
         dc:27:66:8c:fe:18:a0:6b:65:48:fc:6d:69:1f:ed:40:e2:d6:
         11:46:0c:19:bb:83:38:29:e9:bb:4b:76:4a:7a:d7:4b:b8:84:
         89:63:87:b5:df:2e:52:64:26:63:b4:28:dc:c6:00:b8:20:60:
         e2:5a:85:c1:70:b9:ca:bd:54:9a:be:a0:dd:d0:af:ee:ec:2e:
         25:f0:fc:12:b4:1f:93:2f:71:cb:0c:01:3f:1f:a6:ba:9f:99:
         bb:bc:d9:ee:69:84:1f:89:d1:48:b8:e0:a5:c4:52:bb:53:14:
         73:df:6e:1e:01:eb:a4:52:d9:ad:c7:e5:5c:5b:37:b8:bc:f5:
         af:c5:4b:af:6a:b4:69:51:f7:e8:5c:26:d1:71:93:90:fd:8f:
         a3:8d:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:38:10 2025 by rpki-client