$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft File: Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft (raw, json) Hash identifier: Lv9XIiMkl2zNot8pxsE7fL5CN+xDpMiUPBwZUvuY2SU= Subject key identifier: E3:6F:43:EF:57:0B:FE:24:A5:E0:A0:1E:1A:E2:65:98:1B:8D:61:16 Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11 Certificate issuer: /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611 Certificate serial: 17 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft Manifest number: 04A1 Signing time: Sun 18 May 2025 02:29:47 +0000 Manifest this update: Sun 18 May 2025 02:29:47 +0000 Manifest next update: Mon 02 Jun 2025 02:29:47 +0000 Files and hashes: 1: Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl (hash: gxMnj9+12ZoixNkHfdW4OvS3iROFUTFkHq0uu/ltrSo=) 2: ReVLeqIW3TWPrBpxowzM2HVvsEk.roa (hash: T9FqI9gzfHK5oTuIKxX6qoW5gM9SSHIeXl7okn72L9s=) 3: kaIK89ZK00U-LK6mVFJy9QRtPa4.roa (hash: QehAfJH19S5d8z5S18ASfVR4VkX/xAVL5CW0xBQ47o0=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611 Validity Not Before: May 15 01:40:34 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=E36F43EF570BFE24A5E0A01E1AE265981B8D6116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:03:70:0d:d3:f5:40:f5:ad:1e:f1:16:3b: d5:96:99:68:75:b8:1c:52:c3:6f:63:4c:4e:c4:ee: 22:da:29:e3:cb:03:b0:32:8a:3f:8f:76:9c:b7:66: d9:43:15:17:e5:40:c8:67:a1:34:8c:31:08:dd:3d: 7b:ca:21:21:33:9f:78:69:21:c8:30:27:ba:f0:24: bd:87:2a:b5:f0:cd:bc:9a:48:fa:3a:8a:41:f0:bd: 1e:c8:7d:17:63:80:ab:1b:33:0f:0c:8b:a1:27:bf: 99:3a:cb:e6:1e:ce:72:1d:bb:9f:ec:f4:dd:77:06: ce:33:3c:64:4e:c9:b3:8c:b3:85:2e:24:72:9e:f8: 9d:ae:41:b8:ef:ab:8e:41:fd:05:5d:5d:68:ae:2c: b5:b2:2f:5e:5b:99:1c:86:52:ae:44:ba:85:f0:50: 25:cb:17:1b:ad:42:cb:10:3e:27:6f:ab:c5:33:3d: 52:96:15:fb:33:03:e9:19:22:45:7b:ee:d3:3e:d0: 97:01:4f:97:15:5d:a9:55:e0:ff:bd:bb:83:e5:3a: d9:f1:9b:56:1a:3e:54:a2:39:37:65:6c:23:67:bb: 30:1e:e3:30:f0:7f:9a:64:87:f9:c4:08:70:72:56: 03:59:e5:a3:cc:09:ed:4c:75:2d:d3:11:e9:b3:f9: 01:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:6F:43:EF:57:0B:FE:24:A5:E0:A0:1E:1A:E2:65:98:1B:8D:61:16 X509v3 Authority Key Identifier: keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:2e:8b:98:67:83:b8:ae:89:f6:15:63:0d:3c:2c:5c:20:f0: a4:f7:ec:37:20:8c:27:05:bd:d8:a6:4d:30:71:c8:fb:d8:af: cf:da:b8:87:1b:60:54:98:de:e7:0d:1b:69:f1:6f:55:70:e9: aa:d4:fa:ec:f0:62:56:4f:f2:b3:9e:64:1f:de:4f:5e:f6:b6: 31:62:56:ea:a2:68:f6:b2:db:b7:ed:a9:ff:70:b7:02:b9:7f: 05:6d:39:3e:65:27:f3:87:f5:9a:55:02:97:32:18:cc:2b:57: a0:d9:3c:a4:59:4b:c4:e6:f9:f4:0c:ab:0f:5b:e5:6f:ba:b9: 89:0a:a2:3d:45:85:b7:18:72:53:87:60:94:65:b9:2e:e8:0f: 3d:58:78:86:00:c3:0b:e8:0b:a8:01:1b:0d:be:75:2a:ee:19: 4b:84:e7:3a:a7:65:ff:4c:4c:de:aa:47:d5:aa:7a:a3:b4:65: a9:e9:2f:d2:15:a4:26:46:b6:ab:48:48:56:62:ad:bb:15:77: eb:ef:6e:a0:f1:5a:70:dc:1b:50:2c:a0:01:1f:f2:02:df:65: d3:df:f7:d9:5b:b2:77:e5:14:7f:95:1a:ab:b1:57:5d:e6:5f: d5:e1:fe:25:1e:fb:e5:fd:58:c8:9b:64:5f:b0:42:bf:b8:1d: e9:c4:7f:ab -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOUZF MUU3OTU0MkVCMkNFRkE0RTI4M0JGQ0FGMThBMzk4QkM3NjExMB4XDTI1MDUxNTAx NDAzNFoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRTM2RjQzRUY1NzBCRkUy NEE1RTBBMDFFMUFFMjY1OTgxQjhENjExNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKPBA3AN0/VA9a0e8RY71ZaZaHW4HFLDb2NMTsTuItop48sDsDKK P492nLdm2UMVF+VAyGehNIwxCN09e8ohITOfeGkhyDAnuvAkvYcqtfDNvJpI+jqK QfC9Hsh9F2OAqxszDwyLoSe/mTrL5h7Och27n+z03XcGzjM8ZE7Js4yzhS4kcp74 na5BuO+rjkH9BV1daK4stbIvXluZHIZSrkS6hfBQJcsXG61CyxA+J2+rxTM9UpYV +zMD6RkiRXvu0z7QlwFPlxVdqVXg/727g+U62fGbVho+VKI5N2VsI2e7MB7jMPB/ mmSH+cQIcHJWA1nlo8wJ7Ux1LdMR6bP5AVcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTjb0PvVwv+JKXgoB4a4mWYG41hFjAfBgNVHSMEGDAWgBQp/h55VC6yzvpOKDv8 rxijmLx2ETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTUvS2Y0ZWVWUXVzczc2VGlnN19LOFlvNWk4ZGhFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS2Y0ZWVWUXVzczc2VGlnN19LOFlv NWk4ZGhFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDk1L0tmNGVlVlF1c3M3NlRpZzdfSzhZbzVpOGRoRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWLouYZ4O4ron2FWMNPCxcIPCk9+w3IIwnBb3Ypk0wccj72K/P2riH G2BUmN7nDRtp8W9VcOmq1Prs8GJWT/KznmQf3k9e9rYxYlbqomj2stu37an/cLcC uX8FbTk+ZSfzh/WaVQKXMhjMK1eg2TykWUvE5vn0DKsPW+VvurmJCqI9RYW3GHJT h2CUZbku6A89WHiGAMML6AuoARsNvnUq7hlLhOc6p2X/TEzeqkfVqnqjtGWp6S/S FaQmRrarSEhWYq27FXfr726g8Vpw3BtQLKABH/IC32XT3/fZW7J35RR/lRqrsVdd 5l/V4f4lHvvl/VjIm2RfsEK/uB3pxH+r -----END CERTIFICATE-----Generated at Sun May 18 21:29:40 2025 by rpki-client