$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft File: EGsfPWSeWiWqE0DBi9anwkzzavY.mft (raw, json) Hash identifier: T0kSG+tyZA7dtYOiw+n5BSwCBOmh9DEs+yeRs1xKToM= Subject key identifier: 9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7 Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6 Certificate issuer: /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6 Certificate serial: 76 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft Manifest number: 1839 Signing time: Fri 04 Jul 2025 14:25:37 +0000 Manifest this update: Fri 04 Jul 2025 14:25:37 +0000 Manifest next update: Sat 19 Jul 2025 14:25:37 +0000 Files and hashes: 1: EGsfPWSeWiWqE0DBi9anwkzzavY.crl (hash: MRBJiHNsauoImVvs6Ydow6rl9gJhtcUVJGRPvA35MgE=) 2: YWd22z7LkVnQ86yvKuf6YaTPKaY.roa (hash: MqEa+DXNOZq+Xq84zBDHoPCWVp4C0Z78MnsOFgSiseQ=) 3: gtQK8JECG-3DawQ4sBR8H346b_4.roa (hash: UiJpUdwK/ebHHAOpREeiNfhkvcS1zlhxLYITgAv6PtA=) 4: yi4SZ1tm2kyicQrYGj3wDznRMzg.roa (hash: BnVqRLbuzInCNkeTTMDnTo4Dcaa1Et7JdOMqmTpy6gA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6 Validity Not Before: Jun 15 01:31:37 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=9F4394A17451280729796239152E4FFC37A646D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ff:8a:3d:4c:8f:7c:33:f5:32:0e:54:25:b7: 62:b1:9c:7b:f5:e0:99:fb:4b:b7:43:0c:6b:5f:9c: 3a:4f:fb:ed:39:aa:01:c6:96:1a:a6:9f:69:6b:04: 2c:6c:fb:3d:08:05:bb:4f:9b:df:b3:f6:26:fa:f0: f2:a4:00:bf:a6:e5:2c:f3:73:13:3a:ce:25:27:3b: 39:67:64:71:bb:7d:86:36:77:79:ed:09:49:b0:e3: 1e:d7:58:49:d5:18:d1:13:1a:95:b0:ef:86:ef:e5: 42:8f:41:29:23:44:ad:64:21:29:7f:12:8a:35:5f: f8:be:f1:1d:92:7e:83:40:6f:ad:13:7c:d5:c6:43: b3:df:03:5b:70:58:9b:fb:b8:62:95:2f:6d:0b:41: 6f:5f:09:10:23:aa:9c:f7:0a:1c:37:a6:b5:72:99: 53:54:3f:97:f9:79:8b:d0:17:b1:dd:f8:f1:a0:e3: cf:c3:9d:d9:d4:92:50:f4:fe:96:89:a3:6d:bd:9f: 35:55:f0:4c:df:74:1d:13:10:9a:b1:ee:d0:f4:40: 2d:6b:19:14:78:a9:39:57:3a:5d:2d:62:a5:d4:34: 88:f0:da:db:48:5f:aa:6e:d1:ec:a8:8c:48:26:b2: c8:f5:d5:1f:66:d3:81:56:24:55:69:65:67:8d:46: 4e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:43:94:A1:74:51:28:07:29:79:62:39:15:2E:4F:FC:37:A6:46:D7 X509v3 Authority Key Identifier: keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:d2:b8:c7:32:9d:39:6b:96:22:0d:51:b4:29:02:72:9d:2b: f3:9b:5b:6b:a4:92:95:43:cc:30:5b:1b:15:6c:86:cd:b6:c1: c7:f3:8d:64:f0:52:d0:59:1e:c4:ce:16:aa:f4:a3:8f:2f:bb: bb:48:dc:08:89:cf:29:f8:f7:aa:0a:f6:4d:12:84:a2:79:9c: 80:49:fa:4b:fd:ee:d2:c4:da:80:e6:3e:95:87:72:59:95:77: b5:21:66:d9:32:29:8c:e0:2a:e9:cd:ab:11:fe:da:64:cf:cb: d5:d5:c6:80:55:33:05:c5:c3:ab:e7:08:1b:a9:3f:03:18:b0: 96:64:bc:4b:b0:89:3a:45:11:a2:f7:e1:2f:8b:31:eb:14:54: 70:51:ee:aa:b8:02:45:da:a4:b7:3a:03:2e:67:bc:d4:1a:bf: 44:df:08:ee:4d:08:3d:33:02:96:96:a3:97:5b:d6:59:fb:85: 4a:4c:de:14:91:5c:a1:3d:c2:e9:a1:38:1e:9d:a4:c6:32:c1: 39:2e:f8:15:85:c9:68:78:2a:6a:ac:d3:b0:79:55:55:dc:7d: eb:b8:5b:7d:2f:c0:6f:11:eb:8b:98:a5:99:a7:19:b5:b4:a3: b4:7e:c3:75:4a:d3:51:18:51:c8:8f:11:0e:56:95:83:0f:05: 7b:4f:cb:9b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBdjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMDZC MUYzRDY0OUU1QTI1QUExMzQwQzE4QkQ2QTdDMjRDRjM2QUY2MB4XDTI1MDYxNTAx MzEzN1oXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoOUY0Mzk0QTE3NDUxMjgw NzI5Nzk2MjM5MTUyRTRGRkMzN0E2NDZENzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPP/ij1Mj3wz9TIOVCW3YrGce/XgmftLt0MMa1+cOk/77TmqAcaW GqafaWsELGz7PQgFu0+b37P2Jvrw8qQAv6blLPNzEzrOJSc7OWdkcbt9hjZ3ee0J SbDjHtdYSdUY0RMalbDvhu/lQo9BKSNErWQhKX8SijVf+L7xHZJ+g0BvrRN81cZD s98DW3BYm/u4YpUvbQtBb18JECOqnPcKHDemtXKZU1Q/l/l5i9AXsd348aDjz8Od 2dSSUPT+lomjbb2fNVXwTN90HRMQmrHu0PRALWsZFHipOVc6XS1ipdQ0iPDa20hf qm7R7KiMSCayyPXVH2bTgVYkVWllZ41GTpcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSfQ5ShdFEoByl5YjkVLk/8N6ZG1zAfBgNVHSMEGDAWgBQQax89ZJ5aJaoTQMGL 1qfCTPNq9jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMDMvRUdzZlBXU2VXaVdxRTBEQmk5YW53a3p6YXZZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRUdzZlBXU2VXaVdxRTBEQmk5YW53 a3p6YXZZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDAzL0VHc2ZQV1NlV2lXcUUwREJpOWFud2t6emF2WS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk0rjHMp05a5YiDVG0KQJynSvzm1trpJKVQ8wwWxsVbIbNtsHH841k 8FLQWR7Ezhaq9KOPL7u7SNwIic8p+PeqCvZNEoSieZyASfpL/e7SxNqA5j6Vh3JZ lXe1IWbZMimM4CrpzasR/tpkz8vV1caAVTMFxcOr5wgbqT8DGLCWZLxLsIk6RRGi 9+EvizHrFFRwUe6quAJF2qS3OgMuZ7zUGr9E3wjuTQg9MwKWlqOXW9ZZ+4VKTN4U kVyhPcLpoTgenaTGMsE5LvgVhcloeCpqrNOweVVV3H3ruFt9L8BvEeuLmKWZpxm1 tKO0fsN1StNRGFHIjxEOVpWDDwV7T8ub -----END CERTIFICATE-----Generated at Fri Jul 4 17:02:42 2025 by rpki-client