Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
File:                     QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft (raw, json)
Hash identifier:          awwvvGQxWdtZ3m5ttt2Eh0sJXBYyTdOe/xmA3FTNs8Q=
Subject key identifier:   8B:B2:02:20:55:D3:95:00:57:40:83:F6:F2:5A:20:B7:E6:E3:B8:B2
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       016F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
Manifest number:          0D10
Signing time:             Mon 20 Oct 2025 10:25:21 +0000
Manifest this update:     Mon 20 Oct 2025 10:25:21 +0000
Manifest next update:     Tue 04 Nov 2025 10:25:21 +0000
Files and hashes:         1: 0GMY3fu6_EPF7K8v066ekiO9M34.roa (hash: 6SJ7ifR486G8Ilw+cLxthcCMvpUlXb0oY2vHcS1Bb6M=)
                          2: 0T7REFW8FueC0uGdJtqhdGeBLQE.roa (hash: MiLo0LMDmM1xNDWPR95YVP/jsTUQV2m1fJSrO3VDWBA=)
                          3: 1T8Y18fqO7zYhws6EWwCYAtledQ.roa (hash: 1mhC4KyPg7rk2mKkOysUUIrN4Ay1q3gmpG04GBL0oZ8=)
                          4: 37a-zpm4_TGt8W29KQqQojlb9_Y.roa (hash: /QiV+F6NVVMFeaDMfmNgMRvuoHASgoA48k2w71xZMxU=)
                          5: 3HxDkdBY42h54lrlH0JXRBqFh34.roa (hash: 6jP3mpdcMAbmxYGk2QerP1rSFLzSse6To+E7jljCEhI=)
                          6: 3f14twWWWxetKvHTjQ6LXUyQWLk.roa (hash: jcGSxE5Oi/74GpDihbon7JdJvornLwK7ASXSPw4COyo=)
                          7: 5FC4SDpK-td4v-rE0b6xOtpWa8Y.roa (hash: YuIyYXdjNCyNTxt0cSi2sjiyWjcZ2R1gyikNO0GP8TU=)
                          8: 7V6nO1pv52oYqrMAWqNLhNz2kuk.roa (hash: NJM0jVa2aKR2zF9V/01dLCS2ZoM6ZS94bHjjVbGf6h0=)
                          9: 7eyQexNR7GeUljvm9TQ5554kGO0.roa (hash: 0PJ9pRqxNS2rJPSO+FL45poNamtrVsLNy+vyydz4cu4=)
                          10: BxaD_VDEpLHwWENUgcdnRF-J6Jc.roa (hash: ZVfzVnU68wBMCluNYuB+KGSUyQL63nvEEO4Zg4JZSy0=)
                          11: Bz9EEmXNZQeT80sZH9CKiMo2Kb4.roa (hash: S0AGqZLxRSiomW4DlGZShIrcX6Gpl7q3vPIM3MLQg0U=)
                          12: Dj73QDamaSz4nFweKzI-yGSvVyk.roa (hash: NclVFqqN/3rBnWAhEDC5Gz/cgSzdN+CSYJo4sDnRJW0=)
                          13: GVc1h0S5OOgnry1EfXv9aaEA4vg.roa (hash: wEq/CgOo3FUAjSBGTKBO7x1IKwlvr6n8039Ie0d3z8I=)
                          14: GxvjRLJtz0bj-R8mtitY4y5PcBs.roa (hash: yb4lINOg/uD6Kp9b6f4bFLCl/K40Ivot0oNg+W+8n44=)
                          15: HlWx6Lh3FDBseU_SMTf1Z5lqTDc.roa (hash: TcOW//fqHO9+j073kZylPVqChUU3qwQotLNa1g/KHUw=)
                          16: Jnd13Qfm0gKlJOKMQG6BNgA1nFI.roa (hash: FeKNTgWMs5Ws2qIZYN0QilvO5Iuz2HMiSCLGO2dVT/A=)
                          17: K4cwQTs97DvldXgLlPN4i8LujYE.roa (hash: e1jBjXbsK/ga7hdfmw1ljnbCUy99RYUSwyhi/JGVSNk=)
                          18: KiouDyUgB5CF9D_-QaYhdlDtWgk.roa (hash: Fw5W1WQMNga6TohTpBtCb0FMtirxF1sHQNXRirkj/wk=)
                          19: NZ82hpKcoB-xwa1l8MyTiWZ7lVw.roa (hash: CBnFBuAPmQ2gIgNwlBfSaVDKZdc9sF8U/QLW2vjjqhU=)
                          20: OCDZqAFn1m0aYXg7hjm-_ObNZQM.roa (hash: 6khon9u1uzNBpj17JZBzfVBa2A9uMmSdh9U6s6uaUqM=)
                          21: PmxjeZ30KK03nXlyJsfcY5tc_sQ.roa (hash: Ls5FXGKYKrVYAhHFkXuexKGghT2Guw05vyxwE02VGFg=)
                          22: QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl (hash: dUCBVsRLKlS7xuOtz69Z2amlDJA+VEwIJyDhea1m2uA=)
                          23: QM2kePpQNt0JjPrjkDzXOWhEAjY.roa (hash: DFPyT+JJLUGstyj3wSfocYA29iZbT81pLPOFhYEsJbI=)
                          24: SOsEMujmLELI-qWQh_3o0FzKYpY.roa (hash: zeQv6dK4sW9VwCu2uTd0ROp+z0nZACZn5NNw88Hcato=)
                          25: Vb-yGMDhnJBk2e3-CK3d0YQP9ZU.roa (hash: e1JoQ/vysF7vhAYzS3sktglLZapKdyDAgWBU6fsPKXQ=)
                          26: W7JAJoi60z9HhtVgt_X8uL7YQw8.roa (hash: 7cQEtq2OU7TyFYdtBG4gownH/N6lw84U1YMIgBR2S0k=)
                          27: Z2VGd1wjryJTkcRh9u8z6vNpo1o.roa (hash: T9Yz7k2c0VrBhaX5bqeHGvL2AOesR6ouF9uc5Lc8BTc=)
                          28: bvU3ZylVxuVodkWdxbra4BiOX48.roa (hash: bUoqSPGuns10Wg0p60M1PwCv63YcqwOQWBpAVwn78DI=)
                          29: exTLlydlJYTfpVnvu8MhzARGm28.roa (hash: YjwDVB6pjphstFrAy+rwVBzH2zFiWS1ah7qcAwcdm3Q=)
                          30: iU_B6RmCwK6HTGTEeGWycpStD2g.roa (hash: YyVXGSw9US0CzDTua4sfeMCiYgsmo0otEtAvj4wZ+Ag=)
                          31: jUqd29sxPYV0tMl9qxaxE-zgh04.roa (hash: f4LE8tqWivrsnyVPUjLzM/6zXbiX45gJaCvbF4jiNy4=)
                          32: lf40KvPfLJFXBn9N4Qvxz0ZkSQU.roa (hash: S/ADtf9I8KtJ5Rc9lw8vfkQgKMr6Qr9Sa8uOk14to80=)
                          33: mzmy5vuoJ5EpndsFiW0BXUPlO6E.roa (hash: o9Ze5ATq0JYK3qgUUjzfvzjfbKV2V9WRky9o+7t4ZH0=)
                          34: n7hPkJHLOrqOE_xrSKiR4J2dWVQ.roa (hash: PkogWngnsfqsLSJ6iwZ3X08h7jIzpGCP+3BzJXFqn+E=)
                          35: oH8mZ-pvLGHBtmYU6K0wY8J6_ZI.roa (hash: jcxFqyRo3TE9Bthgq7uZ1LeIGZWtA9fc4fWEFpqMmTo=)
                          36: plnmzf9xgoDVmu8cZnlWNYGkxv8.roa (hash: 8j3Wyf1MvARONUHzKprzX7aFweKZeLCrEZP4sTLjmUM=)
                          37: qRb__U-U6kMdx3Lo3gGdazTPob8.roa (hash: WANma2D1PU3iBsCpwVvv2a8JuAadqX6XGjK4GFuMb3s=)
                          38: r1Uckw2_-Y5pzR96mSBykbjTKAM.roa (hash: Ep2oh2TzgMAXX8ltTyFg2Y4c1WqefhuvsK03leM0fPQ=)
                          39: sVjOv41BL7ZnmeonZwnzVw5ENfI.roa (hash: zHInk4vbzKqDHOh0sSpO1S2Vp1UXU37S0SO9yvDJwXc=)
                          40: tUJ7RSR24gOuEGaYxyFbkwwzqB0.roa (hash: Ht6wyAWHJuyKgK+JoB9ENTJdWMBtPBy5vDl4yg/r2/s=)
                          41: uuZaA28KsE1amPV0WxEW1c0K6Pk.roa (hash: hT/DA8BKjYk5zYzy+Vhm41EiETVMVGyEBsxF+Pmfto8=)
                          42: zjPQ_hG7Ic1qRSVTI3CimyzZqYk.roa (hash: 6aQFv7XOiZUGslTGDyFaxaeL8bIiRyicm0Ibl0vgfCs=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 12:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct 15 01:34:17 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=8BB2022055D39500574083F6F25A20B7E6E3B8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:c2:01:41:52:7e:54:ec:a0:89:ed:11:eb:
                    00:64:6b:32:b5:7c:10:2b:7b:8c:e4:27:e3:4a:64:
                    80:fc:5a:4f:bd:db:a0:6b:2d:a0:c5:9b:6a:a3:68:
                    7c:3a:86:79:05:38:2f:4d:9d:ff:78:60:ba:75:9f:
                    e9:76:a6:95:2d:1b:c6:fb:8e:01:7f:30:0d:a2:ee:
                    a1:58:29:12:ed:ac:dc:ce:c6:34:06:1f:db:24:a7:
                    43:f4:61:69:70:92:76:03:d1:75:a6:59:27:2e:35:
                    b0:56:e4:c7:05:94:15:90:1b:37:e2:82:07:c5:84:
                    25:59:22:21:e3:a2:32:68:71:67:b0:cc:f5:13:2a:
                    94:73:21:71:d2:6b:0e:16:16:1e:61:c3:35:8c:94:
                    8a:fe:06:0d:07:0e:29:8c:0c:bb:f4:12:c7:a9:fe:
                    2c:21:f0:43:80:72:da:78:3d:d9:36:3d:ce:c6:d8:
                    41:5c:68:cd:df:d1:65:31:14:43:9d:3c:ed:35:5f:
                    ce:51:5a:2e:c2:51:0b:69:ef:d2:e0:02:6a:b0:42:
                    9d:15:94:35:32:d2:0a:60:2d:13:d5:a8:9f:b7:32:
                    e6:59:7d:21:13:a8:08:8e:2e:ee:70:82:11:7b:86:
                    9b:63:01:c0:10:f9:df:c5:4d:60:fb:17:03:67:2d:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:02:20:55:D3:95:00:57:40:83:F6:F2:5A:20:B7:E6:E3:B8:B2
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:47:ee:b1:f1:d2:dc:55:9b:24:9c:d0:cc:2a:b5:17:3f:
         08:a9:f1:d1:10:bc:4e:91:d2:0a:c5:7e:ac:9a:44:9a:e2:87:
         6c:52:15:7e:68:75:4c:cd:d0:e8:26:61:66:89:34:42:19:a9:
         69:06:f0:10:9b:b2:5c:7b:13:c9:30:58:2a:58:5d:5b:92:95:
         74:aa:2e:c5:33:19:8f:b1:38:57:e3:68:99:f0:e0:71:29:be:
         a8:22:ef:49:46:db:90:dc:2b:f6:41:97:1d:71:c2:e2:1d:6b:
         3b:c5:ec:4b:7f:2e:45:03:d6:59:99:f3:ef:98:4c:28:f3:b0:
         05:6a:02:7f:cd:ab:73:29:2e:c1:8a:c3:65:23:d0:f0:2e:a1:
         68:b5:ea:76:ae:01:fa:ab:be:ea:6a:17:0c:ec:cb:f2:29:69:
         89:19:f1:2d:b7:bc:1e:42:3c:ca:1f:92:3d:66:ae:45:82:c3:
         37:ad:58:f9:6e:7e:47:24:47:42:6b:ca:fd:47:a8:05:48:ae:
         68:dc:02:de:8c:da:c4:dd:28:d2:43:30:c1:84:00:60:a3:8a:
         ca:3e:67:59:e0:3a:aa:2c:ca:2b:43:d0:40:13:3f:b2:9b:80:
         ef:c0:e0:83:f5:42:bd:75:10:e8:ed:9b:41:32:8f:da:2b:fe:
         e3:d2:70:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----