$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft File: 51bZpc6aysl4NgAR96fPxDAYHVM.mft (raw, json) Hash identifier: LCT+oW4VaIExKaQDfTRDfzLuHJ2FGsjzvHtVbaJ+eP4= Subject key identifier: BA:F9:D1:F8:91:0A:FA:83:53:25:35:A5:F5:AB:14:80:A6:63:53:98 Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53 Certificate issuer: /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53 Certificate serial: 2A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft Manifest number: 0857 Signing time: Mon 20 Oct 2025 11:22:28 +0000 Manifest this update: Mon 20 Oct 2025 11:22:28 +0000 Manifest next update: Tue 04 Nov 2025 11:22:28 +0000 Files and hashes: 1: 4G2IZxJ2kT0ok-yjT3ATAV-dtc4.roa (hash: bE7xBqBsHkLVDVIdOs0TPCqwbp4B2kDAm2Re00Q8EHY=) 2: 51bZpc6aysl4NgAR96fPxDAYHVM.crl (hash: Hgb55nZCRYeHMnb9Uh4byeBZ8iyRaSEZOk83tevgUuI=) 3: nqy9PwyNhqspe1Vq_3rzzrzAxog.roa (hash: s4LjG/bozQ0CoOnm4EzQgmGD8BAO54eyNM7UXyB7HYg=) 4: sk6juktD97KkwKQzHclfv-pEajU.roa (hash: jpfrZeWlXvqMK3FHw6AURvqxZw4dM3OMItHl4q3+L9c=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 12:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53 Validity Not Before: Oct 15 01:31:45 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=BAF9D1F8910AFA83532535A5F5AB1480A6635398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:f4:45:a7:9e:65:42:6c:f1:86:07:1a:99: da:e6:a0:88:78:04:64:a8:4d:bc:b6:9c:56:92:fc: ec:5f:d4:03:4a:65:31:6e:73:0b:62:f2:a3:22:ac: c5:6a:a0:a9:2a:6d:cf:7d:d9:42:19:05:6a:8f:4c: fe:40:75:d5:51:1f:9c:4e:d4:dc:b2:01:85:35:1d: 3d:68:a4:a7:83:29:ea:a6:64:22:fc:81:f3:c5:08: 66:51:9d:46:cc:cd:8e:d4:ff:12:80:c6:8f:6a:f7: 30:d3:e1:d2:6c:20:2d:a4:2e:15:96:bf:62:73:20: 84:c6:c7:1c:a5:7d:28:94:f1:ea:a7:ab:be:0c:59: b9:2c:eb:17:81:e2:bb:f0:1d:26:9c:35:79:ad:fe: 79:65:86:2c:f2:9e:45:5b:4b:b8:fa:a3:f5:9a:43: 8a:b4:6e:09:25:e0:c9:ad:f6:a4:59:08:5a:5b:8a: 46:93:d8:0b:e2:b7:0f:52:16:e9:ee:0c:41:5f:f9: 45:de:65:ca:93:90:0f:13:96:66:b8:aa:81:5f:af: cd:8e:de:77:75:63:cd:05:29:53:22:9b:06:fe:08: a0:68:58:c9:14:fa:8e:58:72:6e:7e:7e:88:6e:2c: db:1c:37:07:d2:44:2b:ca:10:e0:2a:94:55:23:67: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F9:D1:F8:91:0A:FA:83:53:25:35:A5:F5:AB:14:80:A6:63:53:98 X509v3 Authority Key Identifier: keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:3a:97:36:d5:02:84:88:c4:3f:b6:e6:58:34:1a:be:28:7f: 51:81:a0:4a:6b:ca:df:72:a6:76:42:60:51:28:6f:cc:8a:1d: d7:89:0d:7e:95:1a:b7:fa:77:4e:f5:f2:b3:08:a2:f0:18:1c: 26:6d:f1:35:83:19:f8:0c:a6:88:5f:28:93:a5:f7:cb:a7:5e: 29:3c:d7:d2:39:fd:48:32:1f:f1:49:22:8e:2b:38:89:e1:3c: f7:07:f9:27:ca:15:d8:ef:55:b2:3c:a8:f0:e0:12:b9:c0:40: 04:c0:ba:cf:16:22:3b:dc:c7:57:68:d3:24:1e:75:5f:eb:2b: 69:74:98:bb:14:34:bb:d3:ed:30:32:a7:1e:a0:e3:53:3b:a1: d0:7c:7f:f9:84:f9:3c:e9:b1:3c:14:6e:22:14:87:63:d9:e4: 1a:b9:6e:8e:6c:82:b1:30:8e:55:a1:27:5c:7c:7b:09:df:ad: c5:ff:c7:e1:1d:51:24:db:61:d1:1c:5e:23:ab:13:95:46:a1: 0a:d8:b5:2c:29:ab:4c:9e:72:74:e4:81:75:34:a1:84:2b:18: f9:40:0b:63:a1:d4:3a:5a:5f:06:2c:a6:36:1d:88:9c:66:95: ae:2c:15:f0:d9:4b:46:b9:2b:bd:d5:4e:90:2a:5d:79:72:0e: 8d:bd:1e:dc -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNzU2 RDlBNUNFOUFDQUM5NzgzNjAwMTFGN0E3Q0ZDNDMwMTgxRDUzMB4XDTI1MTAxNTAx MzE0NVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQkFGOUQxRjg5MTBBRkE4 MzUzMjUzNUE1RjVBQjE0ODBBNjYzNTM5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKWb9EWnnmVCbPGGBxqZ2uagiHgEZKhNvLacVpL87F/UA0plMW5z C2LyoyKsxWqgqSptz33ZQhkFao9M/kB11VEfnE7U3LIBhTUdPWikp4Mp6qZkIvyB 88UIZlGdRszNjtT/EoDGj2r3MNPh0mwgLaQuFZa/YnMghMbHHKV9KJTx6qervgxZ uSzrF4Hiu/AdJpw1ea3+eWWGLPKeRVtLuPqj9ZpDirRuCSXgya32pFkIWluKRpPY C+K3D1IW6e4MQV/5Rd5lypOQDxOWZriqgV+vzY7ed3VjzQUpUyKbBv4IoGhYyRT6 jlhybn5+iG4s2xw3B9JEK8oQ4CqUVSNnLHUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBS6+dH4kQr6g1MlNaX1qxSApmNTmDAfBgNVHSMEGDAWgBTnVtmlzprKyXg2ABH3 p8/EMBgdUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNTgvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4REFZSFZNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4 REFZSFZNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDU4LzUxYlpwYzZheXNsNE5nQVI5NmZQeERBWUhWTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2Opc21QKEiMQ/tuZYNBq+KH9RgaBKa8rfcqZ2QmBRKG/Mih3XiQ1+ lRq3+ndO9fKzCKLwGBwmbfE1gxn4DKaIXyiTpffLp14pPNfSOf1IMh/xSSKOKziJ 4Tz3B/knyhXY71WyPKjw4BK5wEAEwLrPFiI73MdXaNMkHnVf6ytpdJi7FDS70+0w MqceoONTO6HQfH/5hPk86bE8FG4iFIdj2eQauW6ObIKxMI5VoSdcfHsJ363F/8fh HVEk22HRHF4jqxOVRqEK2LUsKatMnnJ05IF1NKGEKxj5QAtjodQ6Wl8GLKY2HYic ZpWuLBXw2UtGuSu91U6QKl15cg6NvR7c -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:26 2025 by rpki-client