$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft File: aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json) Hash identifier: OXhNEJnCseK4FCdvx9d2j8JODva7hgwTuEtlkflOD8Y= Subject key identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86 Certificate issuer: /CN=68EF440AA360C0D21035A81AD2C23339D2233F86 Certificate serial: 07 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft Manifest number: 031B Signing time: Mon 20 Oct 2025 19:20:59 +0000 Manifest this update: Mon 20 Oct 2025 19:20:59 +0000 Manifest next update: Tue 04 Nov 2025 19:20:59 +0000 Files and hashes: 1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: XNko6FFKyFA0FG6dTrZXs3dyCoeDG1ae/a7PNnIl6JI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86 Validity Not Before: Oct 15 01:44:20 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42: df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b: a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c: 27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1: 5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f: 56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31: b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf: 6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43: d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab: 54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2: 06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d: a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07: 16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f: b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95: fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5: 60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe: 7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB X509v3 Authority Key Identifier: keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a1:fa:b7:38:5f:1a:e8:33:07:7c:f4:4b:cb:fe:e4:8d:3f: 9c:16:7d:91:ec:5e:1b:64:58:fd:8f:0a:12:ba:da:4f:61:d8: 9b:83:86:61:93:b1:22:4d:30:5b:2b:dc:8a:a3:cb:2c:34:57: dc:32:21:13:01:d7:dd:58:e6:25:7d:f9:b4:4c:ea:fc:65:68: 78:bc:a5:99:ec:ed:16:46:05:2e:cb:f7:0f:9e:ed:c2:9e:08: 03:21:0f:18:d9:38:1a:b7:46:69:af:58:a8:6c:65:33:c8:12: a1:73:af:ff:a6:11:fe:47:70:c1:17:c2:41:f1:16:3b:0d:eb: 58:25:6d:21:40:df:f4:38:82:62:52:90:98:72:cc:db:55:13: 30:a4:4c:5d:8d:c1:b9:41:92:45:5c:47:58:18:d6:9c:96:57: b3:22:1f:f1:13:15:2f:4f:a5:f5:45:7d:ba:ca:46:63:08:62: cb:26:6a:0c:f4:cd:90:0f:e2:60:83:9d:19:49:2d:35:25:6f: 93:ae:2d:28:2e:7f:c1:b7:3b:16:be:bb:bf:87:90:43:32:f7: fe:a4:42:e5:b0:19:73:fd:63:60:6b:d9:56:6b:ed:99:46:f0: 48:ad:26:ae:89:64:26:d4:59:cb:25:c5:28:09:26:5f:6a:04: 52:4c:ab:66 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OEVG NDQwQUEzNjBDMEQyMTAzNUE4MUFEMkMyMzMzOUQyMjMzRjg2MB4XDTI1MTAxNTAx NDQyMFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMThCMzJCRTUwMjY1MTlC MkE0QzI1QjM0RDBCN0Q4OUVEOTE4ODFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOKjADHtV9W3J6WvyUNC37Tmvk8IC/YQ7n866f5rp4Swqb+lUA2t flPzBZY8J+kD2aZJ/Vb/ZdS8TQ7xXMe5f52bxyfa7cGvMbGfVmc785F93UJEplbg w2YxtQ+JTAPrxJ1F9zWI9rHPbwBoxwAB2bEbZ26hu3BD1XBIAE40Z2Tzr3KKl22r VPMJTAltjiK59SECLAPiBr2+e4v5gU0OmzxliLmdotZ6mngYAniXx9Gd8PYHFmxm Ail3ZF8OU5fW8rI/shuByqCNNhhTO9vXR9mV+qUsan0QkWXv7lzLUaflYPKggfbg uupxwivMq/z+e7VQAQISP1Ez5bcpKfPsWXcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQYsyvlAmUZsqTCWzTQt9ie2RiBqzAfBgNVHSMEGDAWgBRo70QKo2DA0hA1qBrS wjM50iM/hjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMzkvYU85RUNxTmd3TklRTmFnYTBzSXpPZElqUDRZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYU85RUNxTmd3TklRTmFnYTBzSXpP ZElqUDRZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjM5L2FPOUVDcU5nd05JUU5hZ2Ewc0l6T2RJalA0WS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqofq3OF8a6DMHfPRLy/7kjT+cFn2R7F4bZFj9jwoSutpPYdibg4Zh k7EiTTBbK9yKo8ssNFfcMiETAdfdWOYlffm0TOr8ZWh4vKWZ7O0WRgUuy/cPnu3C nggDIQ8Y2Tgat0Zpr1iobGUzyBKhc6//phH+R3DBF8JB8RY7DetYJW0hQN/0OIJi UpCYcszbVRMwpExdjcG5QZJFXEdYGNacllezIh/xExUvT6X1RX26ykZjCGLLJmoM 9M2QD+Jgg50ZSS01JW+Tri0oLn/BtzsWvru/h5BDMvf+pELlsBlz/WNga9lWa+2Z RvBIrSauiWQm1FnLJcUoCSZfagRSTKtm -----END CERTIFICATE-----Generated at Tue Oct 21 00:52:43 2025 by rpki-client