$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft File: GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft (raw, json) Hash identifier: +Z5+SMApOMna94UK+LFXYK1vye/KeqtcvjfH/MFD8JY= Subject key identifier: A5:17:67:EE:38:AC:6C:6B:F0:F7:82:2E:43:15:86:09:DF:3B:2F:2D Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24 Certificate issuer: /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24 Certificate serial: 4F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft Manifest number: 08F3 Signing time: Mon 20 Oct 2025 10:59:29 +0000 Manifest this update: Mon 20 Oct 2025 10:59:29 +0000 Manifest next update: Tue 04 Nov 2025 10:59:29 +0000 Files and hashes: 1: GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl (hash: RGvbr8jv4iV8MgtlYHXWXCAPXzIKyjCglXVGbMzo2Q0=) 2: O0sVq2AdL4P2NHRR_bkJrCf4sGw.roa (hash: P0fbGwBcwhBkzlU/DuZ2B7SOsJY0KWlSOuxvuo27Y4s=) 3: rzuxG5NWeFRc9uu7P__D74cLjFg.roa (hash: oysG15v8aY4KPSMFdsq15WL1gcKCTnGyNwMEYCim08c=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 02:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24 Validity Not Before: Oct 15 01:36:08 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=A51767EE38AC6C6BF0F7822E43158609DF3B2F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:e2:19:0e:40:55:d2:fb:58:bc:ca:67:f7: 52:73:d2:ac:01:57:f4:f8:8e:5b:19:e3:3b:10:ee: ed:ef:c0:e2:f8:80:ba:cf:24:a6:14:21:8a:49:e1: ea:cd:38:41:e6:1f:af:2f:8c:0b:f0:a0:ba:16:03: 79:8f:0d:88:fe:ab:3c:9b:d1:4e:1a:7b:20:c3:29: ac:f5:bb:6d:81:86:dc:10:59:4e:a3:72:b9:4e:d0: 64:b0:03:47:32:9c:43:a1:01:64:c7:be:f9:36:2c: 06:54:97:77:d6:3d:cc:da:f8:89:68:08:c1:97:29: a8:ba:d0:7e:69:f0:d0:78:42:cf:d4:c6:b8:1f:3b: 68:68:e5:9f:01:01:94:c8:46:16:a1:da:28:f3:35: 55:a3:a0:d5:85:d9:db:a9:32:7a:6a:dc:98:7b:91: 52:3b:d6:88:ef:27:2b:6e:a0:d8:84:9c:36:c7:a2: 6f:ed:88:f8:36:d5:90:8f:e3:99:69:1a:5b:a9:f0: 7d:33:a1:56:7f:eb:61:8e:be:18:dc:83:c1:0e:f4: 0d:dc:e9:f5:91:ca:e3:ef:66:b0:a8:89:db:c9:64: da:f5:a5:bb:f6:61:e4:62:e6:db:18:49:15:0f:4f: cf:71:43:57:9e:20:08:8e:fd:01:a1:22:83:5c:ae: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:67:EE:38:AC:6C:6B:F0:F7:82:2E:43:15:86:09:DF:3B:2F:2D X509v3 Authority Key Identifier: keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:77:13:a0:98:0d:4b:da:a0:39:58:cd:c9:0a:19:05:ee:4b: 0c:66:47:e6:4e:38:2c:22:c8:8a:f5:1f:68:af:fe:88:0b:f5: a7:7c:90:8d:f3:2f:9d:e0:a9:4f:35:d7:40:07:de:cc:91:5f: 5f:1f:88:d6:1a:e9:c7:a4:04:b2:11:ae:13:52:5e:68:b4:86: 39:57:5d:cd:d2:99:78:e2:58:d9:09:50:a5:39:e0:ca:76:b3: 6b:98:a4:f0:ca:2c:f1:dd:d5:a5:ba:98:0b:92:04:54:1c:67: e7:7b:25:73:39:2c:42:53:ef:99:bc:4a:9b:c6:83:2c:de:e3: eb:68:a0:50:be:74:a9:58:5e:21:ad:ef:9e:12:78:f7:97:1a: 95:1b:0b:27:7a:73:59:7b:c4:af:1f:64:15:44:6f:65:69:6f: 1a:18:a9:b7:7b:fa:06:83:af:97:d7:97:12:bf:24:9a:df:e5: d8:4c:c8:99:a3:75:da:92:0a:65:ca:a8:69:d2:3d:b2:18:19: c9:57:9e:20:3a:de:d5:68:88:d2:09:1a:c0:51:1b:95:43:12: 6c:6e:c4:6e:ca:b6:36:cb:0c:84:ec:87:f8:6d:d2:86:fe:e9: c2:51:eb:e1:5d:45:c9:07:4b:45:31:77:64:75:d7:b0:de:03: a1:4b:16:0a -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODUw MzQxQzBFNTg2Q0Y0NzU0N0ZEMDZFNTRFREJFNjkwMkEwRTI0MB4XDTI1MTAxNTAx MzYwOFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQTUxNzY3RUUzOEFDNkM2 QkYwRjc4MjJFNDMxNTg2MDlERjNCMkYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMjI4hkOQFXS+1i8ymf3UnPSrAFX9PiOWxnjOxDu7e/A4viAus8k phQhiknh6s04QeYfry+MC/CguhYDeY8NiP6rPJvRThp7IMMprPW7bYGG3BBZTqNy uU7QZLADRzKcQ6EBZMe++TYsBlSXd9Y9zNr4iWgIwZcpqLrQfmnw0HhCz9TGuB87 aGjlnwEBlMhGFqHaKPM1VaOg1YXZ26kyemrcmHuRUjvWiO8nK26g2IScNseib+2I +DbVkI/jmWkaW6nwfTOhVn/rYY6+GNyDwQ70Ddzp9ZHK4+9msKiJ28lk2vWlu/Zh 5GLm2xhJFQ9Pz3FDV54gCI79AaEig1yuWxkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBSlF2fuOKxsa/D3gi5DFYYJ3zsvLTAfBgNVHSMEGDAWgBQYUDQcDlhs9HVH/Qbl TtvmkCoOJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBBcURpUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBB cURpUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvR0ZBMEhBNVliUFIxUl8wRzVVN2I1cEFxRGlRLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJx3E6CYDUvaoDlYzckKGQXuSwxmR+ZOOCwiyIr1H2iv/ogL9ad8kI3zL53g qU8110AH3syRX18fiNYa6cekBLIRrhNSXmi0hjlXXc3SmXjiWNkJUKU54Mp2s2uY pPDKLPHd1aW6mAuSBFQcZ+d7JXM5LEJT75m8SpvGgyze4+tooFC+dKlYXiGt754S ePeXGpUbCyd6c1l7xK8fZBVEb2VpbxoYqbd7+gaDr5fXlxK/JJrf5dhMyJmjddqS CmXKqGnSPbIYGclXniA63tVoiNIJGsBRG5VDEmxuxG7KtjbLDITsh/ht0ob+6cJR 6+FdRckHS0Uxd2R117DeA6FLFgo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:05:59 2025 by rpki-client