$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft File: GbT9rpYvSWBYix0r5qHtQvE3CY4.mft (raw, json) Hash identifier: dAVMCej4Ubj94fSdlw0ewh/0LYK4B85d0OJbSdiOBmw= Subject key identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9 Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E Certificate issuer: /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Certificate serial: 5F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft Manifest number: 0B7B Signing time: Sat 23 Aug 2025 23:18:29 +0000 Manifest this update: Sat 23 Aug 2025 23:18:29 +0000 Manifest next update: Sun 07 Sep 2025 23:18:29 +0000 Files and hashes: 1: 5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (hash: aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=) 2: GbT9rpYvSWBYix0r5qHtQvE3CY4.crl (hash: 5GKGmW+43Pjj7u36wfTS7op6TRlUrB9We1wL/K7VysI=) 3: _O1GniIa9Sv6jEx8l2n-SZu-m9A.roa (hash: 2pH7lB602EN4j0SDFwl5fVcd5IWbNlPs5sWwipuVQ6k=) 4: skQok6BMG5hOtqlBCcPAOegtqC4.roa (hash: dqm/XgGn73MgdB3XJ08x2NWplA/p6c6Hpc/PBVbmfFs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Validity Not Before: Aug 15 01:38:07 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=D1750D0733AA1684F4CE10B917B062CC4100D2E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:e5:21:f4:cd:32:dd:b0:8f:ac:e3:88:d9: 47:e2:4c:cf:5d:7a:74:c5:77:e8:83:20:c1:06:74: 2e:ae:69:58:ce:3c:56:74:11:ff:62:e6:71:25:55: 3e:05:e5:cf:47:56:3e:96:db:eb:6c:8a:f7:0c:2e: 80:41:ea:2a:72:97:19:e9:17:9c:31:6b:ea:9e:f0: 16:0a:88:ec:9d:84:22:a2:2f:a6:a1:04:dd:ad:e8: a5:8d:a9:ea:49:f8:25:51:89:30:cd:51:e8:78:20: fc:90:72:59:fd:a4:76:e2:26:38:50:fd:78:40:13: c4:65:91:a8:d7:f8:8a:8c:b3:58:96:ee:ac:d9:d8: 8c:cf:6a:e3:8c:b6:50:a8:ec:d8:c3:15:05:7b:16: 45:ac:13:36:c7:f0:e5:af:3f:18:77:60:a9:2c:9c: cd:19:a2:c2:92:c5:7c:92:b6:54:8a:98:b3:45:36: f0:af:66:4c:e4:e1:9a:45:10:63:a8:60:1d:e1:63: aa:9d:17:c8:4d:f3:8a:f6:0a:b5:d9:0b:e2:ee:ac: f6:34:38:75:81:02:b3:7b:7a:5c:d5:21:3c:d7:5e: fc:a8:4c:5c:5e:38:03:15:5a:d1:78:a5:47:aa:77: 38:b1:d3:37:24:cb:93:a3:fe:c5:96:ff:0b:fb:72: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9 X509v3 Authority Key Identifier: keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:da:fa:e8:26:c4:57:ee:4d:9e:59:14:69:8f:4c:61:2e:f7: 95:ed:86:b9:f5:5e:9b:d6:9e:67:70:29:b1:87:88:00:be:5a: df:56:f6:81:d8:45:4b:b2:0a:1a:fc:cb:8a:7d:cc:ac:f9:07: 74:47:e6:31:67:fa:a7:0b:5a:88:df:6d:20:f0:7a:2f:2c:de: 8c:59:1b:77:57:a5:c9:f6:1f:75:e0:65:49:76:29:f2:50:48: 83:74:8c:87:83:2e:48:be:d5:3b:8f:79:b3:dc:08:34:fb:c8: 37:8a:8c:7c:d6:12:e0:db:a0:48:df:0b:b8:ca:4c:b5:58:2d: 40:5d:9c:d8:b9:0b:68:50:9f:25:c0:0f:42:d9:ec:58:3a:e1: 1d:c3:fd:15:11:a3:ff:a4:e5:b6:c5:0b:5a:4c:88:d8:9b:d6: 36:92:a4:0d:11:67:d5:c6:43:a3:db:0b:ac:66:85:14:cd:c0: 52:8c:2d:cd:55:d6:53:a0:9f:60:88:d2:8d:8b:59:a0:b1:1c: 56:63:71:76:ab:01:67:71:4f:ba:a3:fd:59:cd:84:98:48:63: b3:f5:4a:42:ba:c9:c7:7b:a1:1f:98:69:cb:c8:1a:71:0f:4f: b7:4b:5a:22:c8:cd:1b:a6:d5:bc:31:1c:2f:21:18:df:9c:ee: fd:0f:02:20 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0 RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTI1MDgxNTAx MzgwN1oXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRDE3NTBEMDczM0FBMTY4 NEY0Q0UxMEI5MTdCMDYyQ0M0MTAwRDJFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM/55SH0zTLdsI+s44jZR+JMz116dMV36IMgwQZ0Lq5pWM48VnQR /2LmcSVVPgXlz0dWPpbb62yK9wwugEHqKnKXGekXnDFr6p7wFgqI7J2EIqIvpqEE 3a3opY2p6kn4JVGJMM1R6Hgg/JByWf2kduImOFD9eEATxGWRqNf4ioyzWJburNnY jM9q44y2UKjs2MMVBXsWRawTNsfw5a8/GHdgqSyczRmiwpLFfJK2VIqYs0U28K9m TOThmkUQY6hgHeFjqp0XyE3zivYKtdkL4u6s9jQ4dYECs3t6XNUhPNde/KhMXF44 AxVa0XilR6p3OLHTNyTLk6P+xZb/C/tyDekCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTRdQ0HM6oWhPTOELkXsGLMQQDS6TAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEyMjA3L0diVDlycFl2U1dCWWl4MHI1cUh0UXZFM0NZNC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBS2vroJsRX7k2eWRRpj0xhLveV7Ya59V6b1p5ncCmxh4gAvlrfVvaB 2EVLsgoa/MuKfcys+Qd0R+YxZ/qnC1qI320g8HovLN6MWRt3V6XJ9h914GVJdiny UEiDdIyHgy5IvtU7j3mz3Ag0+8g3iox81hLg26BI3wu4yky1WC1AXZzYuQtoUJ8l wA9C2exYOuEdw/0VEaP/pOW2xQtaTIjYm9Y2kqQNEWfVxkOj2wusZoUUzcBSjC3N VdZToJ9giNKNi1mgsRxWY3F2qwFncU+6o/1ZzYSYSGOz9UpCusnHe6EfmGnLyBpx D0+3S1oiyM0bptW8MRwvIRjfnO79DwIg -----END CERTIFICATE-----Generated at Sun Aug 24 01:29:10 2025 by rpki-client