$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft File: AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft (raw, json) Hash identifier: OjULFXi8Pcwi3pD/by50Iwdm0VkYD0hNZnVq1uuFy2A= Subject key identifier: 5D:5B:21:1C:39:F4:70:9C:53:E9:56:C5:B4:A4:25:06:A6:84:52:4A Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4 Certificate issuer: /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4 Certificate serial: 46 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft Manifest number: 0552 Signing time: Sun 18 May 2025 22:15:10 +0000 Manifest this update: Sun 18 May 2025 22:15:10 +0000 Manifest next update: Mon 02 Jun 2025 22:15:10 +0000 Files and hashes: 1: AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl (hash: JwLzZy7DVWoCsx3BmmR0jd1gV48pjBEvGj5UncuIEvc=) 2: ByaKLxi8ugDsCUlm9INow9uu6HQ.roa (hash: rFudOXdLmyC8QrHWkk8RlCXIH1HOn6lrmOeEaDYa5Ww=) 3: HWgzIZVXEAs7FF0RbqBf_SQnRVg.roa (hash: Exrgbrgo8QPKtlDqTADP3vwyj4OqXqgX80ECG/w/A94=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 May 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4 Validity Not Before: May 15 01:36:47 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=5D5B211C39F4709C53E956C5B4A42506A684524A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:7f:02:2d:93:59:d7:32:b1:88:07:0b:62: dd:c8:14:68:cb:5d:50:89:6e:28:70:6f:d2:5d:58: 30:cb:66:29:c7:70:c9:ec:0b:5e:75:fb:bc:f9:b5: e9:7b:4c:f1:ea:37:4c:4e:a8:14:9f:b7:9d:c4:26: 84:f4:35:b6:a4:4d:47:8e:43:06:36:57:bb:80:6f: 13:a0:1a:70:36:a8:30:a6:e5:9c:f3:b6:86:85:38: 5b:50:6e:1d:0c:a9:69:a6:ee:74:f9:10:23:23:bf: 9e:3b:e4:58:ad:11:d5:b9:67:c4:a3:8c:c3:67:96: 1e:97:7d:92:80:c2:3a:a2:39:1e:06:b7:02:0e:9c: 36:c9:a6:6f:a0:49:2a:36:94:31:3f:cf:6a:cc:b0: 80:58:df:6f:3e:f8:72:2e:28:61:51:35:c5:55:65: b6:4c:99:33:75:2f:b2:7b:f7:4a:f3:05:64:ea:e1: 1d:ff:37:69:18:d0:0c:56:fe:55:94:92:a1:08:7a: c6:bf:da:55:a0:50:1a:a4:01:e5:d6:d0:77:ca:7d: 29:4a:67:37:fd:92:8c:8e:b4:82:67:41:73:65:0c: 05:fe:1f:74:58:1a:c2:f1:b8:63:01:c2:6b:be:8b: d2:3c:e7:0e:a4:8d:1e:d8:a4:33:47:07:95:a8:a0: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5B:21:1C:39:F4:70:9C:53:E9:56:C5:B4:A4:25:06:A6:84:52:4A X509v3 Authority Key Identifier: keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4a:b7:1b:42:64:d0:89:0b:70:b7:54:19:f2:ef:18:19:63: 9e:6d:bb:b1:fc:7a:6d:db:a1:a3:2a:c3:84:b1:d6:50:77:53: cb:65:52:ac:b3:d0:b9:db:8a:7d:56:6a:05:5b:b8:5d:ed:4d: 89:b4:04:70:d9:f9:6d:08:4c:eb:ae:a4:73:d0:a4:e3:2d:8a: 29:21:57:77:ed:b4:d0:d0:3d:87:8b:4c:8f:30:24:bc:1f:d8: 1d:2c:98:1b:6f:a0:3d:2e:f7:72:d8:97:50:01:4d:67:b9:d3: 56:67:9d:6b:9a:7f:66:c1:e5:3c:2a:df:24:21:c7:0c:7e:09: b9:be:d5:a3:b9:9c:1f:25:95:3d:df:fb:28:00:16:e9:e7:a6: 6b:07:b7:d1:4a:3c:cb:fd:3a:91:ce:e2:23:a0:a1:17:ef:d6: b3:f6:d4:e6:a2:ca:ea:68:ab:d5:b6:1e:2b:a7:24:58:0a:85: 09:1c:50:b8:bd:49:ca:a3:4b:b8:84:ce:59:9d:d2:09:7c:dd: 1b:46:9a:38:7e:9c:c8:df:31:21:95:9c:e8:a9:9e:6c:eb:6a: e1:e6:aa:ef:06:a8:a9:eb:cd:e8:f8:18:96:1e:21:0f:eb:1c: a0:92:b1:74:59:1f:6f:29:e0:47:29:f9:89:3c:c1:b7:a1:bf: ca:b7:a4:02 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcx MUYyREQ3NjY3Q0ZCMDg4MDRCRThGQTI4NEE0OUU2MTNFREM0MB4XDTI1MDUxNTAx MzY0N1oXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNUQ1QjIxMUMzOUY0NzA5 QzUzRTk1NkM1QjRBNDI1MDZBNjg0NTI0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOEffwItk1nXMrGIBwti3cgUaMtdUIluKHBv0l1YMMtmKcdwyewL XnX7vPm16XtM8eo3TE6oFJ+3ncQmhPQ1tqRNR45DBjZXu4BvE6AacDaoMKblnPO2 hoU4W1BuHQypaabudPkQIyO/njvkWK0R1blnxKOMw2eWHpd9koDCOqI5Hga3Ag6c Nsmmb6BJKjaUMT/PasywgFjfbz74ci4oYVE1xVVltkyZM3Uvsnv3SvMFZOrhHf83 aRjQDFb+VZSSoQh6xr/aVaBQGqQB5dbQd8p9KUpnN/2SjI60gmdBc2UMBf4fdFga wvG4YwHCa76L0jznDqSNHtikM0cHlaigL8kCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRdWyEcOfRwnFPpVsW0pCUGpoRSSjAfBgNVHSMEGDAWgBQAcR8t12Z8+wiAS+j6 KEpJ5hPtxDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9BSEVmTGRkbWZQc0lnRXZvLWloS1Nl WVQ3Y1EuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAP0q3G0Jk0IkLcLdUGfLvGBljnm27sfx6bduhoyrDhLHWUHdTy2VSrLPQ uduKfVZqBVu4Xe1NibQEcNn5bQhM666kc9Ck4y2KKSFXd+200NA9h4tMjzAkvB/Y HSyYG2+gPS73ctiXUAFNZ7nTVmeda5p/ZsHlPCrfJCHHDH4Jub7Vo7mcHyWVPd/7 KAAW6eemawe30Uo8y/06kc7iI6ChF+/Ws/bU5qLK6mir1bYeK6ckWAqFCRxQuL1J yqNLuITOWZ3SCXzdG0aaOH6cyN8xIZWc6KmebOtq4eaq7waoqevN6PgYlh4hD+sc oJKxdFkfbyngRyn5iTzBt6G/yrekAg== -----END CERTIFICATE-----Generated at Mon May 19 04:28:48 2025 by rpki-client