Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
File:                     EWYArZfDsYxb9xPsgAruppKsTME.mft (raw, json)
Hash identifier:          M1juMst2OrDCtrCD3gcyuo6UuirGo8XGg19ZlC91VVI=
Subject key identifier:   2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
Authority key identifier: 11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1
Certificate issuer:       /CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
Certificate serial:       85
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
Manifest number:          0728
Signing time:             Mon 11 Aug 2025 08:52:17 +0000
Manifest this update:     Mon 11 Aug 2025 08:52:17 +0000
Manifest next update:     Tue 26 Aug 2025 08:52:17 +0000
Files and hashes:         1: EWYArZfDsYxb9xPsgAruppKsTME.crl (hash: FzMQO+AzsmrWOHO/Jzd3ZKRxSt8MJ7g7G4J25GcNtbI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=116600AD97C3B18C5BF713EC800AEEA692AC4CC1
        Validity
            Not Before: Jul 30 06:35:16 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=2E2E731F792F6A65594CF848E42D88BDF9C33FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ce:3e:64:02:50:2a:db:98:7f:d6:63:4c:58:
                    bd:6a:ff:16:45:65:08:ed:38:f8:aa:6a:3e:80:1b:
                    41:12:33:67:e4:81:84:84:8b:6e:f7:07:58:ae:a7:
                    66:40:e1:d5:23:97:e0:f9:cb:83:38:35:4f:b9:5a:
                    30:e7:50:70:69:52:e7:aa:2e:eb:5c:45:01:ab:1f:
                    b8:49:c3:fe:0e:2d:67:49:e4:d9:11:61:78:75:75:
                    b3:ce:a9:f8:92:f9:d8:6e:eb:cb:dd:3c:4b:1c:59:
                    7b:0d:27:f0:dd:41:9d:7c:d2:ec:6a:a8:c4:de:f3:
                    80:7d:f8:44:37:90:45:ed:47:90:51:e6:95:fb:19:
                    d6:a8:49:97:19:86:6c:d1:b1:5f:f7:6b:38:20:a0:
                    d3:9d:52:e8:ae:9d:25:35:8d:e9:51:a8:3c:b7:86:
                    86:23:5f:a4:4a:ea:5f:ca:87:bc:76:37:86:34:f9:
                    e5:c0:25:6d:de:9c:a6:5d:4b:00:62:c9:c0:10:1d:
                    54:34:1b:7a:8d:5c:a2:41:36:67:a2:29:34:f3:eb:
                    7b:62:42:aa:da:4c:d6:71:f2:93:ca:c8:9a:3f:70:
                    e8:76:8a:a5:11:30:19:61:77:e6:b1:2a:a4:5f:5f:
                    46:69:63:cc:74:88:19:e3:1d:d9:e1:93:d0:89:09:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:73:1F:79:2F:6A:65:59:4C:F8:48:E4:2D:88:BD:F9:C3:3F:AE
            X509v3 Authority Key Identifier:
                keyid:11:66:00:AD:97:C3:B1:8C:5B:F7:13:EC:80:0A:EE:A6:92:AC:4C:C1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EWYArZfDsYxb9xPsgAruppKsTME.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/931/EWYArZfDsYxb9xPsgAruppKsTME.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:35:ae:48:b9:b0:18:ad:81:14:22:7f:97:0f:a6:64:a4:66:
         c6:f6:95:22:b6:1e:0d:46:c9:1f:2a:8e:a0:38:30:1a:5a:2f:
         b0:1d:b2:c3:12:81:1a:63:7f:d2:6f:9e:19:4f:34:6d:a0:53:
         ff:62:c7:96:93:32:29:65:4e:48:2d:f3:df:12:8d:e3:45:35:
         d6:2a:ad:2c:d7:4c:99:b0:3e:e7:c8:d7:16:bf:d5:71:1d:87:
         d0:6e:76:d6:af:25:98:9d:32:3a:0b:9a:9a:46:8e:4b:01:75:
         71:2d:fa:61:51:4a:83:f4:8c:9d:9f:20:c8:b7:a8:c9:5d:f9:
         ed:1e:db:03:92:1f:fc:92:1a:18:da:02:26:b8:d8:25:64:84:
         f4:60:6b:9f:97:7f:ea:0a:5e:7d:4e:67:df:cb:30:f3:5d:8d:
         ce:64:22:af:9d:bc:3b:4a:ec:25:1c:18:1c:c6:2c:03:fd:21:
         d7:82:f3:e4:de:05:51:0f:dc:cc:ad:ee:30:05:f5:f3:53:df:
         f8:46:90:08:35:d9:c7:33:e9:53:d8:b3:02:a0:5a:3c:4b:ba:
         c3:f8:2e:07:39:31:80:33:6e:eb:b7:a8:e9:f2:74:50:e5:83:
         f2:33:8e:3c:a0:3d:2f:73:cf:28:62:01:9a:de:07:45:25:88:
         c9:b2:d9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:56:49 2025 by rpki-client