Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.mft
File:                     mNu_81h_ARn23B4ifdgezEf9H5g.mft (raw, json)
Hash identifier:          qIBWi7nl0CrxAJRjZEKYyNsFW4MYhBqx4YKaQbV+5f0=
Subject key identifier:   55:1A:63:64:F7:02:6A:58:A4:A2:4F:91:EF:E4:FD:8D:F6:43:9B:E0
Authority key identifier: 98:DB:BF:F3:58:7F:01:19:F6:DC:1E:22:7D:D8:1E:CC:47:FD:1F:98
Certificate issuer:       /CN=98DBBFF3587F0119F6DC1E227DD81ECC47FD1F98
Certificate serial:       25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNu_81h_ARn23B4ifdgezEf9H5g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.mft
Manifest number:          0865
Signing time:             Mon 20 Oct 2025 19:26:53 +0000
Manifest this update:     Mon 20 Oct 2025 19:26:53 +0000
Manifest next update:     Tue 04 Nov 2025 19:26:53 +0000
Files and hashes:         1: JBzInJevDDCnl0mr88rdSzO5qwE.roa (hash: woUF1988gHSiiA56G8q0EB2H/Cif5duWmbD6kVszY24=)
                          2: mNu_81h_ARn23B4ifdgezEf9H5g.crl (hash: /QpToUy8BLAQjuWc3nmJ1WhzIp2j7XhbCJEBzCQtGDI=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNu_81h_ARn23B4ifdgezEf9H5g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98DBBFF3587F0119F6DC1E227DD81ECC47FD1F98
        Validity
            Not Before: Oct 15 01:42:47 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=551A6364F7026A58A4A24F91EFE4FD8DF6439BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:53:1e:7b:26:51:72:0d:52:2a:de:34:b4:4b:
                    cf:ff:48:52:b1:35:0c:ad:27:96:43:0a:74:70:07:
                    5a:04:a2:f3:ef:13:a2:c2:fa:eb:6f:ec:55:1a:10:
                    43:89:2e:f8:b9:a7:d5:ed:73:9f:1f:90:61:ff:c9:
                    86:df:4c:bb:d5:0c:75:47:a1:40:00:42:5a:08:0e:
                    f7:39:0b:12:e6:3d:8a:4c:6f:b7:01:0a:78:08:ec:
                    63:61:99:48:0a:11:2a:c9:22:8d:53:aa:85:66:1e:
                    6d:f7:c3:de:05:a7:d9:71:ab:77:15:d8:c0:52:2f:
                    5e:b6:f8:86:3b:e5:94:51:05:e0:d7:2a:6f:71:41:
                    00:5a:4c:43:81:d8:f7:86:43:7f:19:61:4d:3e:e2:
                    01:c3:8d:81:5d:73:06:1a:5b:13:06:85:fb:3b:36:
                    5a:7c:ea:73:76:69:9e:c9:be:74:01:e8:39:bc:2c:
                    db:e9:a4:2f:7d:61:6d:91:72:55:da:a3:83:c9:c7:
                    8f:f3:cc:65:44:5b:c3:90:df:55:16:e2:ce:22:02:
                    b6:39:d3:6f:c1:09:8d:0c:6f:93:66:65:ed:cb:2d:
                    64:34:91:86:22:cc:cb:9b:14:4f:69:eb:e8:6d:86:
                    4b:f7:73:2d:5f:fe:aa:55:90:61:ac:f7:fd:9f:77:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:63:64:F7:02:6A:58:A4:A2:4F:91:EF:E4:FD:8D:F6:43:9B:E0
            X509v3 Authority Key Identifier:
                keyid:98:DB:BF:F3:58:7F:01:19:F6:DC:1E:22:7D:D8:1E:CC:47:FD:1F:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mNu_81h_ARn23B4ifdgezEf9H5g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30330/mNu_81h_ARn23B4ifdgezEf9H5g.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7a:35:ad:99:4c:54:14:ba:75:8d:28:e2:08:a1:92:0b:d0:
         41:5c:b0:c6:8d:cc:53:9d:49:16:03:ca:32:91:74:a8:c0:fc:
         b4:9a:8d:33:12:a9:74:23:dd:95:67:21:27:4a:07:ab:ee:4c:
         e4:b3:7a:9e:f1:64:66:aa:2d:8c:85:10:5a:44:f8:36:dc:df:
         b4:8f:14:b5:3e:94:66:08:b9:21:f1:67:84:f5:ff:8d:6c:64:
         5f:94:3c:b2:04:26:a7:fe:8c:b3:6c:66:e5:4a:b4:97:93:e1:
         1e:51:57:96:b7:6b:d9:c9:c1:c0:ed:ec:e7:26:83:c5:48:1e:
         6c:83:b6:9b:f5:12:e3:fd:5b:6c:e9:d0:7a:b6:62:88:91:55:
         06:61:7d:8e:89:ef:c8:ba:5a:ad:ec:7d:f2:c8:f8:bd:0a:66:
         ca:26:e0:41:36:89:89:25:b3:42:8d:19:06:2b:07:58:a0:41:
         8b:51:f0:f9:55:a6:2d:42:74:ab:19:bc:2e:13:64:e2:e3:41:
         52:69:11:21:ac:fd:29:6e:b0:d2:50:f3:96:a5:dd:79:3f:5a:
         13:7f:c7:3c:fe:54:1f:c2:f7:de:30:38:c2:88:28:7d:bb:3a:
         40:06:d8:d8:f8:39:26:7b:ad:26:77:bb:f1:9f:ce:21:9e:02:
         55:0b:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:46:25 2025 by rpki-client