$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft File: GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft (raw, json) Hash identifier: /yZugg8pfgjxhrHBEGTExjZMwi7WHPai+LT0jsKyA+A= Subject key identifier: A5:17:67:EE:38:AC:6C:6B:F0:F7:82:2E:43:15:86:09:DF:3B:2F:2D Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24 Certificate issuer: /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24 Certificate serial: 48 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft Manifest number: 0670 Signing time: Fri 04 Jul 2025 21:50:31 +0000 Manifest this update: Fri 04 Jul 2025 21:50:31 +0000 Manifest next update: Sat 19 Jul 2025 21:50:31 +0000 Files and hashes: 1: AKbXwp7F6lGBS8SR82Ryf4RM4Ks.roa (hash: l2yCs1/fIG2Lrx8HDPtHdTac1GCKJDZiNfWX730kkRk=) 2: GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl (hash: Io3JyTy0BwmSxQJQuCKZ8UJkEWQhKqPTa0ol0vCW95E=) 3: Kxngo8QDvSaeo52m2gwOh-P0m_4.roa (hash: wjajpBXziVHFsb3iFMUUn3guhzPbqNKtFvw8pyd+V5g=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24 Validity Not Before: Jun 15 01:34:25 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A51767EE38AC6C6BF0F7822E43158609DF3B2F2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:e2:19:0e:40:55:d2:fb:58:bc:ca:67:f7: 52:73:d2:ac:01:57:f4:f8:8e:5b:19:e3:3b:10:ee: ed:ef:c0:e2:f8:80:ba:cf:24:a6:14:21:8a:49:e1: ea:cd:38:41:e6:1f:af:2f:8c:0b:f0:a0:ba:16:03: 79:8f:0d:88:fe:ab:3c:9b:d1:4e:1a:7b:20:c3:29: ac:f5:bb:6d:81:86:dc:10:59:4e:a3:72:b9:4e:d0: 64:b0:03:47:32:9c:43:a1:01:64:c7:be:f9:36:2c: 06:54:97:77:d6:3d:cc:da:f8:89:68:08:c1:97:29: a8:ba:d0:7e:69:f0:d0:78:42:cf:d4:c6:b8:1f:3b: 68:68:e5:9f:01:01:94:c8:46:16:a1:da:28:f3:35: 55:a3:a0:d5:85:d9:db:a9:32:7a:6a:dc:98:7b:91: 52:3b:d6:88:ef:27:2b:6e:a0:d8:84:9c:36:c7:a2: 6f:ed:88:f8:36:d5:90:8f:e3:99:69:1a:5b:a9:f0: 7d:33:a1:56:7f:eb:61:8e:be:18:dc:83:c1:0e:f4: 0d:dc:e9:f5:91:ca:e3:ef:66:b0:a8:89:db:c9:64: da:f5:a5:bb:f6:61:e4:62:e6:db:18:49:15:0f:4f: cf:71:43:57:9e:20:08:8e:fd:01:a1:22:83:5c:ae: 5b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:67:EE:38:AC:6C:6B:F0:F7:82:2E:43:15:86:09:DF:3B:2F:2D X509v3 Authority Key Identifier: keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:17:5a:98:dd:63:8a:11:9c:1c:02:c7:19:c4:b5:a7:e4:82: 09:86:f2:a6:11:54:96:52:07:7b:92:b9:ae:00:81:c9:47:0b: 02:68:a2:a5:d8:a2:15:e7:3d:bb:25:45:48:f0:6e:98:cf:c2: 3a:c3:83:7b:6f:f8:8c:32:ea:0a:6e:ce:76:3e:2e:b9:d9:63: e8:7b:e7:74:f7:3c:40:6c:d1:c5:d4:e2:58:16:7a:69:52:e9: 0d:df:4c:52:7b:91:95:8c:df:b2:8a:56:95:17:38:a0:e6:d7: 19:ff:21:36:37:a1:39:e6:37:62:81:7f:e1:9d:54:c0:a8:5f: 16:2d:fd:b1:b6:ab:f4:43:81:e2:39:29:eb:04:fc:6d:e9:72: 22:a1:92:f3:0d:be:a7:d1:0e:f8:94:b8:b1:c2:9d:89:d7:e1: 19:5e:21:57:45:63:ed:f4:61:4d:aa:ec:fd:99:f7:3e:be:2e: 82:1d:78:5d:0f:da:9a:a6:22:6d:65:86:d5:af:8d:8e:d9:bb: ce:f4:29:0a:9b:83:58:71:91:7d:8b:60:d2:49:d6:c6:f6:4a: 9b:d5:e5:73:9c:1a:6f:e8:97:7f:ba:3a:18:a6:5d:e6:ff:e4: 0a:aa:1c:bb:63:99:9a:e0:5f:02:95:40:e8:de:8c:16:1f:6e: e2:85:be:20 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODUw MzQxQzBFNTg2Q0Y0NzU0N0ZEMDZFNTRFREJFNjkwMkEwRTI0MB4XDTI1MDYxNTAx MzQyNVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTUxNzY3RUUzOEFDNkM2 QkYwRjc4MjJFNDMxNTg2MDlERjNCMkYyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMjI4hkOQFXS+1i8ymf3UnPSrAFX9PiOWxnjOxDu7e/A4viAus8k phQhiknh6s04QeYfry+MC/CguhYDeY8NiP6rPJvRThp7IMMprPW7bYGG3BBZTqNy uU7QZLADRzKcQ6EBZMe++TYsBlSXd9Y9zNr4iWgIwZcpqLrQfmnw0HhCz9TGuB87 aGjlnwEBlMhGFqHaKPM1VaOg1YXZ26kyemrcmHuRUjvWiO8nK26g2IScNseib+2I +DbVkI/jmWkaW6nwfTOhVn/rYY6+GNyDwQ70Ddzp9ZHK4+9msKiJ28lk2vWlu/Zh 5GLm2xhJFQ9Pz3FDV54gCI79AaEig1yuWxkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBSlF2fuOKxsa/D3gi5DFYYJ3zsvLTAfBgNVHSMEGDAWgBQYUDQcDlhs9HVH/Qbl TtvmkCoOJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBBcURpUS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBB cURpUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvR0ZBMEhBNVliUFIxUl8wRzVVN2I1cEFxRGlRLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHEXWpjdY4oRnBwCxxnEtafkggmG8qYRVJZSB3uSua4AgclHCwJooqXYohXn PbslRUjwbpjPwjrDg3tv+Iwy6gpuznY+LrnZY+h753T3PEBs0cXU4lgWemlS6Q3f TFJ7kZWM37KKVpUXOKDm1xn/ITY3oTnmN2KBf+GdVMCoXxYt/bG2q/RDgeI5KesE /G3pciKhkvMNvqfRDviUuLHCnYnX4RleIVdFY+30YU2q7P2Z9z6+LoIdeF0P2pqm Im1lhtWvjY7Zu870KQqbg1hxkX2LYNJJ1sb2SpvV5XOcGm/ol3+6OhimXeb/5Aqq HLtjmZrgXwKVQOjejBYfbuKFviA= -----END CERTIFICATE-----Generated at Fri Jul 4 23:44:19 2025 by rpki-client