$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft File: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft (raw, json) Hash identifier: uUWk7MqD3zUrggu45CUPHY3ZPZDmhmi8qwBi+SWtvq4= Subject key identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Certificate serial: 47 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft Manifest number: 08C8 Signing time: Mon 20 Oct 2025 19:01:46 +0000 Manifest this update: Mon 20 Oct 2025 19:01:46 +0000 Manifest next update: Tue 04 Nov 2025 19:01:46 +0000 Files and hashes: 1: TT_BZ8pmbIhoVz56QzsvQx-q7Fc.roa (hash: oeHuQ/TlsrBDOZdW2TE9FBUX8pboDLwqzh2KD9bMHH8=) 2: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl (hash: 1VkNqXLdwkByLvS5PU0P7dimtxdkg7Pb2Xs1MRJlWfI=) 3: jEHASG6O5skxtj5vpaEneXrBNJo.roa (hash: D13UhKbKPo+umuI1+i9fzsvVDTM2mrThlP3bOAy/Jtw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 19:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Validity Not Before: Oct 15 01:36:06 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=E532D38B390BA23855C21F281072D162264A819D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:77:3c:7f:7e:8d:6e:0d:b2:e7:4d:bc:63: ea:6d:08:76:b0:c8:a6:77:a9:83:24:5c:c8:c2:d6: a8:ee:e5:6a:f2:3e:ac:c7:93:32:58:77:25:62:b4: a8:ea:26:67:5c:4c:81:8d:63:75:17:bc:65:50:d5: 5e:c3:36:ba:ca:86:87:c1:3c:31:4c:47:08:08:5a: 16:51:3c:dc:ec:97:ad:5b:c0:65:9e:0b:66:df:5e: 0c:ee:0e:1a:04:40:d8:d6:72:28:32:f5:90:2d:ac: 56:89:67:7e:64:8d:36:f3:de:32:ea:a8:66:99:ff: 37:d3:ab:0a:11:7d:3c:65:d0:15:07:6c:ba:e3:ee: 84:51:4b:36:bb:25:b8:56:92:5b:1c:c6:88:75:58: 50:f4:72:10:ab:36:ec:a2:bb:77:b6:7b:cf:d6:f5: 62:cb:5a:13:bd:55:c5:c7:3d:d8:67:91:2c:ed:87: 21:d9:96:52:75:9a:b7:91:0a:9c:0c:25:e1:a3:b9: 7d:9c:61:c8:40:6f:25:07:8a:0f:d2:fd:5d:bc:e5: 86:7d:a9:12:47:34:9a:5f:16:2a:c2:85:99:4d:a7: 9b:25:ae:c9:be:47:a4:98:e5:7f:fa:1e:b5:3f:17: 61:0b:76:de:08:71:50:00:4e:1d:56:b0:3f:d6:73: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D X509v3 Authority Key Identifier: keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:55:73:1d:1d:9e:eb:c6:d9:57:5a:48:4a:80:fe:84:47:7e: 4c:96:da:38:ec:c2:4f:be:20:32:b3:c7:68:ae:44:b1:40:bc: c5:91:9a:d2:5f:fe:b2:89:43:97:f8:77:4d:82:78:81:36:8d: bf:b3:fb:f8:aa:1e:54:40:6f:c3:d3:0a:e1:d6:89:43:89:86: cd:df:76:02:8e:49:f0:67:80:dc:41:89:b8:b9:5f:9b:a9:dd: bd:f4:8e:12:e3:0b:65:f7:34:f7:4f:bf:0a:ce:c5:f3:13:61: b3:b9:10:30:14:6d:f8:22:8f:a6:76:26:bc:21:d1:1a:2b:94: 7b:82:9b:e6:d5:75:72:1e:4e:c8:65:88:78:aa:a7:24:3b:21: 05:3f:34:d3:a7:b6:8e:9d:39:df:7e:33:10:c4:b2:6c:90:c2: b2:60:fa:53:8c:21:a2:eb:bc:17:35:7f:b8:34:b0:a7:5e:e1: e7:07:4e:33:d5:96:8d:fb:55:f4:38:bd:08:62:da:8d:7c:00: fb:67:45:77:29:99:4a:05:70:67:fa:57:a8:c9:a6:a6:da:67: a9:4d:fc:fa:36:d3:0e:93:ba:33:8d:ce:2a:da:70:36:2c:84: 84:cc:5e:f0:ce:8c:34:58:3b:ea:5d:bc:18:c0:d7:2d:20:88: b9:c6:f3:76 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzdC MzY0RUQwNDU4NTI2RDY2OENFRjhDRUU2NUEwOUREQzJFNERDMB4XDTI1MTAxNTAx MzYwNloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRTUzMkQzOEIzOTBCQTIz ODU1QzIxRjI4MTA3MkQxNjIyNjRBODE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKuWdzx/fo1uDbLnTbxj6m0IdrDIpnepgyRcyMLWqO7lavI+rMeT Mlh3JWK0qOomZ1xMgY1jdRe8ZVDVXsM2usqGh8E8MUxHCAhaFlE83OyXrVvAZZ4L Zt9eDO4OGgRA2NZyKDL1kC2sVolnfmSNNvPeMuqoZpn/N9OrChF9PGXQFQdsuuPu hFFLNrsluFaSWxzGiHVYUPRyEKs27KK7d7Z7z9b1YstaE71Vxcc92GeRLO2HIdmW UnWat5EKnAwl4aO5fZxhyEBvJQeKD9L9Xbzlhn2pEkc0ml8WKsKFmU2nmyWuyb5H pJjlf/oetT8XYQt23ghxUABOHVawP9ZzN/sCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTlMtOLOQuiOFXCHygQctFiJkqBnTAfBgNVHSMEGDAWgBRjezZO0EWFJtZozvjO 5loJ3cLk3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L1kzczJUdEJGaFNiV2FNNzR6dVphQ2QzQzVOdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1kzczJUdEJGaFNiV2FNNzR6dVphQ2Qz QzVOdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvWTNzMlR0QkZoU2JXYU03NHp1WmFDZDNDNU53Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH9Vcx0dnuvG2VdaSEqA/oRHfkyW2jjswk++IDKzx2iuRLFAvMWRmtJf/rKJ Q5f4d02CeIE2jb+z+/iqHlRAb8PTCuHWiUOJhs3fdgKOSfBngNxBibi5X5up3b30 jhLjC2X3NPdPvwrOxfMTYbO5EDAUbfgij6Z2Jrwh0RorlHuCm+bVdXIeTshliHiq pyQ7IQU/NNOnto6dOd9+MxDEsmyQwrJg+lOMIaLrvBc1f7g0sKde4ecHTjPVlo37 VfQ4vQhi2o18APtnRXcpmUoFcGf6V6jJpqbaZ6lN/Po20w6TujONziracDYshITM XvDOjDRYO+pdvBjA1y0giLnG83Y= -----END CERTIFICATE-----Generated at Mon Oct 20 23:13:14 2025 by rpki-client