Manifest

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.mft
File:                     dlGXDZCZooRxWB8KTTKccmKq5Ig.mft (raw, json)
Hash identifier:          bG3dAHWQHqbftvoU46CrqilPCwygpTYsHEngb0cK/w0=
Subject key identifier:   CF:FA:9D:2F:57:8A:52:70:0E:3A:98:7C:2E:27:7A:09:FB:A5:74:18
Authority key identifier: 76:51:97:0D:90:99:A2:84:71:58:1F:0A:4D:32:9C:72:62:AA:E4:88
Certificate issuer:       /CN=7651970D9099A28471581F0A4D329C7262AAE488
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dlGXDZCZooRxWB8KTTKccmKq5Ig.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.mft
Manifest number:          0C
Signing time:             Thu 08 Oct 2026 03:40:45 +0000
Manifest this update:     Thu 08 Oct 2026 03:40:45 +0000
Manifest next update:     Sat 07 Nov 2026 03:40:45 +0000
Files and hashes:         1: dlGXDZCZooRxWB8KTTKccmKq5Ig.crl (hash: mjrIpw8FAh/+U3zMJRt3wY0GK5m4UzboIys+VHWZHaA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dlGXDZCZooRxWB8KTTKccmKq5Ig.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 Oct 2026 03:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7651970D9099A28471581F0A4D329C7262AAE488
        Validity
            Not Before: Oct  6 07:20:02 2026 GMT
            Not After : Oct  6 07:13:31 2027 GMT
        Subject: CN=CFFA9D2F578A52700E3A987C2E277A09FBA57418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c3:0f:17:96:8d:5a:a1:ec:75:92:3d:72:81:
                    13:62:3e:5b:39:4b:d8:bf:47:c1:f6:8d:b6:19:c9:
                    2c:f6:70:87:f8:30:3d:31:e3:f7:5c:8f:ca:b8:b3:
                    9b:ce:0f:3c:1e:2e:a3:ac:fc:34:05:1a:6a:08:c1:
                    08:d0:b0:83:51:66:fb:70:c4:53:23:89:60:49:01:
                    81:b0:1f:47:cb:61:f9:95:a7:1c:b6:7f:4b:77:d1:
                    36:94:f8:e5:3a:7b:6d:45:a2:34:63:d4:cf:95:ab:
                    0f:bb:40:87:f9:43:57:ba:bb:eb:2d:05:0c:6c:cb:
                    ac:e7:3d:d6:27:ff:a6:89:b3:ce:f4:f1:36:e7:45:
                    f9:b4:6c:91:16:8c:1a:e4:5c:2c:96:8a:a5:d3:9b:
                    98:bc:ca:91:47:60:33:98:84:64:9e:5e:c3:95:33:
                    28:d5:8e:d7:7b:48:a7:49:35:4c:00:bb:bb:22:60:
                    ba:45:8e:63:ef:2b:31:11:4f:8c:bf:ec:fe:32:71:
                    ba:a5:46:40:8e:50:04:a2:bb:41:6c:60:15:d2:c2:
                    95:7a:c6:31:58:ae:a6:54:ae:61:87:1c:25:34:90:
                    61:29:63:d1:43:a1:27:c7:34:26:f6:ca:31:ff:ba:
                    44:29:f1:8a:12:09:30:1f:c3:a5:f6:86:d7:77:7d:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:9D:2F:57:8A:52:70:0E:3A:98:7C:2E:27:7A:09:FB:A5:74:18
            X509v3 Authority Key Identifier:
                keyid:76:51:97:0D:90:99:A2:84:71:58:1F:0A:4D:32:9C:72:62:AA:E4:88

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dlGXDZCZooRxWB8KTTKccmKq5Ig.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2328/dlGXDZCZooRxWB8KTTKccmKq5Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:51:f7:56:a6:77:8d:93:a0:7c:96:0a:55:0f:93:a8:d1:
         02:6d:aa:1f:f4:53:40:65:88:51:bf:fa:f2:f3:23:33:ec:41:
         a9:b5:02:c0:ae:61:61:e8:53:ca:02:99:fb:8a:8f:23:48:e2:
         86:df:de:e7:87:e3:30:87:c8:54:e7:2b:df:aa:97:6f:00:5d:
         b4:e0:87:9f:cc:ac:d7:31:e0:11:ab:9d:8f:9c:1e:2a:07:3c:
         d3:7f:36:02:9b:cf:91:f2:f8:75:ec:1d:ef:4c:fe:be:85:39:
         9f:60:2e:4c:79:44:50:ce:8a:86:5f:83:c5:b4:cb:66:c3:f3:
         c1:e0:90:f3:c8:1b:d5:72:b9:67:ab:4a:e5:ae:9a:76:b5:2c:
         b6:d4:1c:28:4c:89:8c:9a:26:9b:0a:d0:b6:93:11:d3:b3:54:
         9b:57:7e:93:47:fd:6e:36:6b:ed:ed:4d:29:02:91:97:8a:a8:
         f9:25:0b:86:49:b5:b4:01:ad:57:f5:3b:04:16:42:b5:47:e5:
         8a:d9:d7:6b:49:09:04:e7:96:23:f3:6c:72:ff:c2:5c:62:0f:
         c0:6e:0b:40:40:fb:5e:ed:cc:a7:0e:59:7d:48:91:98:dd:4d:
         9b:42:8f:05:8a:3d:77:cd:70:c7:cd:67:f9:3a:ef:e3:e4:21:
         03:d2:5b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:24:25 2026 by rpki-client