Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
File:                     lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft (raw, json)
Hash identifier:          gYC0yzcZkiC14HsmRz1Yi7gkLb1/yJVSYncVvOz8a2w=
Subject key identifier:   30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
Authority key identifier: 96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8
Certificate issuer:       /CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
Certificate serial:       01
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
Manifest number:          1A
Signing time:             Sat 23 Aug 2025 07:21:15 +0000
Manifest this update:     Sat 23 Aug 2025 07:21:15 +0000
Manifest next update:     Sun 07 Sep 2025 07:21:15 +0000
Files and hashes:         1: lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl (hash: v5ee7/2ZkBvetKOjCuldU3yJAkwFsrmwNI0kweGi3/U=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1 (0x1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
        Validity
            Not Before: Aug 19 02:24:52 2025 GMT
            Not After : Aug 19 02:19:36 2026 GMT
        Subject: CN=30DDD543F4601A7C1EB62C5688A0E66B69709719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:b6:ea:8f:ae:dc:ee:6f:24:dd:e3:25:2c:
                    f0:81:7c:c5:47:6e:c1:cb:d8:0b:f7:7c:b3:78:ef:
                    87:8c:7b:ee:b6:be:7c:3a:0d:14:18:99:e5:33:9d:
                    b6:f7:fe:d1:dd:8a:54:25:4c:84:bf:72:61:70:aa:
                    e4:cb:be:4f:cf:65:85:b9:b5:11:1f:a7:85:d6:96:
                    ef:12:ee:fd:13:d5:c5:f3:f2:d8:25:d7:64:2d:31:
                    34:97:62:3e:a7:e2:7f:6d:aa:a9:38:8f:03:fe:3c:
                    1a:3c:4a:3b:d9:ec:38:8b:3d:03:fb:a1:c7:c0:f8:
                    ae:67:ac:10:59:d3:d6:03:01:42:82:48:47:be:e0:
                    cc:b6:07:3d:98:b1:f5:1a:32:5a:bd:ee:26:bc:02:
                    2b:21:c8:87:61:33:83:06:16:aa:50:05:8c:2f:3a:
                    62:d8:f9:a3:b5:e8:81:d8:f4:80:21:58:ca:d0:93:
                    6e:af:db:5b:bf:af:8e:4b:fe:44:ed:63:d7:86:5a:
                    75:56:16:38:b9:b7:cf:78:87:0b:41:b8:72:b6:7b:
                    00:05:fb:68:4d:18:c1:dd:16:82:61:6c:dc:54:65:
                    87:73:48:63:97:36:69:e9:2a:6f:63:1b:45:e5:30:
                    9c:34:51:bf:14:ba:9c:33:02:0a:74:dd:72:73:20:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
            X509v3 Authority Key Identifier:
                keyid:96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:05:51:ea:77:f7:72:4b:4f:48:2b:5f:e9:8d:58:06:1b:
         4d:76:65:80:ba:62:4c:cb:51:62:1c:15:57:20:e6:23:4a:54:
         7a:c3:7f:6b:40:9f:34:16:6e:d4:8f:f1:43:18:73:36:8c:38:
         3d:53:d0:76:b1:23:e0:1b:c6:7c:f5:0f:bd:e7:8a:64:9e:d3:
         fc:15:90:44:54:7b:27:18:a2:15:e4:63:4d:7e:02:66:9d:9d:
         fa:05:6d:40:bb:bb:c4:fe:02:bc:74:cf:51:19:ce:76:b7:30:
         ad:c7:e5:5c:6a:ec:30:84:68:f9:de:2a:bb:fb:13:f6:23:8c:
         50:5b:ee:db:b1:8c:bf:39:96:1b:74:6e:f2:5c:2b:59:57:0d:
         15:83:db:d7:88:ce:0d:ec:92:98:7c:f4:61:d0:bd:fb:76:33:
         0c:80:50:af:96:09:a3:83:ab:9a:07:8a:33:fe:e0:f8:ce:fa:
         7f:04:c3:1f:52:0f:c5:55:60:70:a2:fe:8a:a6:31:2c:0f:17:
         b9:33:31:a6:67:67:e4:2b:7c:22:5d:52:7a:15:e5:0f:8f:a4:
         f6:62:0e:84:b4:e4:39:3a:5d:9b:2a:e5:94:4e:04:6d:a5:4a:
         c0:c4:a3:0e:9e:10:63:ac:9e:bb:fe:3b:5c:98:73:5f:7c:81:
         d5:15:bc:3a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBATANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjYx
RUNEOUQ3RDU4NzAzQjhGRUM4NjE4M0E2MjI1NDUwQURGMEY4MB4XDTI1MDgxOTAy
MjQ1MloXDTI2MDgxOTAyMTkzNlowMzExMC8GA1UEAxMoMzBEREQ1NDNGNDYwMUE3
QzFFQjYyQzU2ODhBMEU2NkI2OTcwOTcxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMjtuqPrtzubyTd4yUs8IF8xUduwcvYC/d8s3jvh4x77ra+fDoN
FBiZ5TOdtvf+0d2KVCVMhL9yYXCq5Mu+T89lhbm1ER+nhdaW7xLu/RPVxfPy2CXX
ZC0xNJdiPqfif22qqTiPA/48GjxKO9nsOIs9A/uhx8D4rmesEFnT1gMBQoJIR77g
zLYHPZix9RoyWr3uJrwCKyHIh2EzgwYWqlAFjC86Ytj5o7Xogdj0gCFYytCTbq/b
W7+vjkv+RO1j14ZadVYWOLm3z3iHC0G4crZ7AAX7aE0Ywd0WgmFs3FRlh3NIY5c2
aekqb2MbReUwnDRRvxS6nDMCCnTdcnMgdAsCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQw3dVD9GAafB62LFaIoOZraXCXGTAfBgNVHSMEGDAWgBSWYezZ19WHA7j+yGGD
piJUUK3w+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTgvbG1IczJkZlZod080X3NoaGc2WWlWRkN0OFBnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbG1IczJkZlZod080X3NoaGc2WWlW
RkN0OFBnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE4L2xtSHMyZGZWaHdPNF9zaGhnNllpVkZDdDhQZy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAM0gVR6nf3cktPSCtf6Y1YBhtNdmWAumJMy1FiHBVXIOYjSlR6w39r
QJ80Fm7Uj/FDGHM2jDg9U9B2sSPgG8Z89Q+954pkntP8FZBEVHsnGKIV5GNNfgJm
nZ36BW1Au7vE/gK8dM9RGc52tzCtx+VcauwwhGj53iq7+xP2I4xQW+7bsYy/OZYb
dG7yXCtZVw0Vg9vXiM4N7JKYfPRh0L37djMMgFCvlgmjg6uaB4oz/uD4zvp/BMMf
Ug/FVWBwov6KpjEsDxe5MzGmZ2fkK3wiXVJ6FeUPj6T2Yg6EtOQ5Ol2bKuWUTgRt
pUrAxKMOnhBjrJ67/jtcmHNffIHVFbw6
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:49 2025 by rpki-client