$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft File: KPOWmDwzKEL92rYXWVowqDwzNGQ.mft (raw, json) Hash identifier: 5alHBJm0wamOuUBActlf9oAnYziCk9qY0U9z78LV260= Subject key identifier: 91:F4:93:F7:95:91:1E:C8:86:12:BE:AE:0C:64:2B:63:98:16:0F:9F Authority key identifier: 28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 Certificate issuer: /CN=28F396983C332842FDDAB617595A30A83C333464 Certificate serial: 11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft Manifest number: 06F3 Signing time: Mon 20 Oct 2025 14:54:54 +0000 Manifest this update: Mon 20 Oct 2025 14:54:54 +0000 Manifest next update: Tue 04 Nov 2025 14:54:54 +0000 Files and hashes: 1: KPOWmDwzKEL92rYXWVowqDwzNGQ.crl (hash: qra1HtDdkWWoSVsBRSgLIhL3cox7VPvhUBsQlkIFdQI=) 2: U2nFppC68ZjAXNcLdhuTAZfdx90.roa (hash: hFQcUEcCJ4qoEZDptInb/UYMsDb8MTZmN3/9x++60vw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28F396983C332842FDDAB617595A30A83C333464 Validity Not Before: Oct 15 01:32:52 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=91F493F795911EC88612BEAE0C642B6398160F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1f:5d:0d:fb:69:9b:3a:01:3c:ac:0b:a6:67: 0b:5d:73:4c:44:d5:f9:e2:76:35:d0:b9:26:5a:80: 38:13:4b:0d:c7:07:a3:0a:85:1c:dd:7a:a9:a3:21: 19:19:ca:9a:eb:66:e3:e9:dc:7d:6d:c6:77:fe:fa: 0b:66:22:39:21:70:95:94:19:ba:1c:f8:06:ba:de: 15:ec:11:d5:fd:c9:15:82:c5:12:fe:10:8f:06:93: 28:14:1a:be:73:1b:bb:87:ff:20:eb:1f:84:0b:98: 07:ca:da:de:d2:6c:78:bd:49:33:a9:f4:4b:7c:1c: e8:58:5e:54:48:95:90:e1:24:5a:74:2b:8a:34:1a: 40:34:99:b6:2c:8f:af:09:5b:d5:22:17:43:6d:e1: 73:88:05:9c:a3:eb:35:c7:d0:9e:c6:bd:d8:f1:de: a8:1e:ef:32:58:20:e1:58:59:02:a5:9f:ba:a5:64: 6f:4f:4c:1b:86:87:fd:1e:06:f9:4a:49:79:a9:e1: 19:4b:33:18:aa:4a:e5:45:32:b4:42:0a:be:e4:03: 5f:76:2b:52:6e:45:57:6f:c2:d0:f9:25:f1:f3:c5: 26:e4:ce:d5:a5:de:6b:98:99:6c:5a:f6:2d:57:e0: 8a:5a:0d:bb:62:79:2d:e4:cc:c5:d7:d5:72:f8:a2: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F4:93:F7:95:91:1E:C8:86:12:BE:AE:0C:64:2B:63:98:16:0F:9F X509v3 Authority Key Identifier: keyid:28:F3:96:98:3C:33:28:42:FD:DA:B6:17:59:5A:30:A8:3C:33:34:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KPOWmDwzKEL92rYXWVowqDwzNGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1169/KPOWmDwzKEL92rYXWVowqDwzNGQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:27:b7:ea:fd:3a:e7:d0:91:dd:ab:c0:15:61:d9:b5:d9:cd: 51:3b:69:f1:be:58:f1:e5:32:a5:0f:40:d9:5e:57:6f:20:10: 14:96:40:03:8d:6d:0b:78:7e:c5:71:c3:55:33:f6:03:bb:48: e8:11:1f:01:9c:dd:6e:05:b9:4e:20:77:64:80:06:aa:5a:c8: 17:b8:10:36:bf:29:d6:0b:93:6b:9b:34:cc:4c:22:d1:d2:75: f2:ac:d8:01:ec:c1:7e:5c:15:c3:03:87:6f:d7:b0:e5:51:ec: e9:67:55:96:86:2c:fc:2b:51:c5:e5:92:61:39:7d:fc:e4:af: 80:6a:50:10:52:2e:0f:36:aa:82:ad:90:fa:c0:d4:63:d0:65: e0:bf:a0:c1:cb:17:33:a9:30:ba:67:40:52:cb:38:94:c2:59: 8f:eb:45:b6:24:93:cb:3f:26:78:a0:36:91:f2:9d:78:db:80: 77:48:cb:c8:0c:87:75:a1:0a:cb:3d:f6:74:95:68:31:da:22: fb:8c:ce:67:7c:81:b6:22:a7:ff:b9:a3:1f:0d:c0:2d:20:9a: 6c:21:9e:ba:2e:ea:a8:97:ad:fc:21:4b:96:a1:3b:c4:9a:9e: 6a:29:61:12:a3:8e:8c:aa:ae:1a:1a:49:1d:1b:41:80:c1:12: 4c:cc:4e:93 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOEYz OTY5ODNDMzMyODQyRkREQUI2MTc1OTVBMzBBODNDMzMzNDY0MB4XDTI1MTAxNTAx MzI1MloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoOTFGNDkzRjc5NTkxMUVD ODg2MTJCRUFFMEM2NDJCNjM5ODE2MEY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALAfXQ37aZs6ATysC6ZnC11zTETV+eJ2NdC5JlqAOBNLDccHowqF HN16qaMhGRnKmutm4+ncfW3Gd/76C2YiOSFwlZQZuhz4BrreFewR1f3JFYLFEv4Q jwaTKBQavnMbu4f/IOsfhAuYB8ra3tJseL1JM6n0S3wc6FheVEiVkOEkWnQrijQa QDSZtiyPrwlb1SIXQ23hc4gFnKPrNcfQnsa92PHeqB7vMlgg4VhZAqWfuqVkb09M G4aH/R4G+UpJeanhGUszGKpK5UUytEIKvuQDX3YrUm5FV2/C0Pkl8fPFJuTO1aXe a5iZbFr2LVfgiloNu2J5LeTMxdfVcvii77MCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBSR9JP3lZEeyIYSvq4MZCtjmBYPnzAfBgNVHSMEGDAWgBQo85aYPDMoQv3athdZ WjCoPDM0ZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTE2OS9LUE9XbUR3ektFTDkycllYV1Zvd3FEd3pOR1EuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9LUE9XbUR3ektFTDkycllYV1Zvd3FE d3pOR1EuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTE2OS9LUE9XbUR3ektFTDkycllYV1Zvd3FEd3pOR1EubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEANie36v0659CR3avAFWHZtdnNUTtp8b5Y8eUypQ9A2V5XbyAQFJZAA41t C3h+xXHDVTP2A7tI6BEfAZzdbgW5TiB3ZIAGqlrIF7gQNr8p1guTa5s0zEwi0dJ1 8qzYAezBflwVwwOHb9ew5VHs6WdVloYs/CtRxeWSYTl9/OSvgGpQEFIuDzaqgq2Q +sDUY9Bl4L+gwcsXM6kwumdAUss4lMJZj+tFtiSTyz8meKA2kfKdeNuAd0jLyAyH daEKyz32dJVoMdoi+4zOZ3yBtiKn/7mjHw3ALSCabCGeui7qqJet/CFLlqE7xJqe ailhEqOOjKquGhpJHRtBgMESTMxOkw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:28:27 2025 by rpki-client