Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
File:                     aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json)
Hash identifier:          PLxENTIUV1MsfW30MrDbfWMO48wvFjzES+TrbBAxN5k=
Subject key identifier:   18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86
Certificate issuer:       /CN=68EF440AA360C0D21035A81AD2C23339D2233F86
Certificate serial:       05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
Manifest number:          01C0
Signing time:             Sat 23 Aug 2025 15:55:27 +0000
Manifest this update:     Sat 23 Aug 2025 15:55:27 +0000
Manifest next update:     Sun 07 Sep 2025 15:55:27 +0000
Files and hashes:         1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: 97Ayo4Bl/ph2UTdHfFVKVuZcBhM/mXJU7LPsmhrYPK0=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 18:40:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86
        Validity
            Not Before: Aug 15 01:37:23 2025 GMT
            Not After : Aug 15 01:30:02 2026 GMT
        Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42:
                    df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b:
                    a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c:
                    27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1:
                    5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f:
                    56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31:
                    b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf:
                    6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43:
                    d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab:
                    54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2:
                    06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d:
                    a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07:
                    16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f:
                    b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95:
                    fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5:
                    60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe:
                    7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec:
                    59:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB
            X509v3 Authority Key Identifier:
                keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:3b:f7:08:df:5b:f1:0b:7a:73:42:8c:b6:da:ee:4f:11:
         5a:65:0c:b5:ad:34:ee:bb:a7:51:30:3e:00:1e:50:d0:43:5f:
         65:f8:96:39:11:1c:d7:b1:23:f7:22:03:3a:d9:e1:52:7a:d6:
         71:d4:c1:b1:e1:c9:b6:dd:9b:7b:f9:55:69:03:0d:46:f7:e3:
         08:d6:aa:74:57:a2:3e:7b:32:58:cf:56:4d:4c:1f:98:9c:d4:
         5d:80:96:b7:13:21:da:1b:81:e0:4e:a6:fc:fa:9d:41:34:b2:
         e6:95:9d:d3:6d:bf:12:3c:42:9d:08:3a:08:fb:2d:ec:89:db:
         52:14:98:1d:d8:a9:58:1c:0f:01:c2:d3:69:e2:6a:8b:6e:2c:
         eb:1f:af:f2:95:b5:34:99:0d:6f:cb:36:2a:3c:1d:13:7f:9b:
         25:24:d3:77:91:dc:ae:ff:a3:a4:ed:d1:58:a0:36:44:3d:02:
         47:65:d2:94:2c:d8:ed:dc:d8:de:b7:72:2d:6a:55:d4:f7:b9:
         68:0e:8c:ea:77:8c:e2:2f:2d:b2:e8:94:bb:9f:d1:06:b4:1c:
         86:36:83:67:dc:6f:66:21:37:78:ad:a7:ae:5a:3b:20:05:8f:
         df:b5:92:77:dc:d7:6f:ef:9b:fb:75:5c:4b:d8:aa:3f:b3:e9:
         86:fe:d5:51
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OEVG
NDQwQUEzNjBDMEQyMTAzNUE4MUFEMkMyMzMzOUQyMjMzRjg2MB4XDTI1MDgxNTAx
MzcyM1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMThCMzJCRTUwMjY1MTlC
MkE0QzI1QjM0RDBCN0Q4OUVEOTE4ODFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOKjADHtV9W3J6WvyUNC37Tmvk8IC/YQ7n866f5rp4Swqb+lUA2t
flPzBZY8J+kD2aZJ/Vb/ZdS8TQ7xXMe5f52bxyfa7cGvMbGfVmc785F93UJEplbg
w2YxtQ+JTAPrxJ1F9zWI9rHPbwBoxwAB2bEbZ26hu3BD1XBIAE40Z2Tzr3KKl22r
VPMJTAltjiK59SECLAPiBr2+e4v5gU0OmzxliLmdotZ6mngYAniXx9Gd8PYHFmxm
Ail3ZF8OU5fW8rI/shuByqCNNhhTO9vXR9mV+qUsan0QkWXv7lzLUaflYPKggfbg
uupxwivMq/z+e7VQAQISP1Ez5bcpKfPsWXcCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQYsyvlAmUZsqTCWzTQt9ie2RiBqzAfBgNVHSMEGDAWgBRo70QKo2DA0hA1qBrS
wjM50iM/hjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMzkvYU85RUNxTmd3TklRTmFnYTBzSXpPZElqUDRZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYU85RUNxTmd3TklRTmFnYTBzSXpP
ZElqUDRZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjM5L2FPOUVDcU5nd05JUU5hZ2Ewc0l6T2RJalA0WS5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdjzv3CN9b8Qt6c0KMttruTxFaZQy1rTTuu6dRMD4AHlDQQ19l+JY5
ERzXsSP3IgM62eFSetZx1MGx4cm23Zt7+VVpAw1G9+MI1qp0V6I+ezJYz1ZNTB+Y
nNRdgJa3EyHaG4HgTqb8+p1BNLLmlZ3Tbb8SPEKdCDoI+y3sidtSFJgd2KlYHA8B
wtNp4mqLbizrH6/ylbU0mQ1vyzYqPB0Tf5slJNN3kdyu/6Ok7dFYoDZEPQJHZdKU
LNjt3Njet3ItalXU97loDozqd4ziLy2y6JS7n9EGtByGNoNn3G9mITd4raeuWjsg
BY/ftZJ33Ndv75v7dVxL2Ko/s+mG/tVR
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:42:29 2025 by rpki-client