Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
File:                     AHMEyMeENVImB-HPrx884aIh_30.mft (raw, json)
Hash identifier:          E1qj0VzsDF3T5DigiP6newMr8GvRwfZnmNd1Ws+ciUk=
Subject key identifier:   CE:16:36:1F:10:C6:3D:AA:19:8E:97:F1:CF:6C:15:9F:47:D5:45:DF
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
Manifest number:          0869
Signing time:             Wed 08 Oct 2025 14:47:08 +0000
Manifest this update:     Wed 08 Oct 2025 14:47:08 +0000
Manifest next update:     Thu 23 Oct 2025 14:47:08 +0000
Files and hashes:         1: AHMEyMeENVImB-HPrx884aIh_30.crl (hash: 3TT0Ft4dFMNzKk9idJPeOY7BPxqCBLx/LdOb8qXHVes=)
                          2: xRsF8TDx4-WnwySXcbZc49cWczI.roa (hash: eKrM0YyVqN5xxDS2Ka+QERuzGjteBwGpzpZH+yPephE=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: Sep 15 01:41:26 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=CE16361F10C63DAA198E97F1CF6C159F47D545DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:39:b9:95:c1:ba:bc:8b:59:97:10:2e:6d:71:
                    7a:8f:e9:e6:9e:db:50:bb:58:03:99:ac:cd:39:a0:
                    27:7c:aa:af:70:eb:10:21:29:0e:d9:e2:e9:5b:f6:
                    51:ad:46:19:14:f5:98:60:ae:cb:61:aa:de:ee:b7:
                    db:6b:47:f8:0c:a8:1d:59:0d:0c:bb:62:24:1a:16:
                    40:31:0e:09:ae:88:55:5a:8f:ed:f4:97:bb:28:ac:
                    6a:d8:67:c9:33:38:c4:32:74:b5:99:b3:5a:d4:50:
                    71:e9:a3:07:bb:3b:b0:92:1a:92:16:a6:fd:46:be:
                    e2:15:b1:04:af:77:09:ef:ef:54:0d:ac:5c:e8:99:
                    1e:af:73:12:93:ce:1a:af:34:97:0c:d9:1b:58:73:
                    07:b9:c5:13:65:96:de:64:7d:74:3f:e1:c4:f0:02:
                    11:c2:ca:be:fb:af:12:6c:48:f1:40:6a:42:88:aa:
                    a3:fe:f7:cf:99:df:9e:b6:37:90:6b:9b:e6:2c:e4:
                    66:05:d3:4e:98:d3:25:59:66:ae:a1:26:f7:6f:2b:
                    3d:9a:2a:83:45:f3:09:3c:36:47:62:be:b4:35:05:
                    38:51:75:9e:76:ef:21:14:0f:8c:01:f1:b6:f7:c6:
                    6e:42:d3:01:07:62:c4:e3:14:e6:ff:2c:9e:f2:f0:
                    97:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:36:1F:10:C6:3D:AA:19:8E:97:F1:CF:6C:15:9F:47:D5:45:DF
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ee:13:a0:8f:38:1c:24:69:4e:17:fc:82:aa:4e:49:1b:4a:
         6c:aa:3e:dc:47:a0:b6:ef:23:c8:e4:ef:99:fb:25:27:64:f9:
         18:e2:df:1c:ab:78:b7:67:10:e3:f0:b7:64:fe:98:36:74:0e:
         a4:20:d2:8b:93:55:44:be:47:a7:6e:07:c7:4d:91:98:02:f8:
         ab:7a:5a:98:75:ea:4d:cc:5f:56:e8:27:6a:e1:4f:d5:30:29:
         55:95:b5:f6:d9:04:9f:24:2f:7d:55:d4:ea:d2:13:99:e5:bc:
         78:55:e9:98:75:9c:fa:05:ab:1d:1a:eb:25:00:f3:a4:9f:9f:
         47:a0:b1:30:fd:43:ae:73:b7:2f:2c:69:ae:cf:3f:5c:8a:77:
         a8:65:0b:39:f5:ff:8e:04:2f:55:16:16:e3:7c:b8:f5:3b:74:
         9e:44:52:f1:c4:ea:4b:03:3e:c7:d9:ed:1f:93:eb:22:ff:46:
         e0:9c:fb:a5:95:23:82:d5:f2:2d:67:00:d3:8b:c7:7d:57:e0:
         a7:cc:f3:cf:0b:ef:96:47:54:dc:4c:42:22:56:e7:56:10:f6:
         eb:35:55:a0:a7:8c:2a:c4:4a:e0:b0:9c:01:26:3b:18:30:c6:
         1f:5a:08:e8:39:89:b9:77:ac:5d:ea:39:f0:37:d7:03:91:6d:
         9c:b1:3e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:13 2025 by rpki-client