Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
File:                     cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft (raw, json)
Hash identifier:          Y5PrvdeYl50OCc3vyRJCciKFq/lSBmQ7rlLV12U5YuI=
Subject key identifier:   7C:30:D6:F6:34:72:19:73:4D:B9:3E:F9:ED:CC:CE:5F:2F:A1:8D:FF
Authority key identifier: 71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C
Certificate issuer:       /CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
Certificate serial:       4D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
Manifest number:          0C28
Signing time:             Mon 20 Oct 2025 22:39:40 +0000
Manifest this update:     Mon 20 Oct 2025 22:39:40 +0000
Manifest next update:     Tue 04 Nov 2025 22:39:40 +0000
Files and hashes:         1: cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl (hash: RY8bJZ0P+bgpj0MrZHK2KGbDR0UZIhEs5GUq0aBJPog=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=710F21F8436CD03631564C38E4940BD9FCA3F11C
        Validity
            Not Before: Oct 15 01:41:20 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=7C30D6F6347219734DB93EF9EDCCCE5F2FA18DFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:dc:35:82:14:d4:aa:3e:80:ac:ca:65:c6:
                    9b:65:d6:85:d3:7e:b6:21:d5:a2:9a:b1:29:55:da:
                    36:24:0c:2b:50:75:ae:6c:b5:ef:25:06:4e:da:a8:
                    93:7c:e2:24:f4:94:b1:9a:c1:f9:56:6f:57:cf:95:
                    c8:9a:fe:63:39:31:79:02:7f:ec:46:df:54:66:48:
                    32:36:35:12:4f:60:b4:d1:80:28:d9:86:e4:db:14:
                    8e:5f:71:a0:2c:9f:7b:27:3a:0c:a7:86:12:68:5f:
                    07:bc:40:6d:13:9f:05:f5:95:72:85:49:2a:44:2a:
                    0c:4c:46:3a:f0:bb:b2:60:30:b9:f5:59:a6:8d:6e:
                    1c:b6:3a:d1:11:7a:05:1f:1d:77:4c:32:2c:97:70:
                    cb:55:f4:ab:d8:fa:7e:f9:c5:51:07:b0:47:d1:60:
                    2a:c3:d7:57:3f:62:f8:d6:0e:2e:67:b9:37:0c:d9:
                    30:eb:70:12:ac:15:90:9f:e4:52:4a:36:d0:8f:6a:
                    f7:23:89:af:a5:07:32:06:40:da:f7:5f:43:c1:c4:
                    56:f0:d9:9a:75:fa:9c:77:8e:66:1e:d6:35:a3:aa:
                    1a:4c:42:68:b6:7f:7a:b2:75:aa:f8:cc:d0:10:8e:
                    8d:cb:32:3d:f0:bf:0e:1e:20:ea:76:a4:b1:55:6b:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:30:D6:F6:34:72:19:73:4D:B9:3E:F9:ED:CC:CE:5F:2F:A1:8D:FF
            X509v3 Authority Key Identifier:
                keyid:71:0F:21:F8:43:6C:D0:36:31:56:4C:38:E4:94:0B:D9:FC:A3:F1:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/880/cQ8h-ENs0DYxVkw45JQL2fyj8Rw.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:04:07:7b:9e:8b:6e:24:ca:07:09:68:33:68:cc:52:d7:eb:
         d0:66:27:26:c1:17:81:2b:37:79:df:ff:4c:9e:48:01:78:b9:
         91:88:81:a6:da:50:b1:1f:d3:80:bc:19:ee:49:63:7c:ee:cb:
         b6:2e:3f:a0:a8:00:73:cc:e7:98:d6:29:24:cb:f0:c8:da:1d:
         7e:6c:35:ca:e7:f9:87:ce:aa:16:aa:43:1d:0d:61:61:ef:35:
         86:69:0d:04:7c:1a:d5:08:c3:73:f7:cf:72:86:4a:bf:fa:d6:
         88:d6:48:2f:88:5d:9b:1f:dc:ee:fc:a5:2a:d9:6b:bd:af:de:
         b1:10:30:d4:29:85:a5:9a:41:49:76:7a:6a:f1:8c:53:4c:bb:
         3f:af:71:27:dc:2a:e5:4b:a0:45:a6:81:07:86:5d:21:b0:90:
         86:9d:65:7a:5c:7c:72:ea:63:9c:38:30:6c:fd:5c:74:22:0b:
         0e:f7:05:b3:1c:74:78:e6:34:9c:15:cd:a9:b7:f4:4b:6c:7c:
         d6:38:12:e3:96:cb:bf:f1:e3:01:3c:c9:6d:09:7d:24:a0:70:
         67:37:a5:12:4c:2f:56:0b:da:d6:0a:23:21:b0:6f:8c:36:09:
         fd:f4:11:55:c9:30:06:7e:23:d8:3e:a8:1c:4f:3c:d8:6f:17:
         81:61:dc:3d
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MTBG
MjFGODQzNkNEMDM2MzE1NjRDMzhFNDk0MEJEOUZDQTNGMTFDMB4XDTI1MTAxNTAx
NDEyMFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoN0MzMEQ2RjYzNDcyMTk3
MzREQjkzRUY5RURDQ0NFNUYyRkExOERGRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBt3DWCFNSqPoCsymXGm2XWhdN+tiHVopqxKVXaNiQMK1B1rmy1
7yUGTtqok3ziJPSUsZrB+VZvV8+VyJr+YzkxeQJ/7EbfVGZIMjY1Ek9gtNGAKNmG
5NsUjl9xoCyfeyc6DKeGEmhfB7xAbROfBfWVcoVJKkQqDExGOvC7smAwufVZpo1u
HLY60RF6BR8dd0wyLJdwy1X0q9j6fvnFUQewR9FgKsPXVz9i+NYOLme5NwzZMOtw
EqwVkJ/kUko20I9q9yOJr6UHMgZA2vdfQ8HEVvDZmnX6nHeOZh7WNaOqGkxCaLZ/
erJ1qvjM0BCOjcsyPfC/Dh4g6naksVVrep8CAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBR8MNb2NHIZc025PvntzM5fL6GN/zAfBgNVHSMEGDAWgBRxDyH4Q2zQNjFWTDjk
lAvZ/KPxHDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgwL2NROGgtRU5zMERZeFZrdzQ1SlFMMmZ5ajhSdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NROGgtRU5zMERZeFZrdzQ1SlFMMmZ5
ajhSdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODAvY1E4aC1FTnMwRFl4Vmt3NDVKUUwyZnlqOFJ3Lm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAB0EB3uei24kygcJaDNozFLX69BmJybBF4ErN3nf/0yeSAF4uZGIgabaULEf
04C8Ge5JY3zuy7YuP6CoAHPM55jWKSTL8MjaHX5sNcrn+YfOqhaqQx0NYWHvNYZp
DQR8GtUIw3P3z3KGSr/61ojWSC+IXZsf3O78pSrZa72v3rEQMNQphaWaQUl2emrx
jFNMuz+vcSfcKuVLoEWmgQeGXSGwkIadZXpcfHLqY5w4MGz9XHQiCw73BbMcdHjm
NJwVzam39EtsfNY4EuOWy7/x4wE8yW0JfSSgcGc3pRJML1YL2tYKIyGwb4w2Cf30
EVXJMAZ+I9g+qBxPPNhvF4Fh3D0=
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:24:56 2025 by rpki-client