Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
File:                     EWYArZfDsYxb9xPsgAruppKsTME.mft (raw, json)
Hash identifier:          vQBc3FtC1lCFwZQRJMY7rNbbid41/6nBBx7O+cCRohI=
Subject key identifier:   2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       88
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
Manifest number:          08CB
Signing time:             Mon 20 Oct 2025 14:40:19 +0000
Manifest this update:     Mon 20 Oct 2025 14:40:19 +0000
Manifest next update:     Tue 04 Nov 2025 14:40:19 +0000
Files and hashes:         1: EWYArZfDsYxb9xPsgAruppKsTME.crl (hash: zWDAGGr45y1CfVyBFRacq5Bv9Zhm4K1mF/Hp91aNx9E=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Oct 15 01:42:23 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=2E2E731F792F6A65594CF848E42D88BDF9C33FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:3e:64:02:50:2a:db:98:7f:d6:63:4c:58:
                    bd:6a:ff:16:45:65:08:ed:38:f8:aa:6a:3e:80:1b:
                    41:12:33:67:e4:81:84:84:8b:6e:f7:07:58:ae:a7:
                    66:40:e1:d5:23:97:e0:f9:cb:83:38:35:4f:b9:5a:
                    30:e7:50:70:69:52:e7:aa:2e:eb:5c:45:01:ab:1f:
                    b8:49:c3:fe:0e:2d:67:49:e4:d9:11:61:78:75:75:
                    b3:ce:a9:f8:92:f9:d8:6e:eb:cb:dd:3c:4b:1c:59:
                    7b:0d:27:f0:dd:41:9d:7c:d2:ec:6a:a8:c4:de:f3:
                    80:7d:f8:44:37:90:45:ed:47:90:51:e6:95:fb:19:
                    d6:a8:49:97:19:86:6c:d1:b1:5f:f7:6b:38:20:a0:
                    d3:9d:52:e8:ae:9d:25:35:8d:e9:51:a8:3c:b7:86:
                    86:23:5f:a4:4a:ea:5f:ca:87:bc:76:37:86:34:f9:
                    e5:c0:25:6d:de:9c:a6:5d:4b:00:62:c9:c0:10:1d:
                    54:34:1b:7a:8d:5c:a2:41:36:67:a2:29:34:f3:eb:
                    7b:62:42:aa:da:4c:d6:71:f2:93:ca:c8:9a:3f:70:
                    e8:76:8a:a5:11:30:19:61:77:e6:b1:2a:a4:5f:5f:
                    46:69:63:cc:74:88:19:e3:1d:d9:e1:93:d0:89:09:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:64:ac:5e:3a:58:77:d5:e2:1a:52:62:4a:33:b3:3b:3f:
         96:d9:ce:f4:86:3c:32:19:f5:26:cf:4c:45:72:b4:f5:7d:a4:
         ba:f5:10:fb:44:63:4d:4f:fd:64:3c:26:e7:5b:e5:7a:7b:f9:
         84:fa:13:a3:d1:5c:14:6b:e4:13:f2:73:eb:bc:36:fc:32:9a:
         e1:24:4c:42:a1:38:7a:89:12:3a:3a:f8:fd:cb:ce:52:6f:27:
         22:a1:01:22:69:36:c6:8f:46:18:14:9d:35:fd:86:d1:fd:52:
         96:77:52:eb:e9:be:21:3d:27:7e:00:6b:a6:ab:86:64:0b:f8:
         d2:b2:5f:0a:b4:9a:0a:35:9d:46:41:7a:9b:63:f8:6c:e3:0d:
         f1:89:d1:84:98:34:85:83:61:40:11:39:ed:88:f1:b0:da:7d:
         54:24:08:cc:26:45:6b:ee:23:38:90:b7:14:22:2c:84:ba:ab:
         81:de:2a:81:2b:f0:5e:66:41:02:c8:36:5a:8e:dc:05:77:8a:
         2d:e3:5f:c1:92:61:44:86:20:b7:33:12:82:f0:15:ef:1f:c1:
         ac:84:b7:54:56:2d:8d:72:c1:66:84:fa:1f:b2:ad:a2:3f:8b:
         f5:70:a7:b5:10:39:50:5b:e3:bc:44:53:1c:47:4d:41:df:bd:
         4c:ce:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:49 2025 by rpki-client