$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft File: 1umiHoHKEuuEVa3sRmEEd-pfT0w.mft (raw, json) Hash identifier: 2NmEx+fkAHsBZr/g1/TwCJIEe9iHT38RVZOWvAgadNQ= Subject key identifier: 14:B9:B6:16:0A:1A:90:DB:6E:81:3E:65:D8:4C:9F:CE:6C:95:57:3A Authority key identifier: D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C Certificate issuer: /CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C Certificate serial: 36 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft Manifest number: 08A9 Signing time: Mon 20 Oct 2025 18:24:07 +0000 Manifest this update: Mon 20 Oct 2025 18:24:07 +0000 Manifest next update: Tue 04 Nov 2025 18:24:07 +0000 Files and hashes: 1: 1umiHoHKEuuEVa3sRmEEd-pfT0w.crl (hash: Rq/kllLnx0/DW07dmknEakpotuXEk+DzJRH1BxCutl0=) 2: 70U0r1cRjSONpL_UHhiDiY958Po.roa (hash: XR3YC8d3lhP8lBrbsPXK1g+e6MM7UOOW7wzM6Nck/G8=) 3: dcaQuBE44AwLuNd6dxZPWYD9438.roa (hash: oDkGhTTo4qslT5MFOngO6/aJZ0TE6+XDFLgbx9j629o=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6E9A21E81CA12EB8455ADEC46610477EA5F4F4C Validity Not Before: Oct 15 01:30:15 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=14B9B6160A1A90DB6E813E65D84C9FCE6C95573A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8b:59:c5:0e:1e:ec:77:07:18:39:6c:f8:ae: a9:fa:87:07:a8:ef:22:52:bb:b2:31:ef:8e:7a:42: 2e:5e:86:9d:cb:6f:01:c1:c6:b6:eb:4d:e5:67:0d: af:ca:27:8a:d6:a7:3e:48:39:15:10:f2:72:e3:b3: 29:60:0e:10:f4:c5:b7:66:d9:ed:d5:e6:97:17:33: be:9d:d5:e9:8e:ba:86:fe:61:34:b8:e3:ea:d3:78: 47:f8:66:71:a2:38:64:0e:c2:d3:40:33:0e:71:8e: 29:17:ff:f4:3c:e0:de:6c:7c:12:c7:bf:fb:6a:c0: f0:8c:a2:eb:1e:f4:51:ee:18:69:75:c8:95:c3:44: 0c:88:cf:9a:60:ff:6c:fe:bc:a0:a9:00:77:3a:e6: 03:e0:3b:a3:b6:aa:15:ba:3a:2d:b2:b7:f6:37:62: a1:3b:76:71:f7:98:23:ca:74:e4:43:1c:f4:1c:9e: 9e:6e:83:11:89:34:8b:cb:8a:1c:12:ff:31:10:6c: fc:6c:89:21:ed:35:05:51:53:05:fb:77:27:f0:e0: 8d:e0:f3:e0:76:cd:d1:ee:fd:6a:1e:2c:6a:e9:e5: 51:5f:48:11:27:ec:68:33:b7:b3:a7:ea:a4:4c:83: c2:36:45:ff:38:17:14:2a:e7:da:2b:cf:34:7b:a4: 82:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B9:B6:16:0A:1A:90:DB:6E:81:3E:65:D8:4C:9F:CE:6C:95:57:3A X509v3 Authority Key Identifier: keyid:D6:E9:A2:1E:81:CA:12:EB:84:55:AD:EC:46:61:04:77:EA:5F:4F:4C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1umiHoHKEuuEVa3sRmEEd-pfT0w.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/1umiHoHKEuuEVa3sRmEEd-pfT0w.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:fd:5d:a7:53:10:a3:c0:f6:1e:32:5e:d3:fb:c0:a1:c6:be: 86:09:6c:79:bb:3e:c3:b3:76:65:fb:dc:8e:7e:0e:fe:2a:81: 6d:65:18:9a:bb:47:f5:6c:45:d8:df:58:c1:be:49:4b:6d:68: a7:8a:83:81:34:2f:11:53:6c:bd:b0:08:bd:a3:c8:3e:e0:ca: 9d:e4:cb:33:35:3b:73:1f:de:15:24:e2:c5:f8:de:f1:43:47: 76:1a:64:b2:58:5d:a1:9f:f2:91:f7:7d:fe:cb:24:43:9d:3a: 5d:15:70:2e:04:2b:ae:94:90:b6:55:99:f0:5e:88:5f:74:5a: b7:5a:5f:51:dd:95:43:3d:23:0d:6f:b6:63:d4:99:3d:2b:6c: 36:6b:f2:15:a4:56:30:a0:4b:cd:b1:fd:30:69:d6:a2:2e:5c: 24:a1:49:f0:9d:7a:a5:87:c3:d2:22:3c:55:90:42:97:3b:6e: 55:1d:fb:1a:a6:3e:1a:d3:03:b1:7a:30:2d:c4:32:28:5b:10: 06:7e:4a:60:e3:4b:63:3c:a6:22:be:b1:ff:b9:c2:74:26:b6: 31:f6:fa:94:82:4f:b8:72:e0:d0:a1:4e:e3:64:a1:19:e3:dd: 66:fb:01:9a:04:64:2b:63:4d:7a:a6:2d:3b:09:e1:1c:a6:58: c3:a2:e4:fd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBNjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENkU5 QTIxRTgxQ0ExMkVCODQ1NUFERUM0NjYxMDQ3N0VBNUY0RjRDMB4XDTI1MTAxNTAx MzAxNVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTRCOUI2MTYwQTFBOTBE QjZFODEzRTY1RDg0QzlGQ0U2Qzk1NTczQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCLWcUOHux3Bxg5bPiuqfqHB6jvIlK7sjHvjnpCLl6GnctvAcHG tutN5WcNr8onitanPkg5FRDycuOzKWAOEPTFt2bZ7dXmlxczvp3V6Y66hv5hNLjj 6tN4R/hmcaI4ZA7C00AzDnGOKRf/9Dzg3mx8Ese/+2rA8Iyi6x70Ue4YaXXIlcNE DIjPmmD/bP68oKkAdzrmA+A7o7aqFbo6LbK39jdioTt2cfeYI8p05EMc9Byenm6D EYk0i8uKHBL/MRBs/GyJIe01BVFTBft3J/DgjeDz4HbN0e79ah4saunlUV9IESfs aDO3s6fqpEyDwjZF/zgXFCrn2ivPNHukglcCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQUubYWChqQ226BPmXYTJ/ObJVXOjAfBgNVHSMEGDAWgBTW6aIegcoS64RVrexG YQR36l9PTDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjMyLzF1bWlIb0hLRXV1RVZhM3NSbUVFZC1wZlQwdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzF1bWlIb0hLRXV1RVZhM3NSbUVFZC1w ZlQwdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzIvMXVtaUhvSEtFdXVFVmEzc1JtRUVkLXBmVDB3Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAET9XadTEKPA9h4yXtP7wKHGvoYJbHm7PsOzdmX73I5+Dv4qgW1lGJq7R/Vs RdjfWMG+SUttaKeKg4E0LxFTbL2wCL2jyD7gyp3kyzM1O3Mf3hUk4sX43vFDR3Ya ZLJYXaGf8pH3ff7LJEOdOl0VcC4EK66UkLZVmfBeiF90WrdaX1HdlUM9Iw1vtmPU mT0rbDZr8hWkVjCgS82x/TBp1qIuXCShSfCdeqWHw9IiPFWQQpc7blUd+xqmPhrT A7F6MC3EMihbEAZ+SmDjS2M8piK+sf+5wnQmtjH2+pSCT7hy4NChTuNkoRnj3Wb7 AZoEZCtjTXqmLTsJ4RymWMOi5P0= -----END CERTIFICATE-----Generated at Mon Oct 20 23:12:49 2025 by rpki-client