Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
File:                     qggJfGBgcQKAzaqk5-BsHxPNFvI.mft (raw, json)
Hash identifier:          bC/3fFETwp/IFjJzP77g9BouFkz5T7YDoM52iQiGxrw=
Subject key identifier:   DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
Manifest number:          0954
Signing time:             Mon 20 Oct 2025 14:25:35 +0000
Manifest this update:     Mon 20 Oct 2025 14:25:35 +0000
Manifest next update:     Tue 04 Nov 2025 14:25:35 +0000
Files and hashes:         1: A2HbR0tifjK7EU0pCY-NJriQPHE.roa (hash: +OH53Uwh6adch0mud2QP58gAk+D1/9afXq0r9C5mPe0=)
                          2: IUyLfhIPkw20z59XzKhIivWbXso.roa (hash: Iq5SYxQQBdehoAHdmMS0IumJxieG5jehySaNykurtJA=)
                          3: JZRHJVOa8hEw3bPEbJUeTkRrGSY.roa (hash: s4dDzYW1h8Irm+ZjUSlt3YrM9ewFA/yZNLYFD4L2U6w=)
                          4: YhbbQbUWmYQIVeel-VbjxAkTCyw.roa (hash: oK2HKr1pskMMHThSY1Jc5pcKl3UQ76lWFkKYj0EKCDc=)
                          5: csY5cNEBJtQRyU-Lo8UoYLgxjzk.roa (hash: VFmKuGJTJTGGMbsum/EqDWz6RxCWDE2Zr8nj+R7esfY=)
                          6: iY8wxWWqnLBTx1z3zHgGnt65Mng.roa (hash: KVI/kF1AcO+x/OMCrIV8TxyM//6qQt7UHkqr9zybipE=)
                          7: kzs2e9NIUX3AEkjFSGoClWE7-RU.roa (hash: ZIj7bKLYikXuc/Q2YNySDM67A2uRGKahApq2ndFHv0M=)
                          8: lnrKeqsKIyOTGivbgELUYqOJNy0.roa (hash: p+cw/5btMqGORlUVu+D5rpYoTWjbia2QSzMpdq0tu+A=)
                          9: oIcXxcqR4Pd9L_40aXtMY4ygCcs.roa (hash: Mf5dV9vCSo+Ayz00aEu6qXOIMKA8kGbvYMlNNym8gBs=)
                          10: qggJfGBgcQKAzaqk5-BsHxPNFvI.crl (hash: DkxPUwUhTAz9oECmoLsv1EiWallFPCcQM0dRTSqqKLI=)
                          11: vSZnC0IMMdDOrGP9BttO_QkmtFc.roa (hash: CffTQg8fxhj/TW1nhR0yLFaAYy6XcsEtzNb2ocP1np8=)
                          12: yjXljVumuFpn88V8J2PDjSR0DzM.roa (hash: +5CfFKVcgKIqXZSm6uNlLlrwPHJZGWL1QX51JCLPUmA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct 15 01:34:25 2025 GMT
            Not After : Oct 15 01:30:02 2026 GMT
        Subject: CN=DD9C42D45F6CD31072F318A68C97E879874FD70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8a:88:4f:de:4c:f8:cd:cb:b0:ef:1c:d3:99:
                    d2:2a:98:49:fc:ab:51:74:68:32:52:fa:50:e8:20:
                    e5:fb:bd:dd:ba:8b:90:2e:b6:e1:bb:9c:7f:11:15:
                    97:82:5b:87:53:6a:04:68:d0:55:03:c3:43:b3:f5:
                    ec:62:c8:65:ec:c5:65:cc:f0:9b:36:b9:2d:8b:ef:
                    8e:5d:0e:d0:19:a3:35:a7:fe:29:72:06:9a:64:a6:
                    86:63:e2:fd:e5:6d:49:f4:8f:6a:43:ad:e6:52:07:
                    c4:5f:8a:2e:ba:a5:af:81:a4:c8:5c:a3:0e:0e:d3:
                    5f:45:c2:83:46:89:89:0a:0d:da:e2:9e:c9:df:e3:
                    ec:25:ab:c9:48:56:2e:79:ef:31:f2:24:48:51:0c:
                    e9:13:de:58:b2:77:8f:fa:7d:32:dd:7d:a4:ef:60:
                    89:16:a9:19:44:f9:7c:ee:fd:08:be:e9:9a:57:52:
                    17:74:ef:73:23:1a:a3:b9:ff:9f:8c:d8:7c:73:f6:
                    5d:8d:b4:c3:b8:9c:ab:73:a0:b0:fa:0c:24:b8:ed:
                    33:e7:b4:4d:32:85:73:09:23:53:75:56:6e:9e:5f:
                    91:ea:2f:48:f6:9b:c6:c4:22:68:58:d1:31:4f:88:
                    90:87:1d:0c:15:86:9a:8d:52:f8:e2:74:30:b2:0c:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9C:42:D4:5F:6C:D3:10:72:F3:18:A6:8C:97:E8:79:87:4F:D7:0C
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:23:b7:ee:93:1c:61:d4:36:70:10:9f:8d:e5:1f:d0:9a:0b:
         78:87:31:96:2a:5d:eb:cb:0e:7c:3e:e6:36:d8:c7:62:05:06:
         27:0b:ef:02:c7:2e:1c:e5:bc:ee:e1:c5:e4:9c:18:6f:61:5c:
         39:01:3f:fd:e5:ee:1e:89:3b:f9:4f:c6:7f:51:07:44:29:11:
         c8:25:69:b1:97:73:48:5c:11:e8:24:9e:47:25:c3:11:44:06:
         f4:9f:f9:31:7d:8b:68:9c:ca:fd:76:37:2a:65:07:ba:44:12:
         46:8d:83:e3:34:49:cf:0a:20:67:da:bc:7e:1b:d1:26:1a:c5:
         bf:c0:b3:ca:7e:5b:d3:1b:6d:44:c4:1f:10:e2:8e:9c:18:46:
         1e:36:ee:ce:b4:17:01:b6:16:f3:ab:72:43:f4:94:69:80:1f:
         39:d3:02:a9:0f:34:a7:0a:72:97:8d:c6:cd:ed:80:52:31:68:
         a5:96:48:f2:0c:b2:2b:2c:85:4b:fc:20:cf:60:f4:9f:39:01:
         4c:48:6d:ca:7f:4a:f6:4f:33:8e:0c:32:ca:9a:32:3c:5e:62:
         05:a2:5b:10:3b:c1:82:3e:ad:3a:04:62:6d:ca:62:13:13:a7:
         f0:9b:7e:f3:ba:37:e0:86:fa:84:c2:f7:30:75:54:d1:02:1b:
         f5:57:8a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:03:26 2025 by rpki-client