Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
File:                     rUdB8DSfvBWnCOKKLOMHkGysXeA.mft (raw, json)
Hash identifier:          S5/kAZ9A0hM18iu+Tb3/hwVS1iT8TIXkIytUr0pfvGA=
Subject key identifier:   34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
Manifest number:          089E
Signing time:             Mon 20 Oct 2025 19:06:47 +0000
Manifest this update:     Mon 20 Oct 2025 19:06:47 +0000
Manifest next update:     Tue 04 Nov 2025 19:06:47 +0000
Files and hashes:         1: -44w3H7mHC3P6MEkJ64gddWl05o.roa (hash: ekAEa04AtpxTpm27NgIehyLMgTqp2cJO/JqEpvVq0mY=)
                          2: 6Mv8n_-nNYPrx73GFrVaC_jSM_Y.roa (hash: pGOiUwrcijbOh7s/fIQGYME7OWobKUFgc6nuexCXFrU=)
                          3: AoB-fD6EXoFV8IJLqA-lkxbaVyU.roa (hash: nFhNzeC3riYqXxDTlr4VOWOGbXhA2ZXFzEX0CCoaAl0=)
                          4: FctAxbJuoncmG0Y6Cyvw0cg7Fpc.roa (hash: 9xIQ1aoYhLmNaKV0qTMShB6r+L42mmz0vEe1O2sJ6Yc=)
                          5: Fw4b8BHNcIG8nGQjn1Sq1tLPpa0.roa (hash: iOGPOuYPj5r/cN0YDKN/ZOwI7ZDH9ZX/pSQ7K6nAdxU=)
                          6: HN6uSuSNYKSq-o1ItoW5XzQa-R4.roa (hash: BPNwftNmWWMNHfVTqGf57CYHqCpkli1hpywyFPnsEOM=)
                          7: HoTVVuBmQz7w-_GK8A50XT-oITg.roa (hash: 2IqaLQ+EiS3PzlA9vQ01E0p37akz/m/L2FmPX9wHjo8=)
                          8: Opx5wg0WF-5E6zDseE1mZXHqzBU.roa (hash: U40LmeWNqAR/wEt5u9K0EWxKlPvgBANbRIla5GeCxNg=)
                          9: P92WSbxjaWhAzQHERNuRMhQ5dbU.roa (hash: Cpn/uQhJUzWt9TwbxpwuvPnjzxAIsEpveTtjNmwoBAs=)
                          10: bF80adSQ8vY_hSjb1MNA62WrLok.roa (hash: iSV4EUZj9O+MXJL2MLaL8et/J11m8cLRSw0AlK5YehE=)
                          11: bNZiILBQZCfv4rafHeI4ItJUj0M.roa (hash: jdkVKrogZ1Uyh/9oUzhqOvxxE7mJ5gJwFU2JiVNkTOc=)
                          12: fC50YiCiaZH3Owk7bRKOueaq30U.roa (hash: 0gp4Fc9J1EouRt/DpBNacd4J8HJztuVvZzbhlIw/M44=)
                          13: nB7h8GGzVzDCBTWkaMb7HNZ8rxk.roa (hash: IpSd49Zb/DkneMD3+fLGaMDLvRJU6gGByNvNvmvbaLE=)
                          14: plrrw1zZJMDvs5vsLiu3LSmU9So.roa (hash: En+hNR2/MWIF7+CfXeorjfU098aLo4gYHrkrOQgBa3g=)
                          15: q55W-jiXYj9pipYZ55OKoZuHUZg.roa (hash: WtoMlfuIzZFoWwxTN7NyWp1cOZIDnRLFMYfYdHslePg=)
                          16: rUdB8DSfvBWnCOKKLOMHkGysXeA.crl (hash: /McQ8eXfLn0f7GAb9eTJoMQQ5qJQkyn8Qa6Ah958X6Y=)
                          17: tRLeb59T51PVsvVpprenQhiMVWo.roa (hash: i4d2pqwxG4pMmE33R5zS3XsYKlS18ktc/FzQlP11Osc=)
                          18: u__x-QVW8DyyMjVXY1TmAcTdlSU.roa (hash: t7NDLgL+ywoFLnF08mgweWatFG1WCx3pBLwNDwVnD08=)
                          19: vzIlY2MXuGgxt481RgiujD6ikAQ.roa (hash: 2IiYTq1jGJTrWoyXNq4MN8AK2fBJJoSK2RkRY3pCVRU=)
                          20: x7NjzK66HD4p3HS04nvM5LzUTm0.roa (hash: vLDP5mFxGvPZahQmcUzuQcsAlkSEULfmKV5sObv+xQg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Oct 15 01:37:12 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=34B5FD0C2C7BE812B69D0B55F71081FA7DC44DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:8f:f3:8c:63:be:ff:53:17:98:39:6c:37:
                    c8:0b:65:f7:b3:52:21:ef:d1:45:fa:0e:70:d3:33:
                    42:cd:bd:2c:9a:e6:02:54:82:4f:3c:f2:ec:0b:c3:
                    79:b0:a1:89:e4:6d:97:00:85:20:65:d6:bf:01:f5:
                    69:ef:9f:f0:e6:b7:7c:b8:ea:e1:ee:01:f2:87:0c:
                    66:f7:af:f1:6c:fd:f3:54:0f:68:47:35:fa:8f:65:
                    5f:31:69:1a:e7:53:6e:80:a5:68:d7:78:3f:ef:4f:
                    08:47:b7:94:37:d1:48:88:ef:14:b8:c3:b6:f2:39:
                    b0:b5:5d:a7:43:7e:8a:84:83:32:20:ba:02:58:1f:
                    22:0b:48:a1:d5:26:d5:a7:73:9a:53:98:5d:f7:50:
                    20:ac:4a:de:bd:48:66:ce:37:42:3b:2f:80:bf:44:
                    a6:af:9c:6a:2d:97:0c:6a:6e:84:e7:70:1b:55:57:
                    bf:eb:76:a7:06:fa:ac:54:e5:42:0b:4a:1e:81:0b:
                    f6:32:99:be:f4:38:be:07:61:11:1e:1c:6d:8e:61:
                    47:c3:f6:e1:f5:16:9b:ff:a3:3c:e1:47:18:68:93:
                    a6:fd:d2:11:84:24:c3:bb:6c:b7:71:63:dc:c5:34:
                    be:31:90:24:99:85:26:cd:87:d6:f3:fb:a6:18:e7:
                    a6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B5:FD:0C:2C:7B:E8:12:B6:9D:0B:55:F7:10:81:FA:7D:C4:4D:F7
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:13:a8:0f:ae:fb:f1:0e:29:8e:13:6a:9f:bd:98:46:cc:f7:
         3e:6f:dd:2c:69:c7:ce:19:54:3e:93:db:5e:03:b1:a9:0e:a1:
         08:b2:f3:84:06:bf:3c:d1:67:5b:38:0f:53:0c:56:fe:cc:08:
         ad:a3:3d:61:ca:f7:95:fe:34:dc:d7:50:01:06:0a:49:fb:f7:
         72:94:7c:ce:34:84:13:42:42:21:9c:da:a3:2c:bf:3a:de:8e:
         20:c8:0d:c2:70:25:01:9f:4e:5b:27:be:4a:cb:3a:20:bd:70:
         33:77:db:67:16:a3:6e:74:e4:cf:b3:59:09:64:9c:63:4b:a6:
         42:15:b2:ea:f1:20:dd:06:03:9c:96:5f:82:c9:94:b8:03:18:
         54:c1:ea:a4:fa:7d:7b:61:e9:85:e7:0d:9c:86:05:37:aa:f5:
         ae:fd:13:53:22:aa:6d:14:87:df:c9:29:02:0f:5b:e6:0a:52:
         9e:45:7a:0a:25:4d:df:75:2d:cd:d8:6e:1d:65:dc:2d:d3:02:
         56:3a:39:3f:91:2d:43:12:aa:ee:f5:e0:fb:0c:23:6c:6b:3b:
         6b:19:c4:f5:58:ef:d7:c1:45:91:48:0e:ec:fe:86:b0:21:31:
         cc:eb:3f:8e:f5:6f:48:cc:f7:2e:7e:5a:64:d0:41:c4:53:a0:
         70:98:87:91
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBeTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI1MTAxNTAx
MzcxMloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzRCNUZEMEMyQzdCRTgx
MkI2OUQwQjU1RjcxMDgxRkE3REM0NERGNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALS1j/OMY77/UxeYOWw3yAtl97NSIe/RRfoOcNMzQs29LJrmAlSC
Tzzy7AvDebChieRtlwCFIGXWvwH1ae+f8Oa3fLjq4e4B8ocMZvev8Wz981QPaEc1
+o9lXzFpGudTboClaNd4P+9PCEe3lDfRSIjvFLjDtvI5sLVdp0N+ioSDMiC6Algf
IgtIodUm1adzmlOYXfdQIKxK3r1IZs43QjsvgL9Epq+cai2XDGpuhOdwG1VXv+t2
pwb6rFTlQgtKHoEL9jKZvvQ4vgdhER4cbY5hR8P24fUWm/+jPOFHGGiTpv3SEYQk
w7tst3Fj3MU0vjGQJJmFJs2H1vP7phjnptcCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQ0tf0MLHvoEradC1X3EIH6fcRN9zAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvclVkQjhEU2Z2QlduQ09LS0xPTUhrR3lzWGVBLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBACATqA+u+/EOKY4Tap+9mEbM9z5v3Sxpx84ZVD6T214DsakOoQiy84QGvzzR
Z1s4D1MMVv7MCK2jPWHK95X+NNzXUAEGCkn793KUfM40hBNCQiGc2qMsvzrejiDI
DcJwJQGfTlsnvkrLOiC9cDN322cWo2505M+zWQlknGNLpkIVsurxIN0GA5yWX4LJ
lLgDGFTB6qT6fXth6YXnDZyGBTeq9a79E1Miqm0Uh9/JKQIPW+YKUp5FegolTd91
Lc3Ybh1l3C3TAlY6OT+RLUMSqu714PsMI2xrO2sZxPVY79fBRZFIDuz+hrAhMczr
P471b0jM9y5+WmTQQcRToHCYh5E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 22:53:37 2025 by rpki-client