Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
File:                     G_-mDYo0HWFiEcOLuSUGEINtO50.mft (raw, json)
Hash identifier:          vLYUg0UfZYx2iRT/rIeEAClbiY0iq4MbvMFHfERpRSA=
Subject key identifier:   CF:6D:62:E2:AE:D3:85:15:DD:B2:9A:BF:24:85:4D:D5:74:DE:C2:6C
Authority key identifier: 1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D
Certificate issuer:       /CN=1BFFA60D8A341D616211C38BB9250610836D3B9D
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
Manifest number:          4D
Signing time:             Tue 21 Oct 2025 05:41:06 +0000
Manifest this update:     Tue 21 Oct 2025 05:41:06 +0000
Manifest next update:     Wed 05 Nov 2025 05:41:06 +0000
Files and hashes:         1: G_-mDYo0HWFiEcOLuSUGEINtO50.crl (hash: vqdGMAcJ1fVWxjr7q+IE4nvBbUgLQZ7bDBx5LvA+Lkc=)
                          2: JT1jIZbOORHe7D1W2-K1cgkhv9E.roa (hash: smXuoow/iYqnNnNQAqsOg52GEjWg89CROpEwLFzf63I=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 08:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFFA60D8A341D616211C38BB9250610836D3B9D
        Validity
            Not Before: Oct 15 01:44:45 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=CF6D62E2AED38515DDB29ABF24854DD574DEC26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:a2:c1:4c:f6:8c:5b:95:40:76:7a:41:9c:
                    bc:8a:ac:d8:44:a3:b5:39:86:60:92:d5:5b:d2:51:
                    b4:4d:55:d1:ea:37:a4:c5:c8:92:80:b0:9f:21:fb:
                    ba:d9:53:c5:4e:98:ff:13:04:3d:22:0a:fd:c2:f2:
                    05:12:e7:79:ee:e2:ff:19:c0:38:e6:b4:d0:29:7e:
                    f9:4d:ea:35:ef:46:e2:38:10:49:02:63:b3:0c:0e:
                    11:cc:70:ea:d8:ed:b1:be:9d:bd:e6:46:60:3f:ed:
                    7b:48:2a:be:8a:f3:47:0b:a1:e5:2d:9f:94:4e:7d:
                    61:0b:a1:ea:31:88:0c:aa:d6:94:44:9e:20:fb:ff:
                    0a:a4:da:6c:57:72:30:9f:6b:06:57:a7:5a:17:8e:
                    df:89:73:ac:41:6d:f5:ac:30:d6:a3:3e:48:93:c3:
                    9e:e3:5a:41:2f:f6:2f:df:72:11:3d:32:de:e7:55:
                    c8:ae:da:c4:26:fb:be:b2:db:b8:ae:a0:eb:3c:e4:
                    c4:c2:8b:f5:0b:24:23:fe:89:68:39:6b:cb:87:9a:
                    96:90:11:bd:b2:9a:fc:b9:87:b7:f7:6f:12:2d:50:
                    a1:5e:7a:37:c6:17:9a:2e:60:93:c0:c0:cc:cc:b8:
                    fb:11:9b:0a:6c:09:ce:71:d2:86:7d:11:2a:66:57:
                    42:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:6D:62:E2:AE:D3:85:15:DD:B2:9A:BF:24:85:4D:D5:74:DE:C2:6C
            X509v3 Authority Key Identifier:
                keyid:1B:FF:A6:0D:8A:34:1D:61:62:11:C3:8B:B9:25:06:10:83:6D:3B:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G_-mDYo0HWFiEcOLuSUGEINtO50.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20281/G_-mDYo0HWFiEcOLuSUGEINtO50.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f5:0f:47:4e:44:e7:44:2e:11:e5:b5:dd:ea:d6:a1:3e:95:
         5b:8e:7f:2d:86:1b:e5:7e:da:a6:f2:35:7f:e9:4f:41:15:6e:
         ea:de:a7:7f:66:be:35:49:74:a4:fe:d9:d1:aa:87:da:51:51:
         2b:f4:30:e8:81:7c:71:d8:f5:fc:80:65:e2:f8:fd:d6:3f:45:
         8e:aa:48:0f:2d:56:fa:0a:78:20:3c:fe:8f:43:5a:48:87:d0:
         8f:5c:06:6d:12:db:81:68:fe:5e:58:da:b5:2e:bc:86:9f:40:
         69:53:8f:5b:af:d6:49:d0:ac:5c:1f:51:3d:cd:5e:90:64:88:
         dd:89:8f:38:3c:d6:45:d6:0c:46:4f:0c:e2:a3:cf:0e:eb:61:
         10:0f:65:89:47:c0:9b:0d:b6:d2:1e:7c:62:85:cb:de:20:b9:
         be:3e:8e:71:3d:e4:65:c8:14:e5:08:2b:23:fb:fb:ef:5c:fe:
         dd:39:85:85:43:d0:a1:dc:f5:60:0f:7a:f7:36:cc:e1:63:d5:
         df:ce:2d:9f:b5:e1:e6:01:30:57:f3:29:e4:0f:ac:96:cf:91:
         2f:52:48:1e:7c:75:45:b0:f1:26:b8:ba:8b:64:70:07:fe:8c:
         34:91:25:fd:f6:a2:0b:7e:e9:4c:93:48:10:e1:dd:6d:53:39:
         3d:1d:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:05:47 2025 by rpki-client