Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
File:                     fBF5I6OubRQWD1AxEVrtRMtNgn0.mft (raw, json)
Hash identifier:          0SJreBGtsf+iO8Y76XnTjjStFiFfxoJYXUTVeP6LITI=
Subject key identifier:   56:AA:9D:3A:AB:8A:64:21:09:DB:02:9B:5D:23:CF:F6:3F:91:98:56
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
Manifest number:          0827
Signing time:             Wed 08 Oct 2025 15:15:49 +0000
Manifest this update:     Wed 08 Oct 2025 15:15:49 +0000
Manifest next update:     Thu 23 Oct 2025 15:15:49 +0000
Files and hashes:         1: fBF5I6OubRQWD1AxEVrtRMtNgn0.crl (hash: 50nTd+q6ou47sb+UWbuZ0iQygTWifJm05JY+S39kJjA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 15 01:42:30 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=56AA9D3AAB8A642109DB029B5D23CFF63F919856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:6f:6f:66:b7:84:d0:b0:de:5c:6d:af:37:
                    7e:22:76:cb:34:2c:25:bc:7a:ff:ea:08:97:c3:7b:
                    f7:3f:23:47:57:69:39:5a:91:10:35:fe:2c:00:de:
                    f7:ff:df:d3:72:36:a8:4e:17:d7:81:fe:6d:e4:7a:
                    a3:a5:79:0c:b7:86:e0:16:1f:a8:47:9d:50:13:4c:
                    74:fe:26:48:4d:b9:e5:68:fa:f2:31:52:b5:5d:b0:
                    14:30:53:8a:42:39:48:32:20:7d:b2:9e:c7:bf:b8:
                    76:68:9d:84:a9:6b:1d:c1:af:b5:5d:9d:47:d7:41:
                    90:e8:4a:d3:7a:6e:fe:c4:68:43:89:6a:ab:86:21:
                    95:da:6d:48:ef:05:67:0c:c3:d0:68:11:d2:7b:34:
                    9f:66:e3:07:81:cc:92:08:16:88:84:45:84:6f:4b:
                    c4:f4:e3:d8:11:2c:a6:d1:8e:95:60:a9:48:8d:02:
                    bb:2b:eb:43:22:4d:b8:98:c3:51:5e:7d:08:c6:d3:
                    6f:4c:53:10:2d:df:25:0a:52:05:c4:cc:40:49:02:
                    a1:f0:74:e4:d0:4c:6d:db:aa:85:e7:dd:b8:a9:df:
                    6c:cd:36:b3:35:45:04:33:23:a6:be:d9:7f:c1:d7:
                    ca:e6:45:1d:d3:cb:5f:b5:e2:6c:a7:7a:f8:22:ae:
                    7a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AA:9D:3A:AB:8A:64:21:09:DB:02:9B:5D:23:CF:F6:3F:91:98:56
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3d:85:af:d6:64:ca:12:08:97:2b:8b:47:c3:ea:a0:f2:cd:
         73:c3:45:44:2a:94:c4:2f:a2:d3:38:e2:0b:a4:de:ca:bb:9f:
         4d:20:1c:57:ab:96:44:6c:e6:50:f3:7b:a6:ec:55:72:b9:69:
         a9:7f:fc:6c:70:6f:60:54:05:fe:85:9e:bb:49:77:3f:f0:ad:
         14:4a:88:8f:86:b2:fc:3d:7b:29:0d:c9:0e:7a:3c:a8:a7:16:
         2d:83:b0:c5:26:71:19:2e:9b:e4:33:d6:e3:37:0d:ff:88:a2:
         95:a8:de:a4:f1:40:77:e7:71:09:06:8c:51:93:5a:96:7c:97:
         55:54:1b:d0:05:ae:61:81:26:06:1e:81:d0:d9:cb:2d:68:a6:
         09:dd:27:ff:a9:8a:02:93:cf:fe:93:48:82:19:41:d8:aa:36:
         a9:33:78:2e:9a:e9:4f:ce:c9:e3:3b:ad:1f:c9:59:4b:6b:de:
         55:d7:ee:41:74:71:a2:d3:14:6e:95:d5:d1:b7:96:0d:3c:d1:
         f4:d7:d5:be:46:b9:bc:6b:d7:71:c7:5e:af:d4:bd:30:ca:ee:
         dc:68:70:1f:39:80:a5:ce:da:4d:72:7b:b7:5c:52:4d:51:96:
         b5:6d:9e:24:c0:fd:5a:1f:47:53:49:8d:d6:e6:94:6d:ce:fc:
         b1:05:fc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:19 2025 by rpki-client