Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
File:                     zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft (raw, json)
Hash identifier:          u6EQZ7bOitqebHSZ79pPNEz9RhKnZm3tw08uOARxjys=
Subject key identifier:   EC:3A:D8:91:9A:A2:30:DA:6E:D0:64:B4:16:42:BA:D3:1E:1D:3A:38
Authority key identifier: CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14
Certificate issuer:       /CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
Certificate serial:       5B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
Manifest number:          0E39
Signing time:             Mon 20 Oct 2025 18:27:30 +0000
Manifest this update:     Mon 20 Oct 2025 18:27:30 +0000
Manifest next update:     Tue 04 Nov 2025 18:27:30 +0000
Files and hashes:         1: -X0jJu_8YcrgmbwcLJfL0rPbn2s.roa (hash: jtzsHUMra6xFH5FqrWEWPZJ6jLip/jyJJO//rUxrluo=)
                          2: 2BAdypjlzWGSu3yMwaRar4m91ls.roa (hash: 13tPTY8R8CxuxpHffOdqMZDVRL7Rh4d2Qs2ATXb85Ls=)
                          3: ARewXoZXPiHc8y02aocu3efdsxw.roa (hash: kCUhL2f7bttkV6TN7jtUY9QzX1U5vLP/sAZqMR7rF0U=)
                          4: EUhrVahjug953z5dDiO_W8xjkNc.roa (hash: Ex1pfHL6w+B0QUpMw6b1TKukRTx9x84h+QpTEL9k98E=)
                          5: K3lCvUdMC9WGDk2rCtLXl_RDJYI.roa (hash: pWvU+B98TJa7Ch26mHtSAEo8LtEVWEbF67GZGgQ7y04=)
                          6: QhcUKd0bb7KdwJgfb1KIB4drgMI.roa (hash: fpTI1rkfOSwA+iDd3fXH60oTMseV9PWW1yh55e0SZHo=)
                          7: TdkvpWir6dwlDu3mq22bHVwo-YE.roa (hash: U+x7oW/Nq3LwSgmxoxYhAKb4Ysm8IBqHn2PsODf8rrk=)
                          8: g5JVzJTIsfmBXLC2-U-4ne8iDIE.roa (hash: K5881Qkai8wJqAlNnP4XFjZbmxsNwLfo3dS1G1TJ/AU=)
                          9: kHn-RFmCUt59TsGwG-Rao9d0H8M.roa (hash: HO5Ff84U5NFPTW5GysrmkQQ0QSTAA51W2pKCJH83W54=)
                          10: knQr6z80JXkgtZd8Q3sz-Yjg-Ak.roa (hash: M1jqaFxbgjOSnj64nCUZBx6+OJuaa7dzTUUC4g3spxs=)
                          11: mm0Kl5q5uqT8b80N3kd4pusqKQA.roa (hash: csybzV5QKPmrwuDlZhmCwTi8GWQgsCQbSZzebWdu6A0=)
                          12: rNFthIc2J5EwX2OqVd84j_lAKe0.roa (hash: oC6+6f9YD56O4vEu0bfXIVBQWJLxCtxJlvjNuD2A5iU=)
                          13: tCCmk3IjOBUDc1c6ltQhsGp2BYc.roa (hash: HbM/RH/MO8DTotYdnT3fKeZ01gLeG2WsqTuDMd4Bjq8=)
                          14: wqUsiGRVj4SJJ6XdhIiplhCpJBQ.roa (hash: MPJlF9nfWY+7oFYOfgsVUptVdvLDsyRHdpV3CdtMYbQ=)
                          15: zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl (hash: wfpXfNcoZ3cmgaV0yrzctip3OIncsn5Dv3vMxDibHtY=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD5E231EBF44C7A4039A2F78E834B6CF3D6AFA14
        Validity
            Not Before: Oct 15 01:33:56 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=EC3AD8919AA230DA6ED064B41642BAD31E1D3A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:78:fa:f6:c7:af:5c:c3:a0:0f:6b:51:c6:86:
                    eb:fc:01:ad:74:7a:30:a4:3d:0c:22:dc:80:51:e9:
                    3a:e3:e0:6c:4c:47:21:47:15:e5:f6:e0:1f:86:d6:
                    45:77:a5:04:a2:a5:6b:8b:c8:9f:eb:ab:78:58:89:
                    f2:48:2e:e2:f2:96:e2:4d:16:98:fc:f3:07:44:df:
                    c8:f8:38:ef:12:71:b2:1c:8c:67:71:25:75:3f:e0:
                    c6:ad:e6:df:86:cc:fa:17:25:3a:e7:4d:a8:86:94:
                    b6:c2:e2:67:e3:94:f1:af:ed:b6:d0:de:c6:fe:89:
                    99:01:71:96:f8:69:f1:17:77:a6:c1:a3:ed:f9:3d:
                    e0:3f:41:7e:12:19:61:3e:4e:0e:5d:d3:41:20:32:
                    58:00:45:fa:6a:d1:3b:4a:7b:05:55:e8:45:3e:f1:
                    6f:1e:78:cd:73:d0:15:d9:4d:cd:78:66:e9:d4:db:
                    69:24:c2:55:6c:8e:12:d2:48:88:13:54:6d:2a:82:
                    a9:dd:49:f4:5f:5d:d0:ac:67:99:35:a2:7a:bd:69:
                    77:0e:ae:23:60:01:f6:b0:e9:a8:38:30:b6:25:72:
                    f1:ae:65:ff:eb:66:c0:2b:38:b4:26:4c:25:66:89:
                    80:de:23:db:89:fe:78:ca:6d:20:bb:f9:5d:7f:ac:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3A:D8:91:9A:A2:30:DA:6E:D0:64:B4:16:42:BA:D3:1E:1D:3A:38
            X509v3 Authority Key Identifier:
                keyid:CD:5E:23:1E:BF:44:C7:A4:03:9A:2F:78:E8:34:B6:CF:3D:6A:FA:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zV4jHr9Ex6QDmi946DS2zz1q-hQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51/zV4jHr9Ex6QDmi946DS2zz1q-hQ.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f8:5e:0c:e3:ab:b9:d7:47:67:cf:99:84:14:fd:53:30:86:
         38:77:d3:f5:6a:bf:86:10:b6:32:76:78:c9:88:2d:8f:51:69:
         14:da:5f:4d:ec:13:9d:5d:e4:d9:96:0c:88:cc:0a:df:96:bc:
         b7:6c:15:a4:e9:2a:eb:b1:23:c6:d7:86:0d:dd:c6:8e:d8:38:
         a7:87:80:9a:22:c7:51:aa:38:16:4b:0c:9d:08:d8:3d:97:22:
         c4:84:91:15:57:d4:8a:b8:32:66:3e:94:f7:e0:ef:b9:e0:28:
         b4:1c:8e:88:b7:7b:d2:7e:c6:a2:b1:c1:48:4b:cd:67:ec:a5:
         fa:aa:d6:35:1c:23:f9:44:d1:21:8b:b5:59:63:a4:08:b5:f8:
         a0:d5:f2:ad:e7:d0:48:45:aa:1e:8b:08:69:29:54:63:de:8f:
         3b:76:45:ba:94:53:0d:a2:b4:da:6e:4f:91:dc:38:7a:26:51:
         ff:64:3b:4d:dd:0b:24:0a:a4:af:f0:4a:d8:37:68:1d:4b:bf:
         5a:ae:eb:57:42:e8:c4:02:3f:12:74:8c:2e:d2:85:dc:cb:27:
         2c:11:7c:1b:95:47:6c:95:bf:7f:7e:fa:3c:80:6b:ff:1b:d4:
         6d:8b:06:73:f8:ce:78:f3:de:99:77:3a:d9:cb:7e:53:dc:0f:
         b0:85:57:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:56 2025 by rpki-client