Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
File:                     pgghQ7zvUucStKW9XW5cGVN52Ro.mft (raw, json)
Hash identifier:          qYk8gmdNYy6ypZXb5Voq3sB4/xqTF67Tiu5OyJ6hrlo=
Subject key identifier:   58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
Authority key identifier: A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A
Certificate issuer:       /CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
Certificate serial:       51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
Manifest number:          091A
Signing time:             Mon 20 Oct 2025 18:43:54 +0000
Manifest this update:     Mon 20 Oct 2025 18:43:54 +0000
Manifest next update:     Tue 04 Nov 2025 18:43:54 +0000
Files and hashes:         1: -Oy3hbtoylygvfKGAtRnRkIYlOg.roa (hash: va4Ycs+zSzZOeMg52keuTyLLSIyqICpE2XPQLJvRRs8=)
                          2: pgghQ7zvUucStKW9XW5cGVN52Ro.crl (hash: MNolrVSOJA5/JPLX6Io2ifbc8zOzOqF3eBwZ7YsbyRs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6082143BCEF52E712B4A5BD5D6E5C195379D91A
        Validity
            Not Before: Oct 15 01:35:06 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=5804F73CF83C642C8F639CED726829D51D803C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:bf:b6:f6:a6:14:59:a7:29:16:f3:81:63:
                    36:08:f7:33:09:a9:f0:18:37:23:37:b5:21:c5:a7:
                    0c:a4:de:36:04:57:73:76:45:57:71:11:3f:18:73:
                    75:23:df:ab:50:84:45:f2:0c:55:bc:98:39:1d:66:
                    a3:b8:2b:ae:c3:cf:8e:9f:58:5d:8e:39:15:ea:58:
                    24:da:2f:0e:cd:23:cc:3e:bc:87:c3:4a:10:b5:3b:
                    31:d5:25:8c:94:a1:1f:38:7a:6d:38:80:90:3c:27:
                    29:cb:ae:a4:35:06:25:27:76:21:09:be:8c:fe:6a:
                    a4:80:fd:1a:31:52:f2:a6:54:6b:fd:79:30:be:bd:
                    9e:5c:d4:73:27:21:f3:2e:fd:49:ab:ef:20:c4:8f:
                    a7:1d:78:51:4b:49:09:e8:32:1a:08:7c:cf:d8:70:
                    e1:a8:99:ed:ef:14:27:ce:cd:04:87:10:cb:fe:16:
                    a2:8e:4c:b5:82:4c:ca:36:ab:06:16:72:fa:0c:f1:
                    ad:88:56:0b:7b:c2:95:79:bd:7b:02:12:40:1a:b0:
                    18:ac:3e:5b:49:e2:97:07:fc:e8:6b:ee:be:54:32:
                    08:37:3c:5d:db:12:03:b6:9a:6e:57:c0:c6:f6:28:
                    ed:ac:e0:8d:a5:92:a8:db:27:43:44:6e:00:1e:0c:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:04:F7:3C:F8:3C:64:2C:8F:63:9C:ED:72:68:29:D5:1D:80:3C:75
            X509v3 Authority Key Identifier:
                keyid:A6:08:21:43:BC:EF:52:E7:12:B4:A5:BD:5D:6E:5C:19:53:79:D9:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pgghQ7zvUucStKW9XW5cGVN52Ro.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2716/pgghQ7zvUucStKW9XW5cGVN52Ro.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:60:2d:40:65:3e:95:7d:b0:dc:fb:b8:55:83:04:1b:ab:1d:
         64:3e:2d:c5:af:29:69:49:34:8d:51:80:b8:4e:11:8f:01:9f:
         ba:64:65:08:36:f7:d7:39:42:35:04:13:47:b6:c2:c9:ed:99:
         1a:0c:85:0a:15:f5:8e:0a:51:38:8e:60:87:2f:5f:d4:e2:2e:
         45:4d:53:18:cb:82:98:16:f2:ad:27:d3:1b:3a:a8:4f:7f:3c:
         ee:5a:b9:31:e3:39:dd:cf:67:ad:5b:11:e4:c7:07:0e:1a:0c:
         a6:56:2e:44:16:68:bf:a6:11:0c:a4:8e:44:a5:ad:43:9d:05:
         2d:5f:8c:24:32:7d:a8:2d:3f:d9:fa:2e:fb:cd:1b:e0:8d:36:
         02:86:93:ba:60:2a:ac:ad:6e:74:13:67:03:cd:85:e8:2d:08:
         0b:38:f7:51:83:cc:b3:cb:a2:df:99:37:30:bf:28:47:75:79:
         7b:29:97:eb:49:03:f7:c6:b2:8a:50:e0:e9:ec:43:38:e1:61:
         df:ab:92:6f:02:c2:5b:05:03:09:f0:9a:7b:fa:93:e6:2a:57:
         c0:23:fb:13:b4:a0:55:59:c4:98:e9:50:f5:a3:27:4c:d9:15:
         c8:95:80:cf:41:a1:4a:7a:21:c8:b6:23:bc:ba:3f:a0:13:ca:
         9a:da:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:14:51 2025 by rpki-client