Manifest

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
File:                     4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json)
Hash identifier:          nKWglbLxE9IgFX5Y1KXKCnE6tmo+AUYVStGEhR4iM1Y=
Subject key identifier:   51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Certificate issuer:       /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial:       62
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
Manifest number:          0DB4
Signing time:             Wed 13 Aug 2025 19:14:01 +0000
Manifest this update:     Wed 13 Aug 2025 19:14:01 +0000
Manifest next update:     Thu 28 Aug 2025 19:14:01 +0000
Files and hashes:         1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: t9BPcXjCmHqInnYKEezjPILQrLThSWfNSPlTObmTGW0=)
                          2: dxr5UWXfhgYCs9g2WsrVKEZJACI.roa (hash: Xue1ueDJ8hT3OdTCJKtOaTgxXmUHlH8Nwl1PI7fvLXA=)
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
        Validity
            Not Before: Jul 30 06:38:30 2025 GMT
            Not After : Jul 30 06:29:08 2026 GMT
        Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7:
                    1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8:
                    8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84:
                    5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1:
                    db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d:
                    29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06:
                    d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03:
                    38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36:
                    81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2:
                    8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1:
                    c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14:
                    ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9:
                    57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18:
                    ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12:
                    73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d:
                    d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5:
                    fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5
            X509v3 Authority Key Identifier:
                keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:8b:26:3c:01:fb:af:02:c6:7e:f9:34:58:ce:a9:bc:bd:
         3d:b0:26:77:f9:94:46:f8:cd:63:d3:bd:46:92:47:8e:88:93:
         79:8d:f1:77:5d:01:9d:f1:fc:01:71:d4:c1:4e:e7:18:a5:17:
         a9:e8:9b:35:57:a0:9b:cc:e6:a5:16:62:f7:f6:75:17:8f:41:
         d3:b1:aa:13:03:3d:3c:e9:5c:0e:6d:60:c1:dc:9d:60:e3:d2:
         5b:75:50:68:20:1f:4a:4c:d7:ef:36:d2:3e:17:46:0b:33:19:
         23:ba:dc:07:fe:cf:9a:c2:44:cd:12:54:dc:98:b3:3c:77:cd:
         84:1c:2c:ab:da:38:9b:19:53:a9:b3:6c:d8:96:4b:eb:a1:bd:
         8b:5f:a8:1c:8d:db:78:24:61:f8:2f:a3:54:ea:4b:0c:83:af:
         85:72:bc:45:a1:fb:79:8b:a7:da:c0:46:72:e1:cb:9d:43:fc:
         d2:e4:f2:96:fb:ea:43:db:7a:e7:85:9b:a8:65:93:24:42:81:
         54:6b:78:cd:fc:89:08:d5:0d:a9:7e:22:c3:3a:46:43:c1:76:
         44:f7:01:da:dc:d7:8c:dc:2b:22:96:5c:36:50:48:4a:dd:0f:
         24:6d:55:a3:48:1b:46:ad:0c:b6:6d:bb:ac:25:4f:34:df:b0:
         0b:a8:e7:39
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIBYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw
QjAwNDlGMUEzRDEyM0RDQUNBNUNFQjVCNEU1RTlFQzc5NEQ3MB4XDTI1MDczMDA2
MzgzMFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNTEwQkNBRjZDRjRFMTEy
QjgyREEyNzcxNDgzODRBOUQ2RkQ3MUJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANBSYCI1kL24JfMAvhPnH7usiayAsOkazP80n8HIi9hOzJ0/2Z42
9ekQI9GEXhfKMXNwf1PZi+hasO3R2wfHDGyYXDSdjrAtv8VtKRMb+woSbzhrvh6e
Z8gG2ZIXL5o+mTAyAVNGoBYDOA1NP39NQ4FM5N9EFlA2gRk2SllaoE88Xk6pkhey
jGOguEDedo1LBTMUAPixwdSJCSbQqITC1pUnz44Urki1xIgcktVk194h7gL5V8Xi
+4jBlQYbg81uL7UYzrsWpAzwqnomU+9uwk0Sc5H8jXpDtWRx2z9EVYAd18Yvqnox
5AvQHEA4A6bV+oUgZnIgtF6d3vcFc+GLtv8CAwEAAaOCAkEwggI9MB0GA1UdDgQW
BBRRC8r2z04RK4LaJ3FIOEqdb9cbpTAfBgNVHSMEGDAWgBTioLAEnxo9Ej3Kylzr
W05enseU1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTAyNDcvNHFDd0JKOGFQUkk5eXNwYzYxdE9YcDdIbE5jLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFDd0JKOGFQUkk5eXNwYzYxdE9Y
cDdIbE5jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwMjQ3LzRxQ3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5t
ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiY4smPAH7rwLGfvk0WM6pvL09sCZ3+ZRG+M1j071GkkeOiJN5jfF3
XQGd8fwBcdTBTucYpRep6Js1V6CbzOalFmL39nUXj0HTsaoTAz086VwObWDB3J1g
49JbdVBoIB9KTNfvNtI+F0YLMxkjutwH/s+awkTNElTcmLM8d82EHCyr2jibGVOp
s2zYlkvrob2LX6gcjdt4JGH4L6NU6ksMg6+FcrxFoft5i6fawEZy4cudQ/zS5PKW
++pD23rnhZuoZZMkQoFUa3jN/IkI1Q2pfiLDOkZDwXZE9wHa3NeM3Csillw2UEhK
3Q8kbVWjSBtGrQy2bbusJU8037ALqOc5
-----END CERTIFICATE-----
Generated at Wed Aug 13 22:06:31 2025 by rpki-client