$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft File: GbT9rpYvSWBYix0r5qHtQvE3CY4.mft (raw, json) Hash identifier: /VT5Z3jecf6ESNDwCRgcAfWhbkKkAXQsc+EUy71uQY4= Subject key identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9 Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E Certificate issuer: /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Certificate serial: 61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft Manifest number: 0CD4 Signing time: Mon 20 Oct 2025 18:43:12 +0000 Manifest this update: Mon 20 Oct 2025 18:43:12 +0000 Manifest next update: Tue 04 Nov 2025 18:43:12 +0000 Files and hashes: 1: 5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (hash: aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=) 2: GbT9rpYvSWBYix0r5qHtQvE3CY4.crl (hash: Izsb7uvYz8y0K9xeAcDXbPVqh1h9bugMGZlolCNxSlA=) 3: _O1GniIa9Sv6jEx8l2n-SZu-m9A.roa (hash: 2pH7lB602EN4j0SDFwl5fVcd5IWbNlPs5sWwipuVQ6k=) 4: skQok6BMG5hOtqlBCcPAOegtqC4.roa (hash: dqm/XgGn73MgdB3XJ08x2NWplA/p6c6Hpc/PBVbmfFs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E Validity Not Before: Oct 15 01:40:44 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=D1750D0733AA1684F4CE10B917B062CC4100D2E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:e5:21:f4:cd:32:dd:b0:8f:ac:e3:88:d9: 47:e2:4c:cf:5d:7a:74:c5:77:e8:83:20:c1:06:74: 2e:ae:69:58:ce:3c:56:74:11:ff:62:e6:71:25:55: 3e:05:e5:cf:47:56:3e:96:db:eb:6c:8a:f7:0c:2e: 80:41:ea:2a:72:97:19:e9:17:9c:31:6b:ea:9e:f0: 16:0a:88:ec:9d:84:22:a2:2f:a6:a1:04:dd:ad:e8: a5:8d:a9:ea:49:f8:25:51:89:30:cd:51:e8:78:20: fc:90:72:59:fd:a4:76:e2:26:38:50:fd:78:40:13: c4:65:91:a8:d7:f8:8a:8c:b3:58:96:ee:ac:d9:d8: 8c:cf:6a:e3:8c:b6:50:a8:ec:d8:c3:15:05:7b:16: 45:ac:13:36:c7:f0:e5:af:3f:18:77:60:a9:2c:9c: cd:19:a2:c2:92:c5:7c:92:b6:54:8a:98:b3:45:36: f0:af:66:4c:e4:e1:9a:45:10:63:a8:60:1d:e1:63: aa:9d:17:c8:4d:f3:8a:f6:0a:b5:d9:0b:e2:ee:ac: f6:34:38:75:81:02:b3:7b:7a:5c:d5:21:3c:d7:5e: fc:a8:4c:5c:5e:38:03:15:5a:d1:78:a5:47:aa:77: 38:b1:d3:37:24:cb:93:a3:fe:c5:96:ff:0b:fb:72: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:75:0D:07:33:AA:16:84:F4:CE:10:B9:17:B0:62:CC:41:00:D2:E9 X509v3 Authority Key Identifier: keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:60:2e:92:80:c3:1e:98:4a:80:59:06:f0:95:ca:84:6c:c8: 90:1b:22:47:f6:ef:4a:f1:97:36:d3:d0:a8:98:35:c0:25:3a: 69:ee:aa:a1:3c:fa:04:49:8e:21:c9:33:3e:f6:b8:9b:ab:80: 08:13:39:13:54:90:86:73:b4:d0:03:65:61:00:13:5d:73:14: d1:60:d8:d3:2e:71:a2:a2:a5:d3:d9:24:50:62:5e:f0:9b:57: 7b:e2:63:aa:2b:73:fd:ae:48:f5:d0:81:95:52:fc:74:d7:ec: 9a:95:77:38:d1:25:8f:a0:9b:81:c8:1b:38:87:36:21:74:12: 86:c6:15:ed:47:3c:6e:dc:26:b1:d2:cf:d3:a2:6c:e9:fd:8a: d7:fe:a3:4c:62:9c:e1:e7:fb:12:b6:4a:c2:68:4e:bf:f2:87: 52:09:ec:87:5a:1b:34:bb:35:85:9d:bd:64:47:0e:d9:7e:90: 16:5b:7e:b6:17:8e:f3:bd:02:12:ab:07:03:70:b9:42:eb:56: d4:63:62:c1:88:56:ec:97:69:17:90:b3:87:97:bf:c5:78:8e: 9c:e7:7a:fb:26:9a:e8:ba:9d:0c:e1:6e:1a:2a:0f:38:6b:75: 88:ed:53:92:27:d6:70:1a:28:0c:53:00:71:31:be:4a:3c:7a: 41:c2:13:2c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0 RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTI1MTAxNTAx NDA0NFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRDE3NTBEMDczM0FBMTY4 NEY0Q0UxMEI5MTdCMDYyQ0M0MTAwRDJFOTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM/55SH0zTLdsI+s44jZR+JMz116dMV36IMgwQZ0Lq5pWM48VnQR /2LmcSVVPgXlz0dWPpbb62yK9wwugEHqKnKXGekXnDFr6p7wFgqI7J2EIqIvpqEE 3a3opY2p6kn4JVGJMM1R6Hgg/JByWf2kduImOFD9eEATxGWRqNf4ioyzWJburNnY jM9q44y2UKjs2MMVBXsWRawTNsfw5a8/GHdgqSyczRmiwpLFfJK2VIqYs0U28K9m TOThmkUQY6hgHeFjqp0XyE3zivYKtdkL4u6s9jQ4dYECs3t6XNUhPNde/KhMXF44 AxVa0XilR6p3OLHTNyTLk6P+xZb/C/tyDekCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTRdQ0HM6oWhPTOELkXsGLMQQDS6TAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEyMjA3L0diVDlycFl2U1dCWWl4MHI1cUh0UXZFM0NZNC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaYC6SgMMemEqAWQbwlcqEbMiQGyJH9u9K8Zc209ComDXAJTpp7qqh PPoESY4hyTM+9ribq4AIEzkTVJCGc7TQA2VhABNdcxTRYNjTLnGioqXT2SRQYl7w m1d74mOqK3P9rkj10IGVUvx01+yalXc40SWPoJuByBs4hzYhdBKGxhXtRzxu3Cax 0s/Tomzp/YrX/qNMYpzh5/sStkrCaE6/8odSCeyHWhs0uzWFnb1kRw7ZfpAWW362 F47zvQISqwcDcLlC61bUY2LBiFbsl2kXkLOHl7/FeI6c53r7Jproup0M4W4aKg84 a3WI7VOSJ9ZwGigMUwBxMb5KPHpBwhMs -----END CERTIFICATE-----Generated at Mon Oct 20 23:13:51 2025 by rpki-client