Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
File:                     JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json)
Hash identifier:          jXExLZ0SEH9Fer8J8X0c89fZ6cTA+Fpw4p7lVPjMUlc=
Subject key identifier:   31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
Manifest number:          0870
Signing time:             Mon 20 Oct 2025 19:24:51 +0000
Manifest this update:     Mon 20 Oct 2025 19:24:51 +0000
Manifest next update:     Tue 04 Nov 2025 19:24:51 +0000
Files and hashes:         1: -hY0Txahey-phWtRvAvwAIYth9A.roa (hash: XBTF2xX2XSiXh35iU+RSDBwa9pjdewfeGBpMfN7D1Vw=)
                          2: DNGsxgJcYAF1GoooEJH5DhK4XVk.roa (hash: TiJfYy1mOUG4j6zN8EP5xtYONf+2Jh7gIA1xUqIc7EY=)
                          3: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: IZPU/XiO18rdZwCZnGhIjdMKvj5JSyB+ufkPH7cDFXA=)
                          4: PXGXVRY9PugPn_auWRS0jrR_ExY.roa (hash: mCzu8j4CHSQkR3klyKbwZGvNIEZQjlLoRad9h38bCR4=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Oct 15 01:42:42 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46:
                    2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15:
                    df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac:
                    c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62:
                    64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40:
                    28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2:
                    a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d:
                    4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8:
                    d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed:
                    0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e:
                    61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c:
                    e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56:
                    cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a:
                    3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de:
                    39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef:
                    a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c:
                    28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f7:31:12:3c:02:b0:e2:9e:95:17:4b:77:b3:56:c2:64:37:
         74:a4:b9:73:9f:b3:31:3a:c5:4c:b0:42:63:8b:9d:3a:b8:d2:
         f3:26:92:8e:58:ca:f5:f6:6c:4e:ae:40:2c:fe:3e:00:36:b1:
         d4:e4:3c:5f:88:10:37:69:6d:ff:b9:2f:aa:19:bc:2e:10:86:
         df:75:48:49:dc:94:c0:f1:17:d7:15:6d:2b:0c:f5:b4:83:be:
         a7:f9:5f:cf:a4:87:54:c2:7a:32:38:63:5c:a1:f2:0c:b9:4a:
         4d:23:cf:0e:51:42:8f:51:ba:3b:d2:df:3c:c5:6d:9a:c9:55:
         39:1a:04:c8:1e:57:98:04:3e:63:13:f9:c6:a8:41:55:2a:96:
         9e:3c:27:98:1d:5c:5d:1f:4c:c7:30:cc:ab:41:0a:53:cd:d6:
         29:23:54:34:6d:45:60:77:d7:68:15:fb:d6:be:3d:ff:55:ae:
         d2:84:8e:2d:a1:c5:a2:39:f4:de:23:6f:a4:fb:ba:a8:ad:24:
         83:d8:f7:1c:00:22:62:10:39:5c:76:b9:5c:d9:93:7a:ee:f7:
         ef:ae:3d:f2:c4:6c:90:68:51:63:70:13:fb:09:4c:e5:bc:72:
         03:96:18:77:8a:47:d7:68:72:fa:bb:ab:e7:91:e5:f1:3c:db:
         21:5e:b0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:15:12 2025 by rpki-client