Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
File:                     YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft (raw, json)
Hash identifier:          8SP+LQ0/nLPYlDYRPSaOobCylWl+RYJ8lKW04YAEZd4=
Subject key identifier:   DA:99:A9:D5:21:29:E4:40:37:AA:D7:43:63:01:EC:E5:E8:25:01:6A
Authority key identifier: 62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3
Certificate issuer:       /CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
Certificate serial:       2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
Manifest number:          089A
Signing time:             Tue 21 Oct 2025 06:56:37 +0000
Manifest this update:     Tue 21 Oct 2025 06:56:37 +0000
Manifest next update:     Wed 05 Nov 2025 06:56:37 +0000
Files and hashes:         1: YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl (hash: 8cOF5l/VGaZodxLyrzTG6aDH7MPS6NiNIfV1RcTWH3w=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 07:08:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62199A48F1A71ED1809320C47028F0279C1D9EE3
        Validity
            Not Before: Oct 15 01:36:48 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=DA99A9D52129E44037AAD7436301ECE5E825016A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:52:87:04:af:a6:a7:1a:3f:59:28:0d:10:71:
                    81:9e:16:1d:ee:bc:cc:4a:6c:01:dd:4e:69:07:f7:
                    5e:1a:08:58:bb:c3:93:06:65:7c:6b:9f:b3:5d:7c:
                    46:57:4d:07:ed:55:97:10:32:e1:3b:34:76:39:be:
                    f8:74:a9:73:5f:2b:f1:f0:62:76:95:c6:fb:27:b6:
                    b6:a4:dc:d0:35:db:07:54:7d:c6:d8:0a:b7:ae:8a:
                    30:bb:a1:d0:f4:a7:22:3e:3b:dc:8a:e9:76:aa:f6:
                    0b:08:c5:c3:0b:75:c2:ee:27:96:f3:c7:1f:6b:b2:
                    dc:72:10:be:f6:d6:80:af:80:0d:4e:cf:e6:74:39:
                    a2:81:0a:05:8e:95:f1:62:5d:cf:3e:e4:9e:bc:97:
                    cf:e3:be:aa:8c:af:f7:03:b6:03:54:1d:da:d7:d8:
                    53:4d:48:2d:f0:4e:c5:e4:9b:16:06:79:5f:d8:f3:
                    ae:fb:ad:a6:f8:21:97:4f:11:25:e6:85:27:e2:1d:
                    2a:9d:25:ba:c1:ac:62:17:6c:4d:8b:b0:eb:12:d0:
                    aa:95:bf:f0:9a:70:80:bb:41:4c:ea:cd:6e:bf:8c:
                    55:d3:a7:ec:52:16:65:5f:e2:5c:70:03:5e:26:07:
                    a1:2e:7f:5f:6f:03:99:0a:36:e9:8f:2f:26:aa:01:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:99:A9:D5:21:29:E4:40:37:AA:D7:43:63:01:EC:E5:E8:25:01:6A
            X509v3 Authority Key Identifier:
                keyid:62:19:9A:48:F1:A7:1E:D1:80:93:20:C4:70:28:F0:27:9C:1D:9E:E3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2217/YhmaSPGnHtGAkyDEcCjwJ5wdnuM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:47:ce:05:d8:7e:65:d1:d3:a0:8c:43:6c:99:ee:e6:de:
         8e:98:18:24:59:7a:1d:b0:79:34:1a:90:8f:af:29:57:fd:48:
         c5:25:da:54:81:c8:46:63:96:cd:21:d4:2f:eb:9b:94:a7:b6:
         59:df:dc:58:df:3d:8f:88:42:c0:b9:50:37:ad:e7:ec:38:90:
         4a:be:c8:81:80:b7:6d:b0:e9:4f:fe:73:da:d0:54:08:83:db:
         59:52:76:a0:82:ab:8d:a2:b7:7e:93:86:ef:10:a8:8a:4d:92:
         12:37:2e:1e:2f:15:d6:c9:74:c0:69:32:cd:d2:43:53:3f:af:
         91:20:ff:17:3d:c0:0a:15:3a:6c:46:b3:d0:ac:73:f5:e2:ea:
         b4:de:ea:b7:b2:e7:35:5a:3e:ad:74:84:b2:f4:8a:36:22:42:
         a2:33:c6:1d:f4:f9:d0:9c:3e:22:c4:6d:28:d9:6a:47:1b:76:
         08:ee:d1:bc:ac:b4:53:90:45:52:4d:87:aa:d0:b4:ef:b0:02:
         71:f9:5d:de:96:d0:66:c9:9b:61:26:d6:04:bf:87:64:2f:2c:
         88:61:92:f6:5f:dd:79:41:d4:dd:87:ef:de:61:1f:10:ea:9b:
         7b:1e:89:6f:59:45:df:8b:f2:3f:66:f2:c8:3f:00:6f:e3:77:
         66:19:75:6b
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MjE5
OUE0OEYxQTcxRUQxODA5MzIwQzQ3MDI4RjAyNzlDMUQ5RUUzMB4XDTI1MTAxNTAx
MzY0OFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoREE5OUE5RDUyMTI5RTQ0
MDM3QUFENzQzNjMwMUVDRTVFODI1MDE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANNShwSvpqcaP1koDRBxgZ4WHe68zEpsAd1OaQf3XhoIWLvDkwZl
fGufs118RldNB+1VlxAy4Ts0djm++HSpc18r8fBidpXG+ye2tqTc0DXbB1R9xtgK
t66KMLuh0PSnIj473Irpdqr2CwjFwwt1wu4nlvPHH2uy3HIQvvbWgK+ADU7P5nQ5
ooEKBY6V8WJdzz7knryXz+O+qoyv9wO2A1Qd2tfYU01ILfBOxeSbFgZ5X9jzrvut
pvghl08RJeaFJ+IdKp0lusGsYhdsTYuw6xLQqpW/8JpwgLtBTOrNbr+MVdOn7FIW
ZV/iXHADXiYHoS5/X28DmQo26Y8vJqoB19ECAwEAAaOCAj8wggI7MB0GA1UdDgQW
BBTamanVISnkQDeq10NjAezl6CUBajAfBgNVHSMEGDAWgBRiGZpI8ace0YCTIMRw
KPAnnB2e4zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjIxNy9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1d2RudU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1
d2RudU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjIxNy9ZaG1hU1BHbkh0R0FreURFY0Nqd0o1d2RudU0ubWZ0
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw
IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAYDxHzgXYfmXR06CMQ2yZ7ubejpgYJFl6HbB5NBqQj68pV/1IxSXaVIHI
RmOWzSHUL+ublKe2Wd/cWN89j4hCwLlQN63n7DiQSr7IgYC3bbDpT/5z2tBUCIPb
WVJ2oIKrjaK3fpOG7xCoik2SEjcuHi8V1sl0wGkyzdJDUz+vkSD/Fz3AChU6bEaz
0Kxz9eLqtN7qt7LnNVo+rXSEsvSKNiJCojPGHfT50Jw+IsRtKNlqRxt2CO7RvKy0
U5BFUk2HqtC077ACcfld3pbQZsmbYSbWBL+HZC8siGGS9l/deUHU3Yfv3mEfEOqb
ex6Jb1lF34vyP2byyD8Ab+N3Zhl1aw==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:57:17 2025 by rpki-client