Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
File:                     nbB2TG38Hj32vVgOpplKHnCY9So.mft (raw, json)
Hash identifier:          KSVvipTDnvWMx+5OkNhbx0292wB502hb2mZAFTCGuTc=
Subject key identifier:   E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
Manifest number:          08E4
Signing time:             Mon 20 Oct 2025 14:57:52 +0000
Manifest this update:     Mon 20 Oct 2025 14:57:52 +0000
Manifest next update:     Tue 04 Nov 2025 14:57:52 +0000
Files and hashes:         1: Kz91HkeQjh4fK9IQa14DIBLhHcs.roa (hash: OiZeIG5Z7iJl2KPslUN7LXpNree/aPmzHo1KraDZpAE=)
                          2: LJbzIXvN8xJ5rryQ2EMXAaJTu48.roa (hash: 9R+mB9XABKoH3ITjsCxBrQEitFyGiZxb4HDCY7Kkm9Q=)
                          3: PZPly0ziW6a6cqb3haW1z6kyLr8.roa (hash: iN6+y6OUKrZGKu8MY1RLNYveH/F5ynJsx07LnMfuZ7s=)
                          4: fBja1lE4uv85FlzI0-EMZ9b-6RM.roa (hash: Z3zQ/hl+T1m07oIJ5i1YjjkGJT6tpXFBrXo7YwZpkK4=)
                          5: nbB2TG38Hj32vVgOpplKHnCY9So.crl (hash: KD/LnMJDU3bP5sAbjkfpqP2j3Zhoh2nxAoQuv1dpwvg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: Oct 15 01:41:40 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=E50568925C7D8ADFCF4D83CDE73762406C9C7E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:cc:bb:f9:61:09:99:bd:48:ad:3b:d8:bc:
                    2b:13:55:3c:5d:3a:b2:69:0e:96:2b:40:bb:36:df:
                    fa:5d:39:7e:ed:85:9c:7e:9b:5a:34:07:c9:64:0d:
                    33:85:5a:4b:7f:17:87:d5:38:7b:a1:6f:0e:b4:e8:
                    f6:94:6a:b6:f5:45:55:91:f0:23:56:cc:83:99:20:
                    77:22:32:c5:d5:b3:34:05:18:d3:c0:38:89:81:e1:
                    60:fa:63:02:37:f1:dc:86:6a:99:13:66:7d:56:08:
                    ee:e1:d5:cd:db:34:9a:53:19:a7:e1:ce:86:d1:d9:
                    46:0f:1c:b7:ab:ad:01:d1:a5:21:6c:7c:b5:2e:69:
                    3c:e6:54:65:4e:83:a8:9f:b7:79:a8:65:87:78:fa:
                    25:58:87:a4:da:6e:6a:5e:1d:5e:ca:e8:87:66:30:
                    fb:a0:91:1c:85:9e:78:7d:86:14:8c:6e:d4:b8:9a:
                    f6:67:04:ce:31:42:86:98:d3:ee:c4:71:ef:30:94:
                    55:1f:33:6c:f0:91:b5:65:4e:b4:48:20:40:d7:77:
                    48:68:a4:66:d5:40:c1:3f:54:26:3b:cc:ea:b7:49:
                    78:3d:e6:2e:24:4a:e2:9c:70:8e:dc:be:f1:80:81:
                    14:b1:83:68:74:de:ad:2d:b1:9c:5d:89:db:d9:28:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:05:68:92:5C:7D:8A:DF:CF:4D:83:CD:E7:37:62:40:6C:9C:7E:06
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:57:e6:af:03:9c:9c:3b:a4:fb:28:c8:ed:53:d1:e5:a9:67:
         09:9b:eb:ba:2a:9c:18:3f:80:c5:6a:54:cd:9a:7b:62:01:4f:
         66:85:dd:3e:4f:37:74:32:a1:48:d1:75:92:18:3d:4f:3a:b9:
         38:d1:5a:b3:55:28:6a:b4:dd:d9:c8:c7:59:f6:ed:f4:62:de:
         86:6d:9b:e5:f8:4e:18:b9:87:6b:11:49:d2:a2:2b:54:f8:4f:
         f1:08:19:fa:78:b6:48:59:be:a5:41:3b:df:da:c3:f4:d6:1f:
         cc:3d:78:31:fc:65:43:95:94:af:3e:09:1c:21:b0:a4:d6:33:
         cc:7c:cf:c4:68:00:b6:fd:90:90:32:d5:0e:a8:c3:99:c5:f6:
         a3:23:8e:d8:2e:d5:65:11:1d:77:1c:39:a0:94:f8:12:37:b4:
         c8:af:ec:d5:7e:dd:57:7d:7e:ff:91:39:04:04:09:a3:51:d2:
         7b:c6:02:e1:e3:34:c0:53:d2:08:86:91:6c:e7:07:e7:a6:4a:
         b7:b4:02:8b:43:e8:5c:1e:95:6a:35:0f:3e:f4:3f:94:a9:41:
         ff:1b:bc:fc:a0:fd:07:25:f7:f4:d9:4e:a4:60:33:3e:1d:af:
         a8:0e:e9:5d:dd:ae:d8:ce:1b:bc:90:88:11:7a:ba:9b:2b:de:
         99:55:18:17
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOURC
MDc2NEM2REZDMUUzREY2QkQ1ODBFQTY5OTRBMUU3MDk4RjUyQTAeFw0yNTEwMTUw
MTQxNDBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU1MDU2ODkyNUM3RDhB
REZDRjREODNDREU3Mzc2MjQwNkM5QzdFMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj2cy7+WEJmb1IrTvYvCsTVTxdOrJpDpYrQLs23/pdOX7thZx+
m1o0B8lkDTOFWkt/F4fVOHuhbw606PaUarb1RVWR8CNWzIOZIHciMsXVszQFGNPA
OImB4WD6YwI38dyGapkTZn1WCO7h1c3bNJpTGafhzobR2UYPHLerrQHRpSFsfLUu
aTzmVGVOg6ift3moZYd4+iVYh6TabmpeHV7K6IdmMPugkRyFnnh9hhSMbtS4mvZn
BM4xQoaY0+7Ece8wlFUfM2zwkbVlTrRIIEDXd0hopGbVQME/VCY7zOq3SXg95i4k
SuKccI7cvvGAgRSxg2h03q0tsZxdidvZKFpLAgMBAAGjggJBMIICPTAdBgNVHQ4E
FgQU5QVoklx9it/PTYPN5zdiQGycfgYwHwYDVR0jBBgwFoAUnbB2TG38Hj32vVgO
pplKHnCY9SowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDYzL25iQjJURzM4SGozMnZWZ09wcGxLSG5DWTlTby5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL25iQjJURzM4SGozMnZWZ09wcGxL
SG5DWTlTby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA2My9uYkIyVEczOEhqMzJ2VmdPcHBsS0huQ1k5U28u
bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAFlfmrwOcnDuk+yjI7VPR5alnCZvruiqcGD+AxWpUzZp7YgFPZoXd
Pk83dDKhSNF1khg9Tzq5ONFas1UoarTd2cjHWfbt9GLehm2b5fhOGLmHaxFJ0qIr
VPhP8QgZ+ni2SFm+pUE739rD9NYfzD14MfxlQ5WUrz4JHCGwpNYzzHzPxGgAtv2Q
kDLVDqjDmcX2oyOO2C7VZREddxw5oJT4Eje0yK/s1X7dV31+/5E5BAQJo1HSe8YC
4eM0wFPSCIaRbOcH56ZKt7QCi0PoXB6VajUPPvQ/lKlB/xu8/KD9ByX39NlOpGAz
Ph2vqA7pXd2u2M4bvJCIEXq6myvemVUYFw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:26:16 2025 by rpki-client