Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.mft
File:                     Db-dtRWnE2vlo3lTOf4cSLZhw1A.mft (raw, json)
Hash identifier:          jw5Yt+gt/JZfs/vCB5E7hQ+3SuV5l0noI6VzXM+L2Os=
Subject key identifier:   28:F1:79:5A:39:AE:C2:E6:F2:55:8F:2C:16:34:B3:82:F7:8F:A9:5E
Authority key identifier: 0D:BF:9D:B5:15:A7:13:6B:E5:A3:79:53:39:FE:1C:48:B6:61:C3:50
Certificate issuer:       /CN=0DBF9DB515A7136BE5A3795339FE1C48B661C350
Certificate serial:       31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Db-dtRWnE2vlo3lTOf4cSLZhw1A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.mft
Manifest number:          08A2
Signing time:             Mon 20 Oct 2025 18:24:12 +0000
Manifest this update:     Mon 20 Oct 2025 18:24:12 +0000
Manifest next update:     Tue 04 Nov 2025 18:24:12 +0000
Files and hashes:         1: Db-dtRWnE2vlo3lTOf4cSLZhw1A.crl (hash: sDAtrDDBwKzish78j1JOhIVlUUyBQx13rUA1d+01zoc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Db-dtRWnE2vlo3lTOf4cSLZhw1A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DBF9DB515A7136BE5A3795339FE1C48B661C350
        Validity
            Not Before: Oct 15 01:30:29 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=28F1795A39AEC2E6F2558F2C1634B382F78FA95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:fe:73:76:75:8d:28:17:a8:70:2d:c1:d5:
                    fa:fd:95:ba:da:96:8b:20:be:9a:7f:04:46:b0:fb:
                    89:a2:da:41:9a:b7:dc:80:3e:b1:a4:56:dd:46:dd:
                    74:2c:d9:68:03:69:b0:3a:a3:08:d4:cd:1f:35:f0:
                    e8:f7:cd:0c:dd:2a:37:74:60:f7:c4:f7:39:a0:73:
                    4c:2c:3d:b2:cb:ce:20:93:3d:73:b3:62:9e:d3:64:
                    8e:3c:de:27:15:26:5b:43:19:7f:38:8c:45:a6:8f:
                    29:81:1c:b2:b6:8d:9c:5f:fd:d6:67:de:64:dd:2a:
                    77:cf:54:08:df:3a:70:09:1c:c9:c4:e4:f9:e9:e2:
                    f4:b1:be:5c:b6:8c:8a:8c:b0:a3:64:d3:16:91:7d:
                    aa:1a:d5:b5:f4:f5:c8:ad:43:78:ff:37:5e:aa:1b:
                    bd:e4:e3:1f:09:b6:db:30:48:51:59:26:cb:64:8f:
                    69:48:dd:06:29:2f:fd:b9:3a:02:0a:40:96:3b:9b:
                    e0:8f:21:92:ea:86:5a:f2:b6:dc:3e:15:3f:ef:65:
                    53:42:df:dd:74:03:fa:4e:e1:c1:14:7d:4a:2c:43:
                    88:3d:72:dc:c6:65:20:c5:37:ec:a6:6e:b7:03:b1:
                    a4:0b:bc:ef:a2:69:f2:58:b9:65:68:42:5e:c0:ce:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F1:79:5A:39:AE:C2:E6:F2:55:8F:2C:16:34:B3:82:F7:8F:A9:5E
            X509v3 Authority Key Identifier:
                keyid:0D:BF:9D:B5:15:A7:13:6B:E5:A3:79:53:39:FE:1C:48:B6:61:C3:50

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Db-dtRWnE2vlo3lTOf4cSLZhw1A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20188/Db-dtRWnE2vlo3lTOf4cSLZhw1A.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:17:40:7e:34:54:27:4b:0f:55:b7:e5:e4:3b:dd:b3:0c:44:
         6b:ce:9f:70:33:3a:02:aa:58:e5:b3:86:fd:19:08:72:01:00:
         88:81:78:dd:74:94:a5:e4:5d:b1:0b:28:a1:de:82:a1:c0:1d:
         44:a1:f5:26:a0:d7:7e:76:ff:37:0d:6d:d9:79:e1:cf:48:64:
         59:57:4d:b7:51:07:62:fd:51:fd:d1:0c:83:37:4d:a6:ff:72:
         a0:9d:9c:5d:0e:8d:7d:63:26:31:35:f0:2c:58:aa:df:d0:ab:
         39:5a:21:31:40:3d:66:a2:c1:c1:32:cd:61:30:e9:3b:aa:fd:
         e2:43:c9:c0:db:1a:b2:81:c0:73:0d:a0:82:76:db:ab:b0:99:
         39:68:b6:c5:f8:d0:5a:7b:e2:e4:30:c2:01:0c:d4:9f:54:88:
         53:21:55:61:e9:a2:bf:d4:b1:68:e4:d6:8d:61:93:e1:40:cf:
         95:63:0d:4f:f7:b0:33:a6:0f:95:d8:6a:82:22:23:63:77:66:
         9a:68:c9:9d:b1:cf:38:22:02:14:30:75:98:53:22:1a:a0:8e:
         57:17:39:c6:5b:08:d0:37:d1:46:69:02:c0:10:eb:3d:80:e9:
         fe:7b:6d:d7:29:2f:2c:16:c8:b4:ad:24:5d:3f:33:3c:66:27:
         3b:95:db:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:13:55 2025 by rpki-client