$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft File: gf7ENcw7DVXepAW2GL1BjhrlZIE.mft (raw, json) Hash identifier: xJI91I+/ujgq7EkgiHYhzP/oXtFOMw9vWkEQwwYS8AY= Subject key identifier: 41:1C:8E:C9:6E:B2:3D:E3:47:25:44:5E:ED:1F:2F:32:62:95:B8:9F Authority key identifier: 81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 Certificate issuer: /CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Certificate serial: 11 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft Manifest number: 05A2 Signing time: Fri 04 Jul 2025 11:56:04 +0000 Manifest this update: Fri 04 Jul 2025 11:56:04 +0000 Manifest next update: Sat 19 Jul 2025 11:56:04 +0000 Files and hashes: 1: gf7ENcw7DVXepAW2GL1BjhrlZIE.crl (hash: 4wME5bELN7Z2i61Nkp+ZsLVZpg3Nme79oCPRol6Vm9M=) 2: x4apSZ7TGJaw6MPYuqY07mklkt0.roa (hash: 4TDP7PW2OqSMHenkcxixcOIODjjozfCq0VfZI2McdRg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81FEC435CC3B0D55DEA405B618BD418E1AE56481 Validity Not Before: Jun 15 01:30:49 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=411C8EC96EB23DE34725445EED1F2F326295B89F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:b4:95:e5:11:5e:2b:7a:1a:4a:96:eb:f3: e7:1f:2f:e1:b3:6e:25:51:4b:45:ca:35:fd:17:98: b2:cc:1b:55:4d:e8:0d:90:24:68:88:07:61:10:a3: d6:1c:6e:44:9e:8d:3d:60:4a:87:73:e2:1b:1e:0e: 14:3a:15:6c:26:bd:74:65:99:f7:2f:dc:09:15:95: c2:99:ee:4c:ff:5f:76:db:ca:ed:77:70:7e:18:da: a2:b8:19:20:e2:a2:e6:c6:d4:c3:d9:22:17:fa:10: 4b:ed:aa:89:66:7b:66:4e:a9:38:d2:f2:71:49:12: 29:d2:f0:35:fd:d8:40:95:62:f2:af:ee:ab:4e:13: c8:cd:16:27:c5:b3:ce:82:9d:2c:fe:ba:75:3b:b9: 55:61:5f:f0:04:25:e8:e9:84:a2:96:0b:f4:79:eb: 10:49:05:3d:b9:2f:ed:78:12:63:e2:f9:ea:c9:09: e8:16:5f:27:f5:49:52:34:86:91:97:97:d2:fa:2d: 0c:a5:d8:eb:b9:7d:dc:7e:75:d3:ce:3d:be:a1:1c: ac:74:20:a7:db:48:c2:1e:83:81:55:b6:1f:86:7c: b8:bf:f8:49:ca:61:69:6e:46:41:1b:5b:eb:59:4e: 5a:b1:c1:6f:0b:86:f9:39:f6:ff:08:7c:7b:f9:ef: 52:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1C:8E:C9:6E:B2:3D:E3:47:25:44:5E:ED:1F:2F:32:62:95:B8:9F X509v3 Authority Key Identifier: keyid:81:FE:C4:35:CC:3B:0D:55:DE:A4:05:B6:18:BD:41:8E:1A:E5:64:81 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gf7ENcw7DVXepAW2GL1BjhrlZIE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/gf7ENcw7DVXepAW2GL1BjhrlZIE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:7f:2c:22:de:f6:1f:66:3f:c5:09:cc:ff:8d:38:a9:1b:83: c4:e3:f2:c8:81:9e:63:b4:b9:ba:9d:89:17:f8:74:9a:df:e3: e0:c3:fa:97:2f:97:84:17:e9:27:85:51:29:b6:9f:71:25:e8: d9:da:9a:b5:e7:23:df:b5:57:39:bb:a7:fd:4b:d0:74:a3:93: 7b:fd:0d:51:bb:13:69:f9:0a:89:bc:46:83:5d:a9:26:61:68: 78:17:ef:9c:23:31:87:4c:37:48:9a:43:a5:d2:27:c9:2b:65: a8:8e:49:01:02:9d:be:9d:2c:a5:de:62:ca:47:ab:06:3e:25: 78:bd:3e:92:88:e4:42:d1:1f:61:e7:25:b7:8f:c3:9f:25:dd: f1:68:1b:c2:e3:39:9c:97:87:a6:b0:cb:f4:5a:b7:41:69:8d: cc:32:41:b3:16:15:41:c6:dd:ab:f6:8e:96:e5:14:33:4b:ed: 42:1e:5d:58:ba:e4:e2:23:d0:43:62:86:b0:0e:8a:35:34:d6: d8:15:d6:86:b9:27:08:21:cf:50:62:10:b9:1d:26:f2:ca:76: 79:78:7e:18:3b:96:4b:29:87:70:42:b4:0f:dc:e1:b5:43:f5: e6:84:2f:72:27:d1:fc:68:63:d3:a5:b2:e2:b2:71:63:e2:85: 6c:ad:a5:5f -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MUZF QzQzNUNDM0IwRDU1REVBNDA1QjYxOEJENDE4RTFBRTU2NDgxMB4XDTI1MDYxNTAx MzA0OVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNDExQzhFQzk2RUIyM0RF MzQ3MjU0NDVFRUQxRjJGMzI2Mjk1Qjg5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM5xtJXlEV4rehpKluvz5x8v4bNuJVFLRco1/ReYsswbVU3oDZAk aIgHYRCj1hxuRJ6NPWBKh3PiGx4OFDoVbCa9dGWZ9y/cCRWVwpnuTP9fdtvK7Xdw fhjaorgZIOKi5sbUw9kiF/oQS+2qiWZ7Zk6pONLycUkSKdLwNf3YQJVi8q/uq04T yM0WJ8WzzoKdLP66dTu5VWFf8AQl6OmEopYL9HnrEEkFPbkv7XgSY+L56skJ6BZf J/VJUjSGkZeX0votDKXY67l93H510849vqEcrHQgp9tIwh6DgVW2H4Z8uL/4Scph aW5GQRtb61lOWrHBbwuG+Tn2/wh8e/nvUsUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRBHI7JbrI940clRF7tHy8yYpW4nzAfBgNVHSMEGDAWgBSB/sQ1zDsNVd6kBbYY vUGOGuVkgTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODEvZ2Y3RU5jdzdEVlhlcEFXMkdMMUJqaHJsWklFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ2Y3RU5jdzdEVlhlcEFXMkdMMUJq aHJsWklFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDgxL2dmN0VOY3c3RFZYZXBBVzJHTDFCamhybFpJRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnfywi3vYfZj/FCcz/jTipG4PE4/LIgZ5jtLm6nYkX+HSa3+Pgw/qX L5eEF+knhVEptp9xJejZ2pq15yPftVc5u6f9S9B0o5N7/Q1RuxNp+QqJvEaDXakm YWh4F++cIzGHTDdImkOl0ifJK2WojkkBAp2+nSyl3mLKR6sGPiV4vT6SiORC0R9h 5yW3j8OfJd3xaBvC4zmcl4emsMv0WrdBaY3MMkGzFhVBxt2r9o6W5RQzS+1CHl1Y uuTiI9BDYoawDoo1NNbYFdaGuScIIc9QYhC5HSbyynZ5eH4YO5ZLKYdwQrQP3OG1 Q/XmhC9yJ9H8aGPTpbLisnFj4oVsraVf -----END CERTIFICATE-----Generated at Fri Jul 4 15:47:35 2025 by rpki-client