Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
File:                     lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft (raw, json)
Hash identifier:          nLAdiF3MfaS6mLAIiY7xa2PFsh1HU3QFWDlz9sCmrD0=
Subject key identifier:   30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
Authority key identifier: 96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8
Certificate issuer:       /CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
Certificate serial:       02
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
Manifest number:          012E
Signing time:             Wed 08 Oct 2025 14:33:57 +0000
Manifest this update:     Wed 08 Oct 2025 14:33:57 +0000
Manifest next update:     Thu 23 Oct 2025 14:33:57 +0000
Files and hashes:         1: lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl (hash: f1jfkutnCCawA9TsWdH3qBVw+D7RSUOUGgK2y3X7XFA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9661ECD9D7D58703B8FEC86183A6225450ADF0F8
        Validity
            Not Before: Sep 15 01:44:09 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=30DDD543F4601A7C1EB62C5688A0E66B69709719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:b6:ea:8f:ae:dc:ee:6f:24:dd:e3:25:2c:
                    f0:81:7c:c5:47:6e:c1:cb:d8:0b:f7:7c:b3:78:ef:
                    87:8c:7b:ee:b6:be:7c:3a:0d:14:18:99:e5:33:9d:
                    b6:f7:fe:d1:dd:8a:54:25:4c:84:bf:72:61:70:aa:
                    e4:cb:be:4f:cf:65:85:b9:b5:11:1f:a7:85:d6:96:
                    ef:12:ee:fd:13:d5:c5:f3:f2:d8:25:d7:64:2d:31:
                    34:97:62:3e:a7:e2:7f:6d:aa:a9:38:8f:03:fe:3c:
                    1a:3c:4a:3b:d9:ec:38:8b:3d:03:fb:a1:c7:c0:f8:
                    ae:67:ac:10:59:d3:d6:03:01:42:82:48:47:be:e0:
                    cc:b6:07:3d:98:b1:f5:1a:32:5a:bd:ee:26:bc:02:
                    2b:21:c8:87:61:33:83:06:16:aa:50:05:8c:2f:3a:
                    62:d8:f9:a3:b5:e8:81:d8:f4:80:21:58:ca:d0:93:
                    6e:af:db:5b:bf:af:8e:4b:fe:44:ed:63:d7:86:5a:
                    75:56:16:38:b9:b7:cf:78:87:0b:41:b8:72:b6:7b:
                    00:05:fb:68:4d:18:c1:dd:16:82:61:6c:dc:54:65:
                    87:73:48:63:97:36:69:e9:2a:6f:63:1b:45:e5:30:
                    9c:34:51:bf:14:ba:9c:33:02:0a:74:dd:72:73:20:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DD:D5:43:F4:60:1A:7C:1E:B6:2C:56:88:A0:E6:6B:69:70:97:19
            X509v3 Authority Key Identifier:
                keyid:96:61:EC:D9:D7:D5:87:03:B8:FE:C8:61:83:A6:22:54:50:AD:F0:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lmHs2dfVhwO4_shhg6YiVFCt8Pg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20118/lmHs2dfVhwO4_shhg6YiVFCt8Pg.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:8b:15:75:3c:0e:52:52:a3:52:70:36:1c:ad:45:03:fe:2e:
         17:83:a4:cf:bc:19:21:5e:49:cb:d9:ed:58:42:a7:12:42:3b:
         86:59:54:bd:60:d4:a9:cb:b9:65:fc:a8:bf:b2:f7:ba:df:63:
         bb:3c:da:91:44:a8:bf:b9:18:f0:e7:cf:69:75:88:d7:af:d5:
         26:6a:80:a0:1d:07:fb:01:00:66:81:25:5b:27:54:d5:66:05:
         ee:0b:5a:15:cd:24:a8:c7:b5:ad:b6:ba:a7:7b:d1:c3:0c:66:
         2f:f7:3e:c4:83:5a:03:c4:8a:9e:72:e9:aa:b6:d1:c9:98:55:
         43:98:cb:cf:6a:33:00:81:fc:e9:91:e3:64:32:c8:b5:13:17:
         f7:59:67:a6:fa:6e:69:b6:02:2e:1a:54:1b:fe:e6:e5:1e:ab:
         8e:19:55:2c:1d:d9:cb:7e:07:8b:ad:07:d2:87:d2:b9:f7:01:
         a4:10:b5:4c:85:80:cf:f1:bc:b7:25:92:63:6e:a8:34:d3:ea:
         45:ba:cc:c4:14:98:d8:35:fe:79:c8:3b:3e:fb:24:10:c9:9e:
         37:31:64:48:93:6a:32:7e:38:67:b8:2b:80:91:ae:02:a0:bd:
         43:1a:7d:dd:3e:d5:2c:cf:39:f6:22:1f:ca:08:51:33:40:f0:
         a5:a1:6b:2e
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjYx
RUNEOUQ3RDU4NzAzQjhGRUM4NjE4M0E2MjI1NDUwQURGMEY4MB4XDTI1MDkxNTAx
NDQwOVoXDTI2MDkxNTAxMzAwMlowMzExMC8GA1UEAxMoMzBEREQ1NDNGNDYwMUE3
QzFFQjYyQzU2ODhBMEU2NkI2OTcwOTcxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMjtuqPrtzubyTd4yUs8IF8xUduwcvYC/d8s3jvh4x77ra+fDoN
FBiZ5TOdtvf+0d2KVCVMhL9yYXCq5Mu+T89lhbm1ER+nhdaW7xLu/RPVxfPy2CXX
ZC0xNJdiPqfif22qqTiPA/48GjxKO9nsOIs9A/uhx8D4rmesEFnT1gMBQoJIR77g
zLYHPZix9RoyWr3uJrwCKyHIh2EzgwYWqlAFjC86Ytj5o7Xogdj0gCFYytCTbq/b
W7+vjkv+RO1j14ZadVYWOLm3z3iHC0G4crZ7AAX7aE0Ywd0WgmFs3FRlh3NIY5c2
aekqb2MbReUwnDRRvxS6nDMCCnTdcnMgdAsCAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBQw3dVD9GAafB62LFaIoOZraXCXGTAfBgNVHSMEGDAWgBSWYezZ19WHA7j+yGGD
piJUUK3w+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTgvbG1IczJkZlZod080X3NoaGc2WWlWRkN0OFBnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbG1IczJkZlZod080X3NoaGc2WWlW
RkN0OFBnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE4L2xtSHMyZGZWaHdPNF9zaGhnNllpVkZDdDhQZy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfixV1PA5SUqNScDYcrUUD/i4Xg6TPvBkhXknL2e1YQqcSQjuGWVS9
YNSpy7ll/Ki/sve632O7PNqRRKi/uRjw589pdYjXr9UmaoCgHQf7AQBmgSVbJ1TV
ZgXuC1oVzSSox7Wttrqne9HDDGYv9z7Eg1oDxIqecumqttHJmFVDmMvPajMAgfzp
keNkMsi1Exf3WWem+m5ptgIuGlQb/ublHquOGVUsHdnLfgeLrQfSh9K59wGkELVM
hYDP8by3JZJjbqg00+pFuszEFJjYNf55yDs++yQQyZ43MWRIk2oyfjhnuCuAka4C
oL1DGn3dPtUszzn2Ih/KCFEzQPCloWsu
-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:19 2025 by rpki-client