Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.mft
File:                     PKJiGnAzQLPeRgyzbQicKOTEcDk.mft (raw, json)
Hash identifier:          qPuBBo/wW8Ro01SZeB2+OUAqTgrNYX9HikaEMP9wUwk=
Subject key identifier:   53:F6:BE:E5:B6:61:39:59:F5:A0:70:E6:6C:CC:44:0B:AE:50:39:A4
Authority key identifier: 3C:A2:62:1A:70:33:40:B3:DE:46:0C:B3:6D:08:9C:28:E4:C4:70:39
Certificate issuer:       /CN=3CA2621A703340B3DE460CB36D089C28E4C47039
Certificate serial:       19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PKJiGnAzQLPeRgyzbQicKOTEcDk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.mft
Manifest number:          082C
Signing time:             Mon 20 Oct 2025 19:25:15 +0000
Manifest this update:     Mon 20 Oct 2025 19:25:15 +0000
Manifest next update:     Tue 04 Nov 2025 19:25:15 +0000
Files and hashes:         1: PKJiGnAzQLPeRgyzbQicKOTEcDk.crl (hash: hnXDwIHIscZDot8KN8bF4ukZIK8smbQYD3fFZk0GsIk=)
                          2: vl-sxiOKAKA9EixCl_gePtlixlg.roa (hash: cnabQjBdN20790kA8oYQdxy//nDa3R9yZB/K/8I5Jg8=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PKJiGnAzQLPeRgyzbQicKOTEcDk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CA2621A703340B3DE460CB36D089C28E4C47039
        Validity
            Not Before: Oct 15 01:39:30 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=53F6BEE5B6613959F5A070E66CCC440BAE5039A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:a7:41:70:28:9f:68:ba:4a:ac:8b:99:bb:
                    a6:c3:68:fb:c3:78:38:c4:a9:27:0a:df:ef:6a:f6:
                    62:51:d9:e7:41:b9:88:04:08:c8:f0:d2:52:f7:66:
                    5e:d1:13:46:ee:f6:26:1e:8c:5b:17:06:e4:d7:18:
                    7d:02:ff:24:23:d1:65:67:f8:48:69:13:59:e5:a3:
                    76:ce:74:08:1e:c2:39:48:e2:09:be:00:d3:9f:84:
                    c2:d0:14:c1:dc:49:ae:bd:49:c0:b0:a1:37:1a:e9:
                    55:bd:c1:b1:ba:fb:3c:72:46:e7:19:53:67:42:cc:
                    f1:1f:e7:23:d7:d9:4e:8e:94:08:2c:b5:47:23:7e:
                    70:7a:bb:66:80:98:19:e8:53:2f:72:33:3e:17:ec:
                    6d:3a:b5:72:ba:79:ac:ea:ee:4b:89:d0:c4:68:62:
                    a0:88:6e:ed:15:f1:fb:c2:db:0c:6f:3a:64:0f:9b:
                    f0:c6:e6:4b:2f:3d:81:c5:66:34:81:e6:8f:aa:dd:
                    a6:f1:b4:39:88:2b:4d:9c:2d:36:a6:93:24:1a:72:
                    af:ef:e7:67:4a:c9:4f:89:78:91:05:11:d1:e9:92:
                    d9:72:22:fa:37:be:17:82:a0:4f:36:01:fd:14:9b:
                    95:5e:ef:a2:0b:e0:c9:c4:00:1e:d2:84:f6:2c:6e:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:BE:E5:B6:61:39:59:F5:A0:70:E6:6C:CC:44:0B:AE:50:39:A4
            X509v3 Authority Key Identifier:
                keyid:3C:A2:62:1A:70:33:40:B3:DE:46:0C:B3:6D:08:9C:28:E4:C4:70:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PKJiGnAzQLPeRgyzbQicKOTEcDk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/533/PKJiGnAzQLPeRgyzbQicKOTEcDk.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:c1:2f:41:cf:f8:fc:29:66:ec:7d:a4:76:17:17:7f:7c:fc:
         34:2e:a6:38:96:70:15:38:17:4a:51:cf:35:31:18:e7:38:3a:
         92:33:2a:10:fe:d3:21:3b:8b:10:0f:c2:fc:3f:f6:ac:09:ff:
         7d:66:39:7e:2a:c4:7b:97:96:31:6f:3b:38:27:9a:a5:d9:75:
         c0:f2:cd:fe:c5:c7:5d:d0:c1:1d:e7:20:d2:f8:75:90:4c:d3:
         e7:a6:cb:ca:ec:77:bd:34:c0:b8:5f:63:62:fd:31:36:38:72:
         ac:42:57:78:4c:e2:c1:c0:f1:f2:60:e3:92:1e:85:60:c5:5f:
         8b:76:05:1a:8c:09:6b:38:f1:62:30:da:8a:fc:ff:69:a9:9f:
         00:44:f0:f4:40:b0:72:3c:9f:60:48:9a:e0:fe:a4:08:15:46:
         86:f9:1c:b4:17:86:41:37:62:bc:cf:45:6f:55:d9:76:fb:b7:
         f9:74:64:b3:30:4c:4a:5a:7e:17:b4:3b:0d:03:fc:1f:a3:55:
         db:4c:ab:28:e6:9c:de:82:ea:47:80:65:dc:cd:e6:66:9c:d2:
         6f:30:1e:81:6e:ee:96:8c:83:f7:df:e5:db:1d:0f:d7:61:89:
         39:a7:01:1d:e6:cc:40:df:55:12:e8:26:1a:0d:f3:75:a3:a2:
         85:7b:11:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:57:48 2025 by rpki-client