Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
File:                     k7zbQzOWxD6rB23Nx69GLCK1AXY.mft (raw, json)
Hash identifier:          60L95HK5JjUcFSvVLx/Al4Wn8HsboGfFdvFJlA141Ng=
Subject key identifier:   F4:3B:54:94:20:C8:6D:14:00:5A:5C:FA:96:55:52:FA:D0:D8:66:30
Authority key identifier: 93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76
Certificate issuer:       /CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
Certificate serial:       27
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
Manifest number:          0822
Signing time:             Wed 08 Oct 2025 15:37:31 +0000
Manifest this update:     Wed 08 Oct 2025 15:37:31 +0000
Manifest next update:     Thu 23 Oct 2025 15:37:31 +0000
Files and hashes:         1: QL8Kh8Afpr5z-TNFAE05WgkHD0w.roa (hash: OW6mY8qqErVOcwLnAoef+6LSSGN1ZmvT+cZfNvBmHzg=)
                          2: k7zbQzOWxD6rB23Nx69GLCK1AXY.crl (hash: OJCCRWK/yfnCdKH35K9VT6sKW/xD+lwzAj41FqpCmUc=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Oct 2025 15:51:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
        Validity
            Not Before: Sep 15 01:35:59 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=F43B549420C86D14005A5CFA965552FAD0D86630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4e:a0:89:7b:92:48:49:a6:92:40:df:d6:e2:
                    4b:6d:51:3e:22:a9:78:c8:b8:e3:ed:a8:fc:18:91:
                    15:bd:c9:86:28:03:3c:dd:7f:96:26:36:57:cf:3e:
                    f4:c1:b2:34:58:33:4b:7d:5f:ec:06:22:76:13:f6:
                    83:f6:82:6c:db:7f:d4:7d:32:bf:a0:b8:cc:15:5d:
                    f2:fc:93:a8:83:d7:08:3e:bb:50:2c:fe:e4:e3:e3:
                    63:8a:17:e2:fd:70:58:ed:f2:d9:43:48:4e:69:78:
                    d2:aa:7b:f8:35:70:88:30:e8:4e:af:11:79:de:00:
                    86:5f:fc:c0:0d:e1:94:a0:3d:7b:19:15:59:da:ba:
                    ef:3a:75:fd:b1:41:7c:56:08:6f:f9:72:28:16:c0:
                    9a:26:6c:49:34:42:24:63:67:3c:27:ba:01:61:97:
                    01:e9:a9:bc:7f:b0:65:55:3b:94:9f:c5:1e:60:93:
                    79:9d:02:5b:43:d1:fa:ce:6f:88:d3:53:d8:39:e9:
                    fd:b0:77:be:a9:86:a6:8f:25:c1:db:d2:96:9a:ba:
                    09:9f:4b:d3:19:5a:f9:7e:d1:f0:a4:ab:2b:93:00:
                    06:9b:2b:f1:4e:d8:19:07:0c:e6:2d:67:2f:d8:f5:
                    7c:00:67:21:b1:d6:79:91:8c:c2:cf:90:4e:12:63:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3B:54:94:20:C8:6D:14:00:5A:5C:FA:96:55:52:FA:D0:D8:66:30
            X509v3 Authority Key Identifier:
                keyid:93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:75:dd:8e:f1:7b:69:fe:ed:1f:c7:af:89:ff:2a:fa:cd:
         1f:f0:1b:9a:5e:60:69:b6:01:4c:b4:b0:b8:0c:e2:bf:51:1d:
         cf:f1:92:09:b2:c5:48:cc:c8:4e:fe:dc:21:38:d6:02:ea:b9:
         82:54:b8:bf:e9:41:7a:0a:f1:08:25:9e:83:72:92:b4:11:c9:
         24:8b:4c:19:ca:41:66:fe:28:1c:e5:0c:10:84:f0:7d:e8:a6:
         b3:ed:93:7d:dd:d7:38:42:b1:19:99:a4:86:4b:1d:bd:aa:d8:
         02:fa:9f:96:60:41:a1:9d:4d:af:cf:ef:9a:d4:fc:e5:c2:38:
         9b:0d:f5:a3:79:d2:b9:7e:1a:88:fa:7b:c6:c6:57:e0:73:27:
         96:c5:80:cf:68:0a:f0:64:ad:32:2c:26:8e:d1:af:52:eb:51:
         2f:b8:e8:b4:95:bd:ca:10:09:f2:13:93:35:79:e2:b8:06:6d:
         af:23:b4:66:99:00:61:b6:fb:89:19:81:27:54:6f:d0:3d:f4:
         0b:f1:bd:27:86:b6:ad:d0:1f:1e:ea:fc:7c:0f:cf:6e:8d:12:
         b1:48:5b:b1:f0:87:c2:57:05:d2:a8:65:ec:f3:80:72:db:b8:
         14:ae:1f:83:b9:fe:b9:c6:b7:58:eb:31:46:87:b9:aa:0f:ac:
         ae:2d:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:31:01 2025 by rpki-client