$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json) Hash identifier: ZFMbKEYY1i6l0SRK9T0urqSRVGnhWsU9L0AG6Hn90js= Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 7B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft Manifest number: 12B2 Signing time: Fri 04 Jul 2025 13:02:50 +0000 Manifest this update: Fri 04 Jul 2025 13:02:50 +0000 Manifest next update: Sat 19 Jul 2025 13:02:50 +0000 Files and hashes: 1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=) 2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: dafdZsy0BanZ4C5E86paxYhuv1r5phwB87rnOaKtUjI=) 3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=) 4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=) 5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=) 6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=) 7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: Jun 15 01:31:34 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7: 56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b: 62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05: 53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e: 2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7: 08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c: 71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b: bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac: 57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b: ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be: a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4: 97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5: 83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3: 0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63: 9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca: 1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71: 2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:36:5c:9c:ae:e1:62:20:fa:00:6c:f1:1a:ab:a4:df:2a:37: 8b:3f:31:aa:ef:ef:54:d2:0a:ad:a0:3a:ca:84:ea:73:e2:20: 1e:5c:ba:f0:7b:56:b7:af:50:81:46:38:93:cf:ba:39:2b:21: 6b:18:c2:90:b5:d4:4d:e2:5c:62:96:51:60:b0:c4:4a:44:df: c5:f2:e9:43:0a:b8:fc:5a:7d:4d:4e:a5:f1:59:cd:f7:af:7f: 1c:5f:ec:4b:9e:0e:2b:b2:16:06:64:ce:0a:98:61:6e:aa:3c: 32:b0:e5:f8:5c:08:56:52:25:44:57:f7:c3:80:7e:ca:ef:b4: 30:b1:e6:be:ba:fd:7a:2d:49:94:0c:61:a5:d9:66:ff:0e:07: 43:bc:6c:c0:10:d9:59:a2:07:f8:1e:8a:25:b8:8e:b7:14:1b: bb:4b:f4:9c:d2:69:ce:e1:34:97:58:54:ab:d4:99:31:00:20: 9c:9e:3c:1a:da:ce:3e:d3:ee:35:5c:de:31:c3:00:bf:7e:1b: 89:78:83:5a:7e:64:e0:9b:6e:43:d0:4a:d9:1f:3f:ff:43:57: 04:ec:9d:f8:b6:38:3b:69:76:e4:07:80:7b:1b:a7:53:a1:19: 11:16:38:92:fe:8a:5b:fc:0b:f0:56:3a:4e:83:fd:c6:a0:ff: c1:02:5b:56 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2 RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI1MDYxNTAx MzEzNFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMTIzN0ZBMkM0N0E5NjFD MkY5NjZGM0IyMEJCMDlEMjQ3N0FFRjMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZOHN3hMrq5dD/HZETHVu6+NnqARWP0KxhtNZsbYsYEtc74Uxsm /M2sH2wFU020xFcQDAz2tMFpbWk+Kz3y2K4bxYUbPSnaGdr3CGApgds8pJKCnPEu Gc4McasHYN31hJOVHcNyq8ALvUkGmwbN8i4/EtozVJesV9mh1VknLIi0+QQXPU6L 7ilqQ1mhGzSEHAur+C2+oEJrTFD3lXzcBRJkEhfEl6myH+726ImBjKFELtKlg7Gv uj7CO2EQvoec4GajCsFh04R5Gfd8grztWp5jnoHZjrUQ4LLJ5RSoqO3KHXFBvn2X osI6ejbl/4dxL0YbOTlygT0BGK9ATs3cUJECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQSN/osR6lhwvlm87ILsJ0kd67zBzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1 uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfNlycruFiIPoAbPEaq6TfKjeLPzGq7+9U0gqtoDrKhOpz4iAeXLrw e1a3r1CBRjiTz7o5KyFrGMKQtdRN4lxillFgsMRKRN/F8ulDCrj8Wn1NTqXxWc33 r38cX+xLng4rshYGZM4KmGFuqjwysOX4XAhWUiVEV/fDgH7K77Qwsea+uv16LUmU DGGl2Wb/DgdDvGzAENlZogf4HooluI63FBu7S/Sc0mnO4TSXWFSr1JkxACCcnjwa 2s4+0+41XN4xwwC/fhuJeINafmTgm25D0ErZHz//Q1cE7J34tjg7aXbkB4B7G6dT oRkRFjiS/opb/AvwVjpOg/3GoP/BAltW -----END CERTIFICATE-----Generated at Fri Jul 4 15:07:40 2025 by rpki-client