$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft File: aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json) Hash identifier: hhHLxqXlo0aFG3zF287oqckXmPOOKkhrw8ZFib1twe0= Subject key identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86 Certificate issuer: /CN=68EF440AA360C0D21035A81AD2C23339D2233F86 Certificate serial: 02 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft Manifest number: 96 Signing time: Fri 04 Jul 2025 11:18:38 +0000 Manifest this update: Fri 04 Jul 2025 11:18:38 +0000 Manifest next update: Sat 19 Jul 2025 11:18:38 +0000 Files and hashes: 1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: wH30v3fPDzz5D24LMQGtzMnrCw82upRjkVfvA/8lRAQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86 Validity Not Before: Jun 15 01:43:33 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42: df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b: a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c: 27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1: 5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f: 56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31: b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf: 6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43: d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab: 54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2: 06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d: a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07: 16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f: b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95: fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5: 60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe: 7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB X509v3 Authority Key Identifier: keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:da:90:5b:09:9e:e9:6d:24:66:dd:95:ef:50:b0:8c:d5:d0: a3:95:8b:ff:ef:62:28:0c:9c:26:b3:c9:86:39:20:c3:d2:2a: 1e:dd:1a:ee:30:f9:84:55:ab:8b:08:d3:01:c5:64:f0:2a:aa: d4:f3:e4:5e:44:12:70:8a:54:be:22:fe:d1:47:f8:4e:ee:7b: e8:e8:22:25:68:db:6c:d3:ba:66:82:a3:41:1b:4d:cd:86:5a: 20:8f:54:bb:26:01:fa:c9:98:0e:71:9d:d0:62:7d:a7:0a:ad: 81:8c:e6:7a:f0:f9:23:9b:bf:9b:2d:f8:6d:cd:00:bf:b4:2f: 27:d1:cf:08:37:76:9f:f3:c3:af:39:b6:c0:9d:0c:25:49:0e: 68:56:2c:8c:92:3f:69:9d:1a:81:77:4a:b7:9f:99:45:2f:cf: 43:e5:10:1d:4e:97:37:d3:fc:62:1a:8d:0a:9c:30:e9:3f:a3: b9:b0:1a:8e:c7:ed:e7:10:44:e5:3c:29:21:06:01:6b:69:6a: d7:73:43:df:c3:c2:f2:c6:55:1e:53:09:92:f9:f5:b5:a4:ca: c1:ec:dc:fd:df:b3:c1:71:dd:e8:3b:b3:ae:d8:fb:f9:2b:b1: a8:eb:22:76:23:0c:c6:4d:ee:99:5e:cf:c3:7e:0f:a3:6a:09: 79:4a:5a:51 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OEVG NDQwQUEzNjBDMEQyMTAzNUE4MUFEMkMyMzMzOUQyMjMzRjg2MB4XDTI1MDYxNTAx NDMzM1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMThCMzJCRTUwMjY1MTlC MkE0QzI1QjM0RDBCN0Q4OUVEOTE4ODFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOKjADHtV9W3J6WvyUNC37Tmvk8IC/YQ7n866f5rp4Swqb+lUA2t flPzBZY8J+kD2aZJ/Vb/ZdS8TQ7xXMe5f52bxyfa7cGvMbGfVmc785F93UJEplbg w2YxtQ+JTAPrxJ1F9zWI9rHPbwBoxwAB2bEbZ26hu3BD1XBIAE40Z2Tzr3KKl22r VPMJTAltjiK59SECLAPiBr2+e4v5gU0OmzxliLmdotZ6mngYAniXx9Gd8PYHFmxm Ail3ZF8OU5fW8rI/shuByqCNNhhTO9vXR9mV+qUsan0QkWXv7lzLUaflYPKggfbg uupxwivMq/z+e7VQAQISP1Ez5bcpKfPsWXcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQYsyvlAmUZsqTCWzTQt9ie2RiBqzAfBgNVHSMEGDAWgBRo70QKo2DA0hA1qBrS wjM50iM/hjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMzkvYU85RUNxTmd3TklRTmFnYTBzSXpPZElqUDRZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYU85RUNxTmd3TklRTmFnYTBzSXpP ZElqUDRZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjM5L2FPOUVDcU5nd05JUU5hZ2Ewc0l6T2RJalA0WS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn2pBbCZ7pbSRm3ZXvULCM1dCjlYv/72IoDJwms8mGOSDD0ioe3Rru MPmEVauLCNMBxWTwKqrU8+ReRBJwilS+Iv7RR/hO7nvo6CIlaNts07pmgqNBG03N hlogj1S7JgH6yZgOcZ3QYn2nCq2BjOZ68Pkjm7+bLfhtzQC/tC8n0c8IN3af88Ov ObbAnQwlSQ5oViyMkj9pnRqBd0q3n5lFL89D5RAdTpc30/xiGo0KnDDpP6O5sBqO x+3nEETlPCkhBgFraWrXc0Pfw8LyxlUeUwmS+fW1pMrB7Nz937PBcd3oO7Ou2Pv5 K7Go6yJ2IwzGTe6ZXs/Dfg+jagl5SlpR -----END CERTIFICATE-----Generated at Fri Jul 4 16:11:28 2025 by rpki-client