Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
File:                     qd58EzgSN8W4mNWiTyyabLPBlxs.mft (raw, json)
Hash identifier:          igjcBudFTTMcCPDTOMalHxef/meIIzaOFRO/yTcKoPo=
Subject key identifier:   14:4D:58:49:37:E2:BF:96:0E:50:57:03:8A:4E:5B:81:F4:B7:39:6B
Authority key identifier: A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B
Certificate issuer:       /CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
Certificate serial:       48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
Manifest number:          08FD
Signing time:             Mon 20 Oct 2025 14:47:41 +0000
Manifest this update:     Mon 20 Oct 2025 14:47:41 +0000
Manifest next update:     Tue 04 Nov 2025 14:47:41 +0000
Files and hashes:         1: qd58EzgSN8W4mNWiTyyabLPBlxs.crl (hash: ROJ2ECR3RNhRAyyAK/NOBOvhd2TRAcSQsu9vJGhMrSg=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9DE7C13381237C5B898D5A24F2C9A6CB3C1971B
        Validity
            Not Before: Oct 15 01:35:45 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=144D584937E2BF960E5057038A4E5B81F4B7396B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fa:9a:9f:d5:57:d2:d7:45:05:16:3a:fd:b6:
                    b2:97:0d:d2:53:9a:a5:84:22:3b:28:e8:88:89:c1:
                    de:2d:98:4f:96:22:85:20:d5:19:c5:77:98:cb:6b:
                    1c:0e:da:4b:99:65:7f:2f:c8:85:f3:33:c1:66:ee:
                    ed:ff:89:05:c8:43:e6:de:44:e5:97:45:5e:cb:e4:
                    fb:06:14:83:f2:7c:dc:e8:a3:76:d5:39:a6:1f:9e:
                    b7:e9:4d:07:d7:de:8b:ab:82:65:c9:1a:56:3f:37:
                    61:80:42:06:89:46:6c:91:5d:d6:2d:31:83:2f:83:
                    76:20:0e:5b:a4:35:49:a5:49:63:41:8a:79:d9:4b:
                    d0:00:27:d2:7b:f0:98:fd:67:36:d9:be:1e:aa:51:
                    ad:2e:f7:f5:58:87:0b:6a:a8:cc:8d:45:1d:6c:63:
                    b0:f4:47:f5:c3:dc:14:70:8f:54:b6:f0:af:c3:ee:
                    c6:3c:68:06:cb:05:a8:22:8b:dd:05:7f:9b:50:0e:
                    ec:70:26:04:07:53:e2:d4:9b:91:a5:e4:ac:60:eb:
                    81:51:07:99:c0:0a:1e:cd:de:18:31:32:25:b8:96:
                    be:10:87:68:f1:ee:d6:90:88:a8:22:1d:9d:da:16:
                    70:6d:da:33:0f:4d:5d:53:93:28:12:34:3b:07:20:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4D:58:49:37:E2:BF:96:0E:50:57:03:8A:4E:5B:81:F4:B7:39:6B
            X509v3 Authority Key Identifier:
                keyid:A9:DE:7C:13:38:12:37:C5:B8:98:D5:A2:4F:2C:9A:6C:B3:C1:97:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qd58EzgSN8W4mNWiTyyabLPBlxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/857/qd58EzgSN8W4mNWiTyyabLPBlxs.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:4f:94:4b:b3:2b:c6:8b:04:d1:10:c3:f0:0e:38:bc:b3:f6:
         e5:cd:ad:93:fd:ad:e6:9f:31:56:73:4e:4d:de:62:1f:dd:64:
         28:de:fc:40:de:b1:d2:3e:83:15:db:4d:6e:1d:f4:c6:e3:c8:
         15:74:68:bd:93:ff:c1:15:f9:e5:a4:86:c9:cc:60:33:c9:28:
         3b:23:6a:9c:5d:48:5c:ad:ee:db:5b:fb:fb:2f:b3:1a:e0:54:
         86:87:eb:f9:2a:f7:7a:60:5c:45:91:ff:e2:6f:6b:88:27:55:
         5c:34:c4:c5:70:cc:f0:39:74:2b:12:80:7e:4f:f1:3f:aa:a6:
         f5:83:66:1a:ab:72:53:be:fb:11:66:a7:de:96:80:b1:b6:2b:
         53:a6:a5:9e:af:e1:be:39:51:5c:f3:46:61:9f:2c:b9:d9:a5:
         05:a4:bf:4c:cc:c1:3d:5f:84:54:61:e8:4f:78:50:ba:3d:2b:
         cc:a1:e1:03:30:b7:ba:a7:01:f4:80:ba:29:0f:75:a6:e9:21:
         5f:b4:cd:64:71:15:6f:f9:25:fd:84:e4:3a:2b:ff:1a:a1:91:
         8e:4d:74:d2:bd:25:3f:8e:ae:fb:b0:ef:1a:72:c8:69:74:88:
         59:75:8b:d0:62:e3:00:32:5a:be:a3:3d:37:0e:e3:1d:cd:27:
         73:7c:7c:29
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOURF
N0MxMzM4MTIzN0M1Qjg5OEQ1QTI0RjJDOUE2Q0IzQzE5NzFCMB4XDTI1MTAxNTAx
MzU0NVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTQ0RDU4NDkzN0UyQkY5
NjBFNTA1NzAzOEE0RTVCODFGNEI3Mzk2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALH6mp/VV9LXRQUWOv22spcN0lOapYQiOyjoiInB3i2YT5YihSDV
GcV3mMtrHA7aS5llfy/IhfMzwWbu7f+JBchD5t5E5ZdFXsvk+wYUg/J83OijdtU5
ph+et+lNB9fei6uCZckaVj83YYBCBolGbJFd1i0xgy+DdiAOW6Q1SaVJY0GKedlL
0AAn0nvwmP1nNtm+HqpRrS739ViHC2qozI1FHWxjsPRH9cPcFHCPVLbwr8Puxjxo
BssFqCKL3QV/m1AO7HAmBAdT4tSbkaXkrGDrgVEHmcAKHs3eGDEyJbiWvhCHaPHu
1pCIqCIdndoWcG3aMw9NXVOTKBI0Owcga4cCAwEAAaOCAj0wggI5MB0GA1UdDgQW
BBQUTVhJN+K/lg5QVwOKTluB9Lc5azAfBgNVHSMEGDAWgBSp3nwTOBI3xbiY1aJP
LJpss8GXGzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODU3L3FkNThFemdTTjhXNG1OV2lUeXlhYkxQQmx4cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3FkNThFemdTTjhXNG1OV2lUeXlhYkxQ
Qmx4cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NTcvcWQ1OEV6Z1NOOFc0bU5XaVR5eWFiTFBCbHhzLm1mdDBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG
CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKlPlEuzK8aLBNEQw/AOOLyz9uXNrZP9reafMVZzTk3eYh/dZCje/EDesdI+
gxXbTW4d9MbjyBV0aL2T/8EV+eWkhsnMYDPJKDsjapxdSFyt7ttb+/svsxrgVIaH
6/kq93pgXEWR/+Jva4gnVVw0xMVwzPA5dCsSgH5P8T+qpvWDZhqrclO++xFmp96W
gLG2K1OmpZ6v4b45UVzzRmGfLLnZpQWkv0zMwT1fhFRh6E94ULo9K8yh4QMwt7qn
AfSAuikPdabpIV+0zWRxFW/5Jf2E5Dor/xqhkY5NdNK9JT+Orvuw7xpyyGl0iFl1
i9Bi4wAyWr6jPTcO4x3NJ3N8fCk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:03:04 2025 by rpki-client