Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
File:                     4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json)
Hash identifier:          fCJf+rlXNwt2bSkzW5ylYgLMDItukGVlkeMgER1QRFU=
Subject key identifier:   51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       66
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
Manifest number:          0F4C
Signing time:             Mon 20 Oct 2025 22:35:50 +0000
Manifest this update:     Mon 20 Oct 2025 22:35:50 +0000
Manifest next update:     Tue 04 Nov 2025 22:35:50 +0000
Files and hashes:         1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: +TkEU5o4Tgr1S8cJ3qC5chfjH3rWBUi0svE4kZtntsI=)
                          2: 8pHUS4lwXU7NtzvaexhQoV7N5qg.roa (hash: QYtQjNVp28H/4A6E0hwPfz4dJqsmOAbTLINutHHPQ0c=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Oct 15 01:33:43 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7:
                    1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8:
                    8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84:
                    5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1:
                    db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d:
                    29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06:
                    d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03:
                    38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36:
                    81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2:
                    8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1:
                    c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14:
                    ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9:
                    57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18:
                    ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12:
                    73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d:
                    d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5:
                    fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:3d:89:45:2c:2c:d7:39:cf:b1:73:6f:2b:cd:63:e7:ad:d9:
         5c:23:11:a4:70:24:af:b8:31:99:35:82:c5:48:90:c5:73:b9:
         7f:ea:52:c0:34:03:49:0d:e5:57:7a:21:9e:79:ed:08:3b:4c:
         9e:1b:8b:c8:01:4c:f8:ba:b8:ac:82:f0:a5:ae:32:ca:4d:08:
         0a:fc:9d:8f:b6:1a:89:30:1f:9c:0b:93:c4:5c:66:af:a9:b5:
         c0:b7:3e:aa:12:aa:10:0d:e3:a4:9a:49:59:c2:7e:1d:38:30:
         0c:fc:ec:a3:03:2a:f7:5f:10:13:c1:0b:f2:71:95:ce:f4:67:
         18:9e:6d:45:e1:a5:10:cf:19:83:49:83:2f:55:46:a2:3a:73:
         81:29:e8:cf:6c:22:05:ec:a3:20:d1:ef:6e:8a:db:7f:63:75:
         56:8c:71:b9:c8:3a:87:c6:7e:53:a9:a1:26:82:0c:da:c4:4f:
         07:7d:51:0d:b8:fd:a4:63:84:dd:5c:b0:ed:88:8e:52:9f:45:
         22:76:4d:30:1c:3a:88:8f:50:94:07:4a:4f:79:ab:39:77:0b:
         44:64:3c:71:6b:0d:37:c0:58:9b:cc:20:19:80:b0:d1:86:40:
         80:82:64:07:56:3c:40:bd:8d:52:b5:97:9f:3c:cd:b6:d3:39:
         17:4c:ef:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:01:09 2025 by rpki-client