$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft File: jIbjLs6aPIUP6-ppZB81RCc9U3E.mft (raw, json) Hash identifier: Gqi5ny31Jh7VTLOAZhkEodWXNSFNuvuD2dkgSti7ASk= Subject key identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Certificate serial: 1E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft Manifest number: 0828 Signing time: Mon 20 Oct 2025 07:19:08 +0000 Manifest this update: Mon 20 Oct 2025 07:19:08 +0000 Manifest next update: Tue 04 Nov 2025 07:19:08 +0000 Files and hashes: 1: FAuks1-rbMPVI4o4MAdPNCpjZr4.roa (hash: k5URVhB5NPW9bKRRHpNzBNULQgz9A+5F7oNz6qUMPuw=) 2: G0rI23tPyJclWKpcyZ2Dmzok3d4.roa (hash: u5L9kP555TqlJ7i9uyK59zDmBFTgq6lrBq8igBAjMm0=) 3: LuIBPG5bfjcxyjZeQ7fjRykcRHs.roa (hash: 7MIE0UENzRnCU3RmC3oPKdkErupKvzeVMmcAseS8Mto=) 4: UlBpTwLMgDWZCZ8TAMVGXAmuw1E.roa (hash: JIJ0nCwlEkxGMWht7YOo4JvcgN+eK7FFKM3SLlm6qtc=) 5: jIbjLs6aPIUP6-ppZB81RCc9U3E.crl (hash: Jm18j10fEsxCz5USyEfUuJu3T+OuQ64oi6+6LwEzrWU=) 6: pSNJl3I1uz4jMohdVHD0L_eMoBk.roa (hash: ELjEJ43sQyxok5vimL6mt6O6HjtQob/kZzLhw5dVYj4=) 7: rzeTelGYE343U0zroOLR50pB_mw.roa (hash: GaipOvC3BrWgScGJRBWuBQcWaIJdPYfMHGr3Z/7jQS4=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 05:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Validity Not Before: Oct 15 01:39:40 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=5ECE2B36424F7F10C9ED27ADCA06CD776B94A6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:dc:d6:93:72:f4:2b:6a:0e:3f:9c:c7:f6: 38:f7:be:dd:56:80:77:bb:61:ef:bf:8c:bd:2b:8f: 63:ea:51:5b:d3:7b:ee:15:ae:f3:a0:59:39:f4:39: 8a:ed:56:cd:4f:cc:b7:02:99:fb:23:41:65:3a:9f: c6:fb:6e:80:f0:37:85:51:b0:71:b6:21:32:8f:ca: cc:d2:be:0f:91:d0:68:83:dd:c1:76:6a:d9:68:7e: 34:9e:8c:61:a7:fa:9d:ef:06:90:0a:43:80:5a:ed: d4:45:60:a2:8c:f3:4e:20:ed:51:53:98:dd:d3:c7: e4:9f:6b:28:45:9e:01:c8:5b:4c:d0:95:77:bd:e9: 4a:a5:52:d6:09:85:25:67:28:6a:1e:05:26:78:a0: 16:ac:6e:e0:a5:8b:cd:3c:15:84:7f:4e:5f:67:bd: 65:01:be:d2:71:4e:7d:3c:b4:fc:94:40:76:21:19: 72:91:32:5a:58:6b:70:20:82:c0:84:6a:c4:cd:cd: 45:8d:7c:0b:fd:6b:09:c7:6d:52:5c:69:53:4c:0f: 6a:4d:31:db:fa:9e:bd:e1:54:31:2e:b7:de:9d:dd: 43:72:2f:0e:d9:23:cc:50:5a:e4:9b:18:4b:a1:e6: 50:67:11:4e:cb:e7:29:ff:cd:f5:ad:a2:94:3f:e5: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF X509v3 Authority Key Identifier: keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:64:fa:a7:a5:48:9a:7c:7b:3d:09:68:45:09:00:17:11: 14:7d:e4:14:27:44:d3:68:00:43:a5:b7:63:bd:b2:e4:08:23: 5c:f8:e5:52:7b:61:14:70:51:f4:64:1f:19:bd:fc:de:93:9a: 15:83:9f:10:e5:c6:f6:3b:f6:43:20:8b:29:4d:dd:8b:d3:d5: 74:66:30:1c:61:8e:66:20:80:99:81:b0:02:39:19:35:04:42: cd:b5:18:5c:6b:96:d0:33:c7:fc:95:ee:cc:94:f8:94:7b:c2: e6:a6:5f:01:33:da:14:c3:4e:f6:41:c9:40:fc:ff:08:59:19: cd:00:92:d6:7d:86:f1:b6:34:01:49:99:a9:01:a3:1d:e5:78: 92:1d:12:6b:fd:76:f6:f1:a2:87:04:0d:a8:94:b5:87:18:d0: 04:24:45:32:f7:02:2c:1e:5b:ca:9c:02:d2:88:8d:98:66:2d: a0:38:0a:ee:e6:7d:a8:ae:e8:3c:ae:c5:dd:70:36:ee:d5:e4: 57:aa:36:dd:ee:e0:a8:6d:34:f1:9f:17:cc:00:aa:6e:e8:d1: 61:7c:39:31:af:79:cf:2f:7b:65:48:eb:5f:f1:d9:db:b5:97: 8a:c7:25:5c:ab:11:c0:77:c7:2b:99:f9:eb:f0:ab:cf:5a:2b: 4f:58:0e:30 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2 RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI1MTAxNTAx Mzk0MFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNUVDRTJCMzY0MjRGN0Yx MEM5RUQyN0FEQ0EwNkNENzc2Qjk0QTZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8V3NaTcvQrag4/nMf2OPe+3VaAd7th77+MvSuPY+pRW9N77hWu 86BZOfQ5iu1WzU/MtwKZ+yNBZTqfxvtugPA3hVGwcbYhMo/KzNK+D5HQaIPdwXZq 2Wh+NJ6MYaf6ne8GkApDgFrt1EVgoozzTiDtUVOY3dPH5J9rKEWeAchbTNCVd73p SqVS1gmFJWcoah4FJnigFqxu4KWLzTwVhH9OX2e9ZQG+0nFOfTy0/JRAdiEZcpEy WlhrcCCCwIRqxM3NRY18C/1rCcdtUlxpU0wPak0x2/qeveFUMS633p3dQ3IvDtkj zFBa5JsYS6HmUGcRTsvnKf/N9a2ilD/lCmsCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRezis2Qk9/EMntJ63KBs13a5SmvzAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAC3Rk+qelSJp8ez0JaEUJABcRFH3kFCdE02gAQ6W3Y72y5AgjXPjlUnth FHBR9GQfGb383pOaFYOfEOXG9jv2QyCLKU3di9PVdGYwHGGOZiCAmYGwAjkZNQRC zbUYXGuW0DPH/JXuzJT4lHvC5qZfATPaFMNO9kHJQPz/CFkZzQCS1n2G8bY0AUmZ qQGjHeV4kh0Sa/129vGihwQNqJS1hxjQBCRFMvcCLB5bypwC0oiNmGYtoDgK7uZ9 qK7oPK7F3XA27tXkV6o23e7gqG008Z8XzACqbujRYXw5Ma95zy97ZUjrX/HZ27WX isclXKsRwHfHK5n56/Crz1orT1gOMA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:31:16 2025 by rpki-client