Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
File:                     lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft (raw, json)
Hash identifier:          wEI67dHnhzuC+iVtohy+qM9RauS50jIB1bhJBA4112A=
Subject key identifier:   30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
Authority key identifier: 96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8
Certificate issuer:       /CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
Certificate serial:       03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
Manifest number:          0177
Signing time:             Mon 20 Oct 2025 19:21:13 +0000
Manifest this update:     Mon 20 Oct 2025 19:21:13 +0000
Manifest next update:     Tue 04 Nov 2025 19:21:13 +0000
Files and hashes:         1: lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl (hash: 3xBEJKgUVupruWuPE+Xkr56R4dtwBQVL7w7V6x0IL1o=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
        Validity
            Not Before: Oct 15 01:39:52 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=30DDD543F4601A7C1EB62C5688A0E66B69709719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:b6:ea:8f:ae:dc:ee:6f:24:dd:e3:25:2c:
                    f0:81:7c:c5:47:6e:c1:cb:d8:0b:f7:7c:b3:78:ef:
                    87:8c:7b:ee:b6:be:7c:3a:0d:14:18:99:e5:33:9d:
                    b6:f7:fe:d1:dd:8a:54:25:4c:84:bf:72:61:70:aa:
                    e4:cb:be:4f:cf:65:85:b9:b5:11:1f:a7:85:d6:96:
                    ef:12:ee:fd:13:d5:c5:f3:f2:d8:25:d7:64:2d:31:
                    34:97:62:3e:a7:e2:7f:6d:aa:a9:38:8f:03:fe:3c:
                    1a:3c:4a:3b:d9:ec:38:8b:3d:03:fb:a1:c7:c0:f8:
                    ae:67:ac:10:59:d3:d6:03:01:42:82:48:47:be:e0:
                    cc:b6:07:3d:98:b1:f5:1a:32:5a:bd:ee:26:bc:02:
                    2b:21:c8:87:61:33:83:06:16:aa:50:05:8c:2f:3a:
                    62:d8:f9:a3:b5:e8:81:d8:f4:80:21:58:ca:d0:93:
                    6e:af:db:5b:bf:af:8e:4b:fe:44:ed:63:d7:86:5a:
                    75:56:16:38:b9:b7:cf:78:87:0b:41:b8:72:b6:7b:
                    00:05:fb:68:4d:18:c1:dd:16:82:61:6c:dc:54:65:
                    87:73:48:63:97:36:69:e9:2a:6f:63:1b:45:e5:30:
                    9c:34:51:bf:14:ba:9c:33:02:0a:74:dd:72:73:20:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
            X509v3 Authority Key Identifier:
                keyid:96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ae:de:b1:c7:46:e8:a4:f3:2c:ff:77:0a:f9:60:7b:a7:17:
         59:6b:0e:48:c3:82:19:91:02:30:38:b4:48:98:3f:b0:11:4c:
         b6:eb:34:08:6e:eb:b2:01:f1:04:73:ff:58:9d:55:8f:17:bf:
         56:3c:8a:aa:cb:00:84:a3:2a:2c:de:44:15:37:f9:00:ce:47:
         29:81:01:17:f3:7a:4c:20:81:2b:fb:25:3d:68:15:e9:94:5d:
         ee:76:15:38:94:43:4f:71:e6:d6:31:94:8f:88:21:78:58:65:
         d2:23:87:d0:de:8d:47:6d:20:c9:93:95:40:c7:cc:60:6e:05:
         c4:d6:de:d2:02:79:e1:6c:1d:92:3f:b4:5d:48:a1:41:67:50:
         9c:25:22:35:58:3e:05:46:a6:15:29:d3:2c:ec:2d:1c:01:a5:
         be:0f:6c:64:a3:55:35:1c:34:ae:25:d3:52:07:46:1a:48:3a:
         27:ce:3a:a4:8b:da:22:f7:6f:47:3f:6c:d8:39:28:14:e9:6a:
         b4:5e:70:a5:6c:5b:4a:3f:ca:48:a7:3d:66:f3:6c:cb:a2:b5:
         9d:6a:9a:68:0d:18:1d:b8:88:e9:f9:9d:02:13:12:1f:50:36:
         19:54:1d:86:00:12:de:c0:80:d3:bb:47:d6:27:69:78:b9:e9:
         a9:f6:fe:9b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjYx
RUNEOUQ3RDU4NzAzQjhGRUM4NjE4M0E2MjI1NDUwQURGMEY4MB4XDTI1MTAxNTAx
Mzk1MloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzBEREQ1NDNGNDYwMUE3
QzFFQjYyQzU2ODhBMEU2NkI2OTcwOTcxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMjtuqPrtzubyTd4yUs8IF8xUduwcvYC/d8s3jvh4x77ra+fDoN
FBiZ5TOdtvf+0d2KVCVMhL9yYXCq5Mu+T89lhbm1ER+nhdaW7xLu/RPVxfPy2CXX
ZC0xNJdiPqfif22qqTiPA/48GjxKO9nsOIs9A/uhx8D4rmesEFnT1gMBQoJIR77g
zLYHPZix9RoyWr3uJrwCKyHIh2EzgwYWqlAFjC86Ytj5o7Xogdj0gCFYytCTbq/b
W7+vjkv+RO1j14ZadVYWOLm3z3iHC0G4crZ7AAX7aE0Ywd0WgmFs3FRlh3NIY5c2
aekqb2MbReUwnDRRvxS6nDMCCnTdcnMgdAsCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQw3dVD9GAafB62LFaIoOZraXCXGTAfBgNVHSMEGDAWgBSWYezZ19WHA7j+yGGD
piJUUK3w+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTgvbG1IczJkZlZod080X3NoaGc2WWlWRkN0OFBnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbG1IczJkZlZod080X3NoaGc2WWlW
RkN0OFBnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE4L2xtSHMyZGZWaHdPNF9zaGhnNllpVkZDdDhQZy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCrt6xx0bopPMs/3cK+WB7pxdZaw5Iw4IZkQIwOLRImD+wEUy26zQI
buuyAfEEc/9YnVWPF79WPIqqywCEoyos3kQVN/kAzkcpgQEX83pMIIEr+yU9aBXp
lF3udhU4lENPcebWMZSPiCF4WGXSI4fQ3o1HbSDJk5VAx8xgbgXE1t7SAnnhbB2S
P7RdSKFBZ1CcJSI1WD4FRqYVKdMs7C0cAaW+D2xko1U1HDSuJdNSB0YaSDonzjqk
i9oi929HP2zYOSgU6Wq0XnClbFtKP8pIpz1m82zLorWdappoDRgduIjp+Z0CExIf
UDYZVB2GABLewIDTu0fWJ2l4uemp9v6b
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:14:45 2025 by rpki-client