$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft File: KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft (raw, json) Hash identifier: 6KBHz0Kk7bzW+d3mOvaRdv7EP3IZrn5GMdAaZcwfKpA= Subject key identifier: 47:70:E3:0A:A0:B1:AA:FD:B5:A0:F2:D5:0B:80:42:86:90:9F:91:6A Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 Certificate issuer: /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Certificate serial: 67 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft Manifest number: 07B5 Signing time: Sat 23 Aug 2025 06:53:37 +0000 Manifest this update: Sat 23 Aug 2025 06:53:37 +0000 Manifest next update: Sun 07 Sep 2025 06:53:37 +0000 Files and hashes: 1: 3jUXTYGJg5Okcm7RONELJzsN-D8.roa (hash: fpG2NFFtKUe5umgRQQQTEajpkWLXf5IMOuWzl1rL4Rk=) 2: 5XyBCMhg0VdTpAk5MvrIB0ao4Vc.roa (hash: rdJbguvsGHjC8N81ah1nBK6Ah2YwddrFzpAlSl7I83I=) 3: CQ_-NoHisxgeb5hzVbLGOjm_7Co.roa (hash: NnvMCvmmgL4mbkbQTaSlZlOvGdjquRaPC39WQ+B7HPM=) 4: DV-PD7YiMcjtVOq1AmhAZ5dTp-I.roa (hash: xEK+MMsZJRsDMDkJMPQlTZnocVVorQeUOKQYDyTVX4g=) 5: KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl (hash: 35UtiGSkmc2JV+TVdQ27B+gmeSzCu0ct8p2x0psUhtU=) 6: Tu_Hqteh4nwvt8DKgdVb5ZjXQwI.roa (hash: izVux2N4mn1soZRgCjgSzZpTNdvO3QTRm7xxweQlTNs=) 7: WXR7Mw5WOwNNHBCTVvpgtVSkWkE.roa (hash: K/OjM+qzrcpE/D4PwV58IsKcsx1EPa8QkW+JxapZIZ4=) 8: _SDWeq3ibVxJTn7WG4U2rBFGoDg.roa (hash: eVgIK1ufu8Gx25IoM3e6F0Fx3KNqFF6SA0CswZLPTms=) 9: dKQ2XWW7v9IcN-BgtuGeraJbYQo.roa (hash: GgnhfCxc3HzWQWJoxEzjGC4tPc6VYYEdXU39QtocGyI=) 10: dS3KtmOX72k18EU5X_qF2f4ejEg.roa (hash: KeuoeYStrLfV2ig+1MS7Ih9U9SEuUg7tpivjfC3rXBo=) 11: tOIAYVMKz6kmU9vX-fdLUEk2-7g.roa (hash: QLXgkKg8ADpM7iMs6jm7J0OocO1xnax5MaosgBvCo6Q=) 12: tfQe1spo-W0wUqdYi42K5_cKog8.roa (hash: j/X8D9EPWgMhQPMAbV5sCcQ9h411fEfYjDUIPGda7Xg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8 Validity Not Before: Aug 15 01:33:21 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=4770E30AA0B1AAFDB5A0F2D50B804286909F916A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:4f:39:11:af:65:31:d0:7a:dd:75:fd:44: 6a:b9:4d:ef:95:ec:5d:e0:90:27:38:8c:9d:59:b9: 5a:47:b3:fa:a8:ec:78:bb:11:99:ef:20:24:93:6c: f3:5b:c2:85:ee:b1:3c:af:fb:01:fa:cf:2f:32:de: ab:9c:ec:f3:0f:b0:00:af:92:c8:0a:02:88:9c:bd: 6a:27:40:d8:bc:d1:2d:ec:20:c3:da:7e:3f:6c:e5: 8b:1d:be:fe:25:93:d7:e5:dc:77:82:5a:90:b4:fe: 20:87:07:19:f2:85:cb:5b:d2:28:6d:9f:88:c3:c2: 82:ab:65:15:66:90:ce:29:cf:21:40:a7:d0:00:45: 66:d8:15:9b:31:a2:48:db:9c:6e:25:0a:5a:1d:34: 4b:f9:f4:c8:55:7d:18:08:5d:d9:04:33:a2:18:dc: 36:64:e7:c6:0c:11:15:a0:0b:77:53:04:4d:f7:09: d2:db:9c:55:cd:48:47:43:31:aa:33:96:93:e6:b4: c4:50:8c:a0:b8:db:84:2e:22:61:f4:70:f5:e0:ab: 9a:d0:48:38:ef:e9:ef:7a:e1:f2:ba:66:1b:38:5a: 65:ca:9b:d0:9c:f5:2e:e1:67:0e:f7:19:81:8c:e7: d3:25:da:e3:4f:7e:e1:10:ac:36:af:34:28:3b:6a: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:70:E3:0A:A0:B1:AA:FD:B5:A0:F2:D5:0B:80:42:86:90:9F:91:6A X509v3 Authority Key Identifier: keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:65:cd:c5:9a:1a:1b:c8:21:e9:98:71:fc:2a:27:8b:3f:9f: 3a:af:0c:f2:d8:f9:d9:1d:9a:f8:f7:67:70:49:0d:bb:a9:02: b9:62:3b:ec:b0:6e:67:13:1c:35:a3:80:53:57:d4:fa:dc:e8: a3:ef:b9:73:26:1c:7b:20:6b:91:b0:dc:cb:3b:43:32:56:e0: 0b:94:0c:7b:49:ee:fc:a9:c3:c3:55:87:8a:48:02:2f:90:bb: 16:c2:3c:a0:7a:d6:d7:1c:3f:55:6b:93:34:33:27:ae:64:d1: 9e:84:28:4e:64:1f:63:3e:b7:8f:ec:0f:e1:b3:9d:64:f1:44: b2:24:8e:8e:90:db:7c:c7:8c:e4:a4:bd:2f:69:f0:0c:74:d5: 2a:fd:e8:a3:60:73:a5:bc:77:28:e4:b1:e7:8b:60:99:da:0c: 8b:48:97:79:49:50:97:97:1c:7d:5d:a4:c4:88:d3:3e:d2:c1: d4:48:d1:1f:25:0a:89:ab:3a:2c:43:23:42:20:9c:ab:bd:a3: ea:98:ec:fc:14:7a:5b:d1:57:da:7b:ba:58:44:6b:00:11:77: 19:90:4d:ed:e4:23:f8:e9:50:49:43:6d:6d:ce:09:f6:da:6a: ec:5c:58:7a:42:cf:cf:87:29:f5:a4:be:c3:82:7a:b9:d3:ac: 69:ab:6d:67 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOTA1 QTNFRThGOUMzNjFBQkQ5NzFCMENBOTcyNkRGODNDRkE2QkY4MB4XDTI1MDgxNTAx MzMyMVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDc3MEUzMEFBMEIxQUFG REI1QTBGMkQ1MEI4MDQyODY5MDlGOTE2QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANL/TzkRr2Ux0Hrddf1EarlN75XsXeCQJziMnVm5Wkez+qjseLsR me8gJJNs81vChe6xPK/7AfrPLzLeq5zs8w+wAK+SyAoCiJy9aidA2LzRLewgw9p+ P2zlix2+/iWT1+Xcd4JakLT+IIcHGfKFy1vSKG2fiMPCgqtlFWaQzinPIUCn0ABF ZtgVmzGiSNucbiUKWh00S/n0yFV9GAhd2QQzohjcNmTnxgwRFaALd1METfcJ0tuc Vc1IR0MxqjOWk+a0xFCMoLjbhC4iYfRw9eCrmtBIOO/p73rh8rpmGzhaZcqb0Jz1 LuFnDvcZgYzn0yXa409+4RCsNq80KDtqaSECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRHcOMKoLGq/bWg8tULgEKGkJ+RajAfBgNVHSMEGDAWgBQpBaPuj5w2Gr2XGwyp cm34PPpr+DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwMTYvS1FXajdvLWNOaHE5bHhzTXFYSnQtRHo2YV9nLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1FXajdvLWNOaHE5bHhzTXFYSnQt RHo2YV9nLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDE2L0tRV2o3by1jTmhxOWx4c01xWEp0LUR6NmFfZy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaZc3FmhobyCHpmHH8KieLP586rwzy2PnZHZr492dwSQ27qQK5Yjvs sG5nExw1o4BTV9T63Oij77lzJhx7IGuRsNzLO0MyVuALlAx7Se78qcPDVYeKSAIv kLsWwjygetbXHD9Va5M0MyeuZNGehChOZB9jPreP7A/hs51k8USyJI6OkNt8x4zk pL0vafAMdNUq/eijYHOlvHco5LHni2CZ2gyLSJd5SVCXlxx9XaTEiNM+0sHUSNEf JQqJqzosQyNCIJyrvaPqmOz8FHpb0Vfae7pYRGsAEXcZkE3t5CP46VBJQ21tzgn2 2mrsXFh6Qs/Phyn1pL7Dgnq506xpq21n -----END CERTIFICATE-----Generated at Sat Aug 23 10:56:43 2025 by rpki-client