$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft File: o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft (raw, json) Hash identifier: 4CoRi0CRh8hfCNZvWOqGQB5Qq3mzR9vIw88t94aYPlY= Subject key identifier: 45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5 Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF Certificate issuer: /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF Certificate serial: 19 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft Manifest number: 0822 Signing time: Tue 21 Oct 2025 07:21:24 +0000 Manifest this update: Tue 21 Oct 2025 07:21:24 +0000 Manifest next update: Wed 05 Nov 2025 07:21:24 +0000 Files and hashes: 1: F6ilgIJBpYNP2NIgALlLEG-jkRA.roa (hash: uzvD2OBlyXFShOyQj2ZMeY4abdUiMNWn3The25E/3OA=) 2: VZWn_-1bGQd-d339wIb-XCxpUUg.roa (hash: bfcL1OTITKIvAocbZXkgpiPM0pg2Gywdn4ECEZ3VJrI=) 3: o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl (hash: z+JWPXjVI9k9vMD9CiQlOjeQwYoY6KI5VRA0CYAHiSY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 07:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF Validity Not Before: Oct 15 01:43:43 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=451744DF5FCC00491CBA9FA0CC7244F7419C48E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:35:fd:cf:5c:20:c0:7a:37:f9:5a:f4:7d: 2d:7e:77:ad:ef:f3:71:3a:f0:2f:bf:f1:15:ff:07: fb:7c:5f:be:fd:8f:74:3a:8a:db:03:ae:79:b0:7a: 84:2f:db:93:37:2c:e2:e8:ab:bc:b2:55:f6:0c:02: 8b:67:dc:65:02:fa:9f:bd:4e:b1:b0:4f:32:1a:c0: 7d:a2:18:7f:38:81:c8:d0:5b:6c:19:a4:72:27:c3: 9c:b5:ee:4e:44:4d:88:ab:90:c8:f4:9f:c0:2d:a4: 95:49:6f:c7:db:b2:0b:b0:79:fa:63:5d:7b:f0:1b: 67:a5:6f:53:e4:d5:3d:c3:57:fd:72:e0:cb:fa:a3: a2:28:d1:0c:2e:31:05:bb:1f:45:f3:c3:3f:6b:88: 22:4a:25:cf:7d:85:ae:59:4e:36:15:17:e1:a1:80: 17:03:88:e3:9c:13:26:55:af:14:49:3e:97:c9:b9: 47:db:26:f5:52:48:42:03:d5:92:e2:02:af:09:1a: 0a:c6:aa:a8:39:72:60:4c:4b:d9:e8:ff:6a:29:60: fb:95:94:ed:57:3c:52:f1:e8:08:91:3e:a3:2d:7c: 52:09:4d:24:f9:9c:8b:5b:fa:a1:ae:da:87:c4:d3: e8:84:25:e9:a2:4f:0e:1a:cc:7f:ed:76:64:cb:28: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5 X509v3 Authority Key Identifier: keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:51:69:4a:90:db:0f:a9:f8:c4:c7:d1:07:13:9d:be:28:16: a0:12:cc:e1:88:5b:90:29:24:bf:cf:c0:fe:22:5c:a2:8b:21: f6:c0:c5:67:85:36:f2:38:ee:24:ba:2b:77:95:81:21:c7:7b: 55:bd:16:f1:bf:da:3c:dd:77:60:9b:f7:15:df:9e:e7:bc:2e: 79:eb:3e:09:1c:bd:42:bd:8b:e2:75:cc:98:b1:06:d2:ca:55: 42:06:6d:6f:af:bc:c5:71:bf:49:aa:9f:fe:1d:ad:34:9d:96: 87:64:6e:75:c6:0d:96:0a:a3:c4:40:01:4d:4e:bb:7f:c2:df: 43:d8:bd:33:4c:41:58:17:ed:7b:af:96:3f:de:fb:2e:1e:45: 9a:1a:ac:b7:c1:dc:50:30:a7:30:50:ca:a8:d4:3d:e4:90:3f: ab:70:c5:7e:fa:ad:80:cd:0f:d6:a5:5e:21:5c:91:7e:78:91: 57:46:f7:58:db:b5:87:a8:c9:00:04:e1:d8:70:8b:95:ce:6a: c5:c9:50:18:e5:18:a2:34:a8:97:46:1e:35:12:24:64:fb:a4: a8:c2:16:0d:84:bf:77:16:d8:c3:e5:56:e8:01:ff:c9:cf:71: 15:83:73:d9:c7:a5:f8:b7:cd:93:09:b3:6c:83:d3:29:38:e2: ac:13:e0:a1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBMzQw MDVCOEVERTY2MzZDNjE5MTFCNkJBOTgxRTQ5RDlFMTIxNkNGMB4XDTI1MTAxNTAx NDM0M1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNDUxNzQ0REY1RkNDMDA0 OTFDQkE5RkEwQ0M3MjQ0Rjc0MTlDNDhFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALMMNf3PXCDAejf5WvR9LX53re/zcTrwL7/xFf8H+3xfvv2PdDqK 2wOuebB6hC/bkzcs4uirvLJV9gwCi2fcZQL6n71OsbBPMhrAfaIYfziByNBbbBmk cifDnLXuTkRNiKuQyPSfwC2klUlvx9uyC7B5+mNde/AbZ6VvU+TVPcNX/XLgy/qj oijRDC4xBbsfRfPDP2uIIkolz32FrllONhUX4aGAFwOI45wTJlWvFEk+l8m5R9sm 9VJIQgPVkuICrwkaCsaqqDlyYExL2ej/ailg+5WU7Vc8UvHoCJE+oy18UglNJPmc i1v6oa7ah8TT6IQl6aJPDhrMf+12ZMsoyY0CAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRFF0TfX8wASRy6n6DMckT3QZxI5TAfBgNVHSMEGDAWgBSjQAW47eZjbGGRG2up geSdnhIWzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9vMEFGdU8zbVkyeGhrUnRycVlIa25aNFNGczguY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9vMEFGdU8zbVkyeGhrUnRycVlIa25a NFNGczguY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy9vMEFGdU8zbVkyeGhrUnRycVlIa25aNFNGczgubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAtlFpSpDbD6n4xMfRBxOdvigWoBLM4YhbkCkkv8/A/iJcoosh9sDFZ4U2 8jjuJLord5WBIcd7Vb0W8b/aPN13YJv3Fd+e57wuees+CRy9Qr2L4nXMmLEG0spV QgZtb6+8xXG/Saqf/h2tNJ2Wh2RudcYNlgqjxEABTU67f8LfQ9i9M0xBWBfte6+W P977Lh5Fmhqst8HcUDCnMFDKqNQ95JA/q3DFfvqtgM0P1qVeIVyRfniRV0b3WNu1 h6jJAATh2HCLlc5qxclQGOUYojSol0YeNRIkZPukqMIWDYS/dxbYw+VW6AH/yc9x FYNz2cel+LfNkwmzbIPTKTjirBPgoQ== -----END CERTIFICATE-----Generated at Tue Oct 21 09:57:17 2025 by rpki-client