Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
File:                     lhvBhRJyKq-akNiYreqa93k8JUM.mft (raw, json)
Hash identifier:          jIB6AuK2ahVXC5VztVWNAwu4bMGkbGJxMsAqqyTMJDs=
Subject key identifier:   52:47:14:7E:C7:B1:05:0F:D9:16:07:CB:93:43:04:89:B9:7E:6D:96
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       96
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
Manifest number:          08A1
Signing time:             Wed 08 Oct 2025 13:53:04 +0000
Manifest this update:     Wed 08 Oct 2025 13:53:04 +0000
Manifest next update:     Thu 23 Oct 2025 13:53:04 +0000
Files and hashes:         1: -EYPjc-1OtupKk3IkPs4aiUXmnE.roa (hash: 0DvnjSEvmbqBL+F09fNsBqbo/kjPZ18x5d0xcsQUCRA=)
                          2: -mTp7CGpaAyfGFzYPgwq3g0-0TE.roa (hash: ImaWK/Xek2iBMosBnPJ5h3LKDOSsV/w+1uM9qPRuB48=)
                          3: -t1olW9o_gUcfjcQ_szT3spKT58.roa (hash: jWOr0By/vHBBmBJO/Vp/NoL/BXo2pMyLLM9zGj20d0I=)
                          4: 08WI9jqMgxCl-aJyoyQcXodG-EQ.roa (hash: NPj+aBUn8LKwb7NVUPZ0v6c5V2jzkffYfU8Z6weaIBs=)
                          5: 0C3kwOLi_PDwYaf87r8U_reyjl8.roa (hash: 5BpyPRNwuiH0dRb74Iok8oNqyEaERIBDH1rl86U2m/I=)
                          6: 6gRM3zZltqc0O-trdPtmt0kicaA.roa (hash: aBSlh6qu3GD+NRHiQ4fGQ8rsS50ndTQ0zJx7xeNtfQs=)
                          7: CGwUkEdxHDDmFPphqwr5WfaUmXo.roa (hash: RDGVT40hiwdqqloC+wYUDuM+CtSAHdr80fY0SvKFLn0=)
                          8: KYVeAzgD9T4Ziy5Tvppks_YKaq0.roa (hash: 4XEhxO/TFxZym9g0jzbt/pZO06kn8PIYBkZSW1/okOQ=)
                          9: NTP9DNsk25m7ShZa6-5Qk1gwBdM.roa (hash: nnGwxbmOaQ2PcyIAvA38UkOG+pw6LeTpIBPHkVu8Oqk=)
                          10: Q96g01N1Ko1wcDB4imCyXf0gkvM.roa (hash: vXKSBvol47PmT9aWSbwe++omPmqyzaR6wTsbqiyLGjc=)
                          11: cz2nb9lxyWMqkzYLvtTZ9XcBJBA.roa (hash: rKKtwj25LgJU9wI6pccwOvIFlNQZXLM1B3YH42ItXFg=)
                          12: d0_fvys9RBcez5NAz4p6hFCfaLQ.roa (hash: X6ycNiBinqVQMY/T2ryDmB+usk3qUEmjYz1HU7gQOEI=)
                          13: eGd28wJPGsCW2OqH0nLvNrC7h-8.roa (hash: m7U40XEN1+JsNjnQx1ncOA83o+p72tter0VXmLzrZmE=)
                          14: gTg8A2-GjwpHrxWg3k5j8eNweyw.roa (hash: 2ZuLRBZEyVB5YzS2B6KaU1OwrkprE6GuwPdwSA7pp34=)
                          15: h6ZJhIxnSIgVFKztoEbXa5W5UTw.roa (hash: UNvvBLc8nbMmM23sWxHwczhG6wRHOey7P8iCXoxaXWs=)
                          16: hcObqLZLO9c32KfiFmQImDC2k8M.roa (hash: +fH8UaNbBQB7H13041Eo009AFhx1Xyvia0TEmaeVPjE=)
                          17: kAYiuIuhD2hPXMFdCEp-MazuNrw.roa (hash: 9+HxG8n7pYBP4IV/JgKUi8nNQSENVBvEPivVoeqbQo4=)
                          18: l0mdJFFJMOZxnlUkv6OM0NQHxM4.roa (hash: bjijf1iNfpncFRDhQBdERDJiT76VyxEO+J8HXN4Y64k=)
                          19: lhvBhRJyKq-akNiYreqa93k8JUM.crl (hash: 9mazT7y3AEFb3Avlj0v1WRT2DUYYanueCDQBf1tyT1s=)
                          20: p9U4HgkaF--BkNLTmH3i3rZ30uM.roa (hash: fxgpZ06Kw3FXiY9ZU/Hw7MO//Y2cp3Ui8UY/Jf5hZVY=)
                          21: q1GjCumXoBxPA-ZCcpdhqmlO3F0.roa (hash: vicASxjLvXb4Yg2fIt287rfi0eY/50Q7jdHGjdEpFFc=)
                          22: wGx8nN-QKK11yzxUXSEzmJ5CSWM.roa (hash: Vp2G1o7ihEn83AJv+NqhHBxWYcshRr3XD6GFAMzfLhY=)
                          23: wcQX41105GX6DmOLczCVYhTzx3g.roa (hash: ykjc5YWMyt8w0l9hegCdxqBLOK777khogq25fKG/Y2o=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 15 01:34:24 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=5247147EC7B1050FD91607CB93430489B97E6D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:a3:1d:c3:50:c0:ff:9a:79:81:73:d9:0e:
                    60:32:22:86:ee:3f:e2:a8:00:bb:40:12:28:ec:91:
                    51:93:54:c2:35:67:e4:55:e8:a7:2f:eb:ab:5a:4a:
                    72:5f:01:b9:ee:d3:0f:90:3b:fd:12:89:77:44:4e:
                    27:88:b2:04:58:5c:6d:0c:c3:cd:45:4b:e7:36:e8:
                    bb:32:48:8d:fe:b7:22:76:ee:4c:9d:24:d3:a6:ca:
                    46:31:82:7b:25:86:66:67:04:f6:e0:b1:8a:8e:0d:
                    b9:c0:24:ec:9a:82:da:42:ee:12:2b:4e:b6:6a:54:
                    e9:e6:b7:f4:6f:52:d3:f8:8e:97:8d:07:cd:1e:76:
                    9e:3e:59:c1:ab:24:50:e1:fe:aa:e6:34:fa:94:1b:
                    55:aa:1e:2c:a0:7a:15:28:14:ff:c9:b4:9a:6e:86:
                    84:94:f6:16:fa:c3:be:e9:2d:1b:b1:26:d7:a8:1a:
                    a6:79:93:d6:aa:59:1d:89:30:fd:ce:3a:0d:27:34:
                    63:f8:e3:6c:c4:06:80:83:95:1c:b6:90:5e:db:2a:
                    26:eb:59:ac:03:45:ab:7d:ed:e1:06:e5:dc:a1:58:
                    9f:5b:37:36:ba:c3:2b:49:73:04:98:b6:46:91:59:
                    32:f0:24:ab:ec:53:86:31:87:97:89:e7:04:82:80:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:47:14:7E:C7:B1:05:0F:D9:16:07:CB:93:43:04:89:B9:7E:6D:96
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:47:5a:df:d6:f6:94:7c:14:66:9c:13:f2:60:6a:e2:e0:
         b7:fc:48:2c:82:57:65:dd:68:fa:67:ba:f7:9f:22:83:6c:77:
         b4:e1:cf:f0:48:9d:b6:ad:1b:6b:81:19:bd:e1:8a:d3:ab:a8:
         99:5e:56:e9:f6:87:36:37:1c:96:5f:7b:31:2c:ac:4e:70:b9:
         0e:74:b6:ed:37:b9:d6:86:1a:f7:44:58:38:7b:d3:e7:ab:40:
         85:b8:db:e1:ef:23:e7:62:b5:bb:6f:e4:75:53:29:39:3a:7b:
         b5:4b:07:31:e5:33:ac:b0:ca:5d:d7:cf:92:d0:ec:9f:db:d1:
         02:0c:bd:9d:8a:1b:b6:c6:aa:8f:9b:5f:b6:72:1e:ea:aa:80:
         ce:cb:e0:22:47:57:d8:c6:27:94:b7:96:72:97:76:e1:09:27:
         cf:fe:42:3f:53:70:38:55:51:77:a3:e0:6e:a0:0e:0c:6c:9f:
         bb:78:a9:51:61:0b:f1:bc:80:b8:f2:85:28:98:6f:68:47:cf:
         99:cd:a4:cc:4c:72:23:a0:7d:e7:bf:97:51:f8:c3:2b:87:6f:
         9a:fb:35:3f:1d:56:22:f2:96:5f:04:74:d8:e1:e3:fc:91:6e:
         60:e2:28:6c:35:42:dc:3a:ad:7a:db:9f:06:6f:64:8e:3f:6b:
         4b:89:ab:42
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTYx
QkMxODUxMjcyMkFBRjlBOTBEODk4QURFQTlBRjc3OTNDMjU0MzAeFw0yNTA5MTUw
MTM0MjRaFw0yNjA5MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyNDcxNDdFQzdCMTA1
MEZEOTE2MDdDQjkzNDMwNDg5Qjk3RTZEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4KqMdw1DA/5p5gXPZDmAyIobuP+KoALtAEijskVGTVMI1Z+RV
6Kcv66taSnJfAbnu0w+QO/0SiXdETieIsgRYXG0Mw81FS+c26LsySI3+tyJ27kyd
JNOmykYxgnslhmZnBPbgsYqODbnAJOyagtpC7hIrTrZqVOnmt/RvUtP4jpeNB80e
dp4+WcGrJFDh/qrmNPqUG1WqHiygehUoFP/JtJpuhoSU9hb6w77pLRuxJteoGqZ5
k9aqWR2JMP3OOg0nNGP442zEBoCDlRy2kF7bKibrWawDRat97eEG5dyhWJ9bNza6
wytJcwSYtkaRWTLwJKvsU4Yxh5eJ5wSCgEJhAgMBAAGjggJBMIICPTAdBgNVHQ4E
FgQUUkcUfsexBQ/ZFgfLk0MEibl+bZYwHwYDVR0jBBgwFoAUlhvBhRJyKq+akNiY
reqa93k8JUMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDQyL2xodkJoUkp5S3EtYWtOaVlyZXFhOTNrOEpVTS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xodkJoUkp5S3EtYWtOaVlyZXFh
OTNrOEpVTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDA0Mi9saHZCaFJKeUtxLWFrTmlZcmVxYTkzazhKVU0u
bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B
AQsFAAOCAQEAYLVHWt/W9pR8FGacE/JgauLgt/xILIJXZd1o+me6958ig2x3tOHP
8Eidtq0ba4EZveGK06uomV5W6faHNjccll97MSysTnC5DnS27Te51oYa90RYOHvT
56tAhbjb4e8j52K1u2/kdVMpOTp7tUsHMeUzrLDKXdfPktDsn9vRAgy9nYobtsaq
j5tftnIe6qqAzsvgIkdX2MYnlLeWcpd24Qknz/5CP1NwOFVRd6PgbqAODGyfu3ip
UWEL8byAuPKFKJhvaEfPmc2kzExyI6B957+XUfjDK4dvmvs1Px1WIvKWXwR02OHj
/JFuYOIobDVC3DqtetufBm9kjj9rS4mrQg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:30:58 2025 by rpki-client