$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.mft File: 28q9xTdVw1zVvIdEiG50V0LH_tA.mft (raw, json) Hash identifier: a7qV5onthCYrx5KT/SaXowbURmZUMSZmuNRByms9JQE= Subject key identifier: 64:3A:EA:3D:24:76:A3:9F:C7:06:5A:89:8E:DB:AA:13:F4:1E:1F:3E Authority key identifier: DB:CA:BD:C5:37:55:C3:5C:D5:BC:87:44:88:6E:74:57:42:C7:FE:D0 Certificate issuer: /CN=DBCABDC53755C35CD5BC8744886E745742C7FED0 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.mft Manifest number: ED Signing time: Fri 04 Jul 2025 23:21:49 +0000 Manifest this update: Fri 04 Jul 2025 23:21:49 +0000 Manifest next update: Sat 19 Jul 2025 23:21:49 +0000 Files and hashes: 1: 28q9xTdVw1zVvIdEiG50V0LH_tA.crl (hash: Y0owgYjNfPOgpNft7PO2XpJ66tQsrl0qhSj71Ntn26M=) 2: sz1vACZwkZko5fOaOf5461Biebc.roa (hash: XsMyuM+nv9/X6UYrulrO3tDaS9277lugoLahO3ZqV3o=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBCABDC53755C35CD5BC8744886E745742C7FED0 Validity Not Before: Jun 15 01:37:32 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=643AEA3D2476A39FC7065A898EDBAA13F41E1F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5e:11:49:ce:a3:4b:d3:8a:ee:e8:bc:b4:47: c7:2e:ee:42:a0:34:92:fa:57:4f:a6:e3:98:a2:b9: 82:f0:a9:93:3a:e7:61:16:b3:ec:fd:16:71:35:ed: 58:db:18:37:87:92:ee:f9:cd:5c:09:da:ff:2c:9e: 75:fb:8d:62:74:98:22:49:c6:b5:c7:72:b5:93:46: 61:24:f1:e6:ef:71:d5:09:b4:78:ee:3b:fe:ca:26: 16:47:cc:d4:f4:10:a5:f6:07:a4:fc:55:84:48:8d: f8:bf:7c:7e:48:0f:81:a7:c0:9e:f3:0d:a8:f3:e8: 28:60:56:22:0e:1f:d1:d1:86:3a:23:8d:90:b0:84: 90:37:df:8b:82:1f:96:c3:28:29:27:6e:46:cd:cb: 3f:08:4f:80:a7:6f:fe:a6:fd:c4:fc:e1:dc:95:4a: 79:ab:d4:6b:5f:54:db:05:7b:7b:5c:01:21:88:e9: d7:d0:2b:80:a9:e9:68:4f:8b:a3:01:bb:d2:5a:23: 0c:b3:5f:49:ae:33:3d:47:a4:3f:3b:3b:55:71:8a: a2:6c:7a:4a:1f:64:65:15:11:be:44:dd:43:9a:98: 03:1c:2d:50:82:c3:4a:70:b0:11:e8:48:a3:f9:1a: 3a:c7:ba:f0:13:84:e8:c3:14:ef:c4:82:64:13:61: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3A:EA:3D:24:76:A3:9F:C7:06:5A:89:8E:DB:AA:13:F4:1E:1F:3E X509v3 Authority Key Identifier: keyid:DB:CA:BD:C5:37:55:C3:5C:D5:BC:87:44:88:6E:74:57:42:C7:FE:D0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/28q9xTdVw1zVvIdEiG50V0LH_tA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20106/28q9xTdVw1zVvIdEiG50V0LH_tA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:ad:d4:ae:ef:47:a8:ab:63:ae:ad:a3:35:8b:99:f6:fa:5c: 5e:3c:cd:74:66:00:0b:b3:fe:c0:c5:a3:da:2f:0f:b7:8c:89: 00:b3:2d:d7:de:d1:89:dd:bd:c5:0b:e6:71:7c:f9:61:e0:14: b8:c7:e8:24:2c:56:3a:aa:97:50:bc:f7:26:51:f3:08:2d:9b: 1b:c8:43:c8:bb:1e:22:0b:74:49:e9:4d:50:21:0c:d2:67:74: 8b:aa:0a:b6:bc:8f:08:a5:d4:b5:8f:d7:49:fd:34:c2:b3:45: 55:fd:f8:9b:c9:35:93:9e:57:f5:fd:28:e3:39:91:20:2e:55: 31:fe:0c:d7:2f:af:af:96:13:24:58:7c:a6:29:c3:21:5b:bd: 60:be:21:fd:e2:ba:7c:a7:0e:f1:a7:7e:1c:ce:dc:fa:7f:66: e4:f1:32:06:83:fb:8d:ab:94:0a:8b:f3:b2:0b:de:f6:2e:81: cb:27:92:53:9a:22:e6:d4:70:bd:e6:a9:00:b3:cd:f2:c1:db: f8:58:9f:1f:17:82:0f:f5:a3:9c:de:b3:2d:fa:cd:f1:be:c0: 5b:b6:93:2c:b2:48:7e:c4:4c:88:99:4d:2f:22:70:f8:db:86: e2:eb:7d:20:b4:ea:a0:b4:9c:72:49:ce:b8:8f:32:01:6b:bb: d6:04:6c:03 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQkNB QkRDNTM3NTVDMzVDRDVCQzg3NDQ4ODZFNzQ1NzQyQzdGRUQwMB4XDTI1MDYxNTAx MzczMloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNjQzQUVBM0QyNDc2QTM5 RkM3MDY1QTg5OEVEQkFBMTNGNDFFMUYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJxeEUnOo0vTiu7ovLRHxy7uQqA0kvpXT6bjmKK5gvCpkzrnYRaz 7P0WcTXtWNsYN4eS7vnNXAna/yyedfuNYnSYIknGtcdytZNGYSTx5u9x1Qm0eO47 /somFkfM1PQQpfYHpPxVhEiN+L98fkgPgafAnvMNqPPoKGBWIg4f0dGGOiONkLCE kDffi4IflsMoKSduRs3LPwhPgKdv/qb9xPzh3JVKeavUa19U2wV7e1wBIYjp19Ar gKnpaE+LowG70lojDLNfSa4zPUekPzs7VXGKomx6Sh9kZRURvkTdQ5qYAxwtUILD SnCwEehIo/kaOse68BOE6MMU78SCZBNhfkcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRkOuo9JHajn8cGWomO26oT9B4fPjAfBgNVHSMEGDAWgBTbyr3FN1XDXNW8h0SI bnRXQsf+0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxMDYvMjhxOXhUZFZ3MXpWdklkRWlHNTBWMExIX3RBLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMjhxOXhUZFZ3MXpWdklkRWlHNTBW MExIX3RBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTA2LzI4cTl4VGRWdzF6VnZJZEVpRzUwVjBMSF90QS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIrdSu70eoq2OuraM1i5n2+lxePM10ZgALs/7AxaPaLw+3jIkAsy3X 3tGJ3b3FC+ZxfPlh4BS4x+gkLFY6qpdQvPcmUfMILZsbyEPIux4iC3RJ6U1QIQzS Z3SLqgq2vI8IpdS1j9dJ/TTCs0VV/fibyTWTnlf1/SjjOZEgLlUx/gzXL6+vlhMk WHymKcMhW71gviH94rp8pw7xp34cztz6f2bk8TIGg/uNq5QKi/OyC972LoHLJ5JT miLm1HC95qkAs83ywdv4WJ8fF4IP9aOc3rMt+s3xvsBbtpMsskh+xEyImU0vInD4 24bi630gtOqgtJxySc64jzIBa7vWBGwD -----END CERTIFICATE-----Generated at Sat Jul 5 03:41:01 2025 by rpki-client