Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
File:                     8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft (raw, json)
Hash identifier:          yhKDkchy/itErAZKZpPRANhgW0NR/fN5BnVZ2u/fecg=
Subject key identifier:   0E:CE:2C:66:F6:5D:89:66:AC:5A:F5:2E:C1:B3:27:69:79:63:18:24
Authority key identifier: F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF
Certificate issuer:       /CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
Certificate serial:       35
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
Manifest number:          08A6
Signing time:             Mon 20 Oct 2025 22:25:45 +0000
Manifest this update:     Mon 20 Oct 2025 22:25:45 +0000
Manifest next update:     Tue 04 Nov 2025 22:25:45 +0000
Files and hashes:         1: 8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl (hash: y3drIy4AsMNTMdvTtjYxwvC3qMKKCVAmiCWu1V8fWm4=)
                          2: 9fbAmqRsNqcbJgwuvmR9ep4sdY0.roa (hash: nMqj2SfatBep+6/uc/hHfwQTQCdiCrPV4TV/nzGfzRY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1627C3C233E79637AC9DC035CDF50B789FC67AF
        Validity
            Not Before: Oct 15 01:30:28 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=0ECE2C66F65D8966AC5AF52EC1B3276979631824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ff:a7:00:28:95:8f:04:62:85:95:60:38:d9:
                    97:35:72:1b:cb:79:59:f3:15:92:d4:c4:cf:8d:48:
                    2c:eb:be:7b:4f:7a:9e:ed:14:39:9d:3d:21:a5:75:
                    cb:c4:28:27:06:9f:66:ed:20:57:a0:61:27:97:e0:
                    34:d2:56:f6:fb:db:10:36:46:1d:ba:a3:43:19:3a:
                    4d:77:8b:69:38:b0:73:8b:95:a1:08:8c:11:68:48:
                    e7:f4:58:9a:05:3b:55:f7:86:be:05:fb:0e:69:b7:
                    36:26:1f:5b:5e:88:17:e9:1e:87:76:50:20:48:3a:
                    d1:e2:56:72:00:c1:da:e2:1b:95:f4:1f:e7:cd:3d:
                    78:ff:e0:ae:48:5d:92:91:3c:41:24:1c:99:ee:ce:
                    76:96:85:c2:39:eb:6b:74:21:75:c6:84:1a:4e:6a:
                    5d:36:e2:7b:c0:c4:64:db:f9:cc:19:34:97:44:c4:
                    12:92:69:c7:62:29:ca:6b:6d:5f:dd:20:3d:f9:99:
                    28:c2:4e:c7:d5:61:ee:07:47:db:df:3b:05:0c:4d:
                    5f:5b:d0:09:9a:48:dd:f8:3e:22:15:c8:d0:18:08:
                    20:42:54:1f:b2:c5:31:17:3c:1b:7b:16:ef:72:23:
                    9b:a8:f4:47:1c:0d:aa:42:56:1d:c5:68:f0:85:0e:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:2C:66:F6:5D:89:66:AC:5A:F5:2E:C1:B3:27:69:79:63:18:24
            X509v3 Authority Key Identifier:
                keyid:F1:62:7C:3C:23:3E:79:63:7A:C9:DC:03:5C:DF:50:B7:89:FC:67:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39061/8WJ8PCM-eWN6ydwDXN9Qt4n8Z68.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5f:98:47:89:eb:2c:4e:75:f8:33:0e:11:f5:05:07:a5:15:
         3f:da:f6:7f:ef:35:a2:39:09:5f:17:d3:c2:68:cb:1f:4e:a8:
         14:90:f0:ee:a7:cf:d5:83:da:f5:8b:83:4a:a9:8d:1e:03:d4:
         c8:97:1b:16:ee:7e:21:34:e2:35:d5:4a:85:80:9c:e0:e8:33:
         98:ac:f0:1a:c9:0a:b7:ae:e9:07:f9:2f:81:be:73:30:3f:5b:
         b2:4f:9d:cd:c5:a3:58:af:89:62:da:ee:7d:3d:d5:fe:6e:86:
         22:3b:f1:ed:33:c7:43:09:94:9b:c9:f8:bd:c2:3f:4a:4e:3f:
         62:58:55:61:5e:78:b5:29:42:f6:6c:87:2e:9d:c3:65:eb:68:
         e3:e8:5f:f6:2d:99:5f:be:50:9f:92:c8:ba:e3:6b:f0:ec:ea:
         86:6a:34:d8:87:14:0f:e3:ae:ca:e2:b3:ba:07:3a:d4:15:31:
         09:b7:ad:27:f3:b1:31:c4:11:02:6b:3e:0e:28:b1:40:87:87:
         b9:8c:ed:7b:a3:78:ec:12:fd:69:58:bd:c3:a3:42:44:37:f8:
         c8:32:a4:15:9f:4b:78:93:6c:77:3e:87:2f:74:d2:9f:fa:22:
         35:75:61:12:8b:88:01:01:e9:48:0f:32:ef:af:25:bf:98:28:
         03:bc:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:44:36 2025 by rpki-client