Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
File:                     EwgiqaPTOrq2FTetw3QoZxC6DHc.mft (raw, json)
Hash identifier:          EF73yJsVags5/4LE6/e2D472f1P4zuSd1R81sFz033U=
Subject key identifier:   14:30:F9:91:C3:7A:43:09:C5:69:43:29:50:BF:A6:DE:97:52:4F:49
Authority key identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77
Certificate issuer:       /CN=130822A9A3D33ABAB61537ADC374286710BA0C77
Certificate serial:       1E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
Manifest number:          0839
Signing time:             Tue 21 Oct 2025 02:54:51 +0000
Manifest this update:     Tue 21 Oct 2025 02:54:51 +0000
Manifest next update:     Wed 05 Nov 2025 02:54:51 +0000
Files and hashes:         1: EwgiqaPTOrq2FTetw3QoZxC6DHc.crl (hash: jJQ62fVCBax/xYuFce+fsjU2BNH85CPHh9Pi/Xd+5iA=)
                          2: W_SpPkwLopN8wctDv6JtmK8AieI.roa (hash: D0Hc6DC3a5sLzwMJb1hnoO0vdhsSmlUkUknrkbLRXkY=)
                          3: q6pzU9w100zEJodvCzu45-jLm-0.roa (hash: FymWkfBsezfY2+Xybp8pX28+QS0ppmu0PVgTxLqf+jY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130822A9A3D33ABAB61537ADC374286710BA0C77
        Validity
            Not Before: Oct 15 01:39:01 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=1430F991C37A4309C569432950BFA6DE97524F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:80:a9:73:2c:31:f1:60:5b:ce:d4:55:6e:
                    e2:e8:c5:13:ed:09:25:df:0d:bc:3e:4d:68:bd:be:
                    c3:46:a7:a0:cb:39:f2:1e:bc:ff:6e:59:29:be:a4:
                    fe:f5:9c:fb:62:de:f8:a9:f9:ce:1a:6e:3e:fb:29:
                    c2:3f:0a:e8:ee:7d:81:79:1c:d4:b9:5f:45:9b:00:
                    48:73:e3:55:9e:cc:27:d2:d0:57:7e:9e:7f:12:1f:
                    4a:c9:f8:f0:35:5d:69:0a:9c:6e:68:1f:4a:40:a1:
                    7e:94:3f:14:ce:53:1a:f2:33:9b:55:a1:31:97:c8:
                    94:f4:d0:0a:b9:66:c1:a0:43:df:b3:fe:9b:3c:5f:
                    ec:45:f9:79:da:82:32:39:03:81:a8:84:d1:5f:be:
                    c2:16:d0:eb:da:61:6a:55:a2:87:35:80:66:a5:39:
                    10:c6:ee:e0:1e:3a:a0:23:be:72:73:ba:06:6f:df:
                    65:ab:d7:71:c9:4d:f6:ac:fc:01:fe:dc:3a:ce:bf:
                    3d:24:71:7a:8b:24:3a:b5:1c:f8:cc:5d:bc:b2:d3:
                    d6:ea:ff:ad:43:52:20:2d:cf:67:fc:76:c9:de:b5:
                    44:6f:55:90:29:fd:8e:b3:50:b2:0c:e7:5b:9a:27:
                    53:a7:f2:da:47:23:21:a8:b6:db:49:91:93:af:66:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:30:F9:91:C3:7A:43:09:C5:69:43:29:50:BF:A6:DE:97:52:4F:49
            X509v3 Authority Key Identifier:
                keyid:13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b4:93:7e:90:49:bc:a1:43:23:20:5e:43:30:48:0f:f7:b9:
         32:fb:83:0c:40:14:fe:4c:00:68:88:a4:7d:31:57:13:46:fd:
         3f:bc:a4:ef:57:4f:12:07:f9:1e:4c:f5:44:6a:48:14:95:6c:
         93:8e:57:3b:83:1a:81:de:b1:f1:0c:9e:0d:ed:a9:fe:30:99:
         4b:40:2b:ae:fe:38:2d:ac:d0:bc:d3:70:a3:98:0a:9a:0a:1b:
         66:aa:1d:dd:0a:88:aa:c1:2f:d6:fd:69:9a:17:54:c0:7d:c1:
         ae:e6:6e:2c:2a:f8:e4:93:e7:dd:44:55:30:60:44:49:77:e7:
         49:25:1e:48:e5:aa:d1:b0:cf:12:62:21:d1:cd:58:1b:fb:e1:
         50:5d:51:87:c8:16:21:e7:3e:26:29:dc:2b:50:98:65:94:06:
         f4:88:09:26:8c:b9:24:ae:72:e6:f4:f9:21:b6:84:4b:e5:f3:
         05:a3:d7:1d:8d:b8:e7:c5:5f:90:fe:b4:96:ea:32:d8:d8:81:
         20:96:f3:ca:81:36:5a:66:e4:73:ef:c8:3c:3b:43:cd:04:b6:
         fe:b2:0c:6b:76:be:df:67:d1:00:ba:13:10:80:e0:ac:2b:46:
         67:7d:5b:e1:79:bf:37:59:6c:02:8e:84:a8:b4:4e:08:64:11:
         d3:69:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:33:27 2025 by rpki-client