Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
File:                     aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json)
Hash identifier:          WWVgO329dQMY8JraW69K86KLc/exvjzNE9o24GL0kV4=
Subject key identifier:   18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86
Certificate issuer:       /CN=68EF440AA360C0D21035A81AD2C23339D2233F86
Certificate serial:       06
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
Manifest number:          02D2
Signing time:             Wed 08 Oct 2025 14:19:57 +0000
Manifest this update:     Wed 08 Oct 2025 14:19:57 +0000
Manifest next update:     Thu 23 Oct 2025 14:19:57 +0000
Files and hashes:         1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: Lo+apkuEdR/md4PPDneIMM23EqzHSyK57V0bMiP14gw=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86
        Validity
            Not Before: Sep 15 01:32:18 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42:
                    df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b:
                    a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c:
                    27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1:
                    5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f:
                    56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31:
                    b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf:
                    6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43:
                    d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab:
                    54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2:
                    06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d:
                    a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07:
                    16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f:
                    b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95:
                    fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5:
                    60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe:
                    7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
            X509v3 Authority Key Identifier:
                keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:86:76:3c:27:15:b7:63:90:b9:89:6e:c6:8b:a5:8f:06:29:
         56:3a:09:a7:5c:31:04:9e:bc:1c:29:7a:66:55:e3:2d:ec:04:
         f8:85:fe:e1:52:8c:f7:42:66:56:98:64:52:1e:3b:7f:d8:26:
         91:76:72:e5:fa:5c:bc:cc:f1:01:39:d0:19:f7:fc:b9:1b:19:
         2e:a7:68:dc:5c:8e:df:10:a6:5a:10:aa:1b:e4:a6:26:83:a1:
         4f:52:cf:c9:ec:03:34:0f:01:c2:ea:f3:21:2f:65:45:a0:80:
         d2:b8:6a:93:bc:fb:5f:d2:f3:8e:c8:b2:08:b2:46:3e:45:0e:
         18:7f:b2:a9:d6:4c:e1:b4:02:7f:22:bb:b7:cc:e8:10:46:7d:
         25:a6:14:71:a6:99:0c:39:c3:e1:34:29:99:18:21:41:2d:6b:
         d4:a9:b7:c8:ad:89:97:52:10:e9:36:31:86:3b:3f:f8:e2:66:
         f3:16:85:ba:a2:44:db:da:48:f1:ab:20:61:1c:12:72:48:6a:
         70:1c:62:ab:1f:f5:f5:f6:9b:29:14:e2:d4:77:db:7d:de:e1:
         8f:0c:cd:6b:45:11:34:14:0f:9e:55:f2:58:34:ea:0a:c5:13:
         90:71:9f:5a:76:5d:96:b1:99:30:ea:04:14:28:df:de:55:cf:
         96:5a:97:a5
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OEVG
NDQwQUEzNjBDMEQyMTAzNUE4MUFEMkMyMzMzOUQyMjMzRjg2MB4XDTI1MDkxNTAx
MzIxOFoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMThCMzJCRTUwMjY1MTlC
MkE0QzI1QjM0RDBCN0Q4OUVEOTE4ODFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOKjADHtV9W3J6WvyUNC37Tmvk8IC/YQ7n866f5rp4Swqb+lUA2t
flPzBZY8J+kD2aZJ/Vb/ZdS8TQ7xXMe5f52bxyfa7cGvMbGfVmc785F93UJEplbg
w2YxtQ+JTAPrxJ1F9zWI9rHPbwBoxwAB2bEbZ26hu3BD1XBIAE40Z2Tzr3KKl22r
VPMJTAltjiK59SECLAPiBr2+e4v5gU0OmzxliLmdotZ6mngYAniXx9Gd8PYHFmxm
Ail3ZF8OU5fW8rI/shuByqCNNhhTO9vXR9mV+qUsan0QkWXv7lzLUaflYPKggfbg
uupxwivMq/z+e7VQAQISP1Ez5bcpKfPsWXcCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQYsyvlAmUZsqTCWzTQt9ie2RiBqzAfBgNVHSMEGDAWgBRo70QKo2DA0hA1qBrS
wjM50iM/hjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMzkvYU85RUNxTmd3TklRTmFnYTBzSXpPZElqUDRZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYU85RUNxTmd3TklRTmFnYTBzSXpP
ZElqUDRZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjM5L2FPOUVDcU5nd05JUU5hZ2Ewc0l6T2RJalA0WS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJhnY8JxW3Y5C5iW7Gi6WPBilWOgmnXDEEnrwcKXpmVeMt7AT4hf7h
Uoz3QmZWmGRSHjt/2CaRdnLl+ly8zPEBOdAZ9/y5Gxkup2jcXI7fEKZaEKob5KYm
g6FPUs/J7AM0DwHC6vMhL2VFoIDSuGqTvPtf0vOOyLIIskY+RQ4Yf7Kp1kzhtAJ/
Iru3zOgQRn0lphRxppkMOcPhNCmZGCFBLWvUqbfIrYmXUhDpNjGGOz/44mbzFoW6
okTb2kjxqyBhHBJySGpwHGKrH/X19pspFOLUd9t93uGPDM1rRRE0FA+eVfJYNOoK
xROQcZ9adl2WsZkw6gQUKN/eVc+WWpel
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:10 2025 by rpki-client