$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft File: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft (raw, json) Hash identifier: BnlDhOqv8U4o+mnigyDw9OEbrBWLNUjLaNKNSkVhxO8= Subject key identifier: B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90 Authority key identifier: B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27 Certificate issuer: /CN=B3DF98D48F448B48A4711C876CCD27BA8B718527 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft Manifest number: 45 Signing time: Mon 20 Oct 2025 10:26:46 +0000 Manifest this update: Mon 20 Oct 2025 10:26:46 +0000 Manifest next update: Tue 04 Nov 2025 10:26:46 +0000 Files and hashes: 1: PKZOGuSM1daMWe_atD4yLJjyIWY.roa (hash: mYCW9R+3RDvom53E61DhCGSZB8pUKkwxRAcw0FVo9Vw=) 2: ouB_bdr1K5eIOYjTEwNp8GHgyMw.roa (hash: u6I9NueSvmkR8yp/TFNjqx+RV8o/wcsfLdAlSlZSVc0=) 3: s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl (hash: 5NtU0qYyU6wknFkLivCji/rnok8rOlf/BGU0OrSDrGI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 13:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3DF98D48F448B48A4711C876CCD27BA8B718527 Validity Not Before: Oct 15 01:44:46 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=B41B49F7B894A663AC74E0BB78BEE3B69CA93D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:40:3c:fb:8a:24:71:be:b8:c5:f4:60:8b:92: 8a:7f:53:ea:cc:5b:61:7a:7d:f3:30:aa:4b:ff:ea: 40:7f:ed:54:63:ee:a3:29:e9:49:a5:90:82:0c:48: b4:66:e7:55:37:93:cf:19:f9:3e:0f:7c:e1:92:cb: 63:bc:9c:75:a5:32:4b:a6:62:fd:72:46:1f:38:ac: 13:f5:9c:0c:9b:f2:8a:8b:43:25:3d:9c:89:13:52: 5d:ad:06:03:bf:50:b7:43:fc:15:64:7d:8c:17:20: 23:d9:4f:90:02:c7:44:e9:db:ad:03:ab:ed:5a:bf: f1:d3:f7:eb:5b:29:3e:61:7f:ce:22:fc:10:bb:41: d0:09:15:44:e8:1d:f4:fd:3b:79:50:81:e6:78:85: e6:bf:b5:32:7b:7b:f0:72:a2:69:95:c1:87:a8:72: fe:74:aa:93:c9:12:c9:c4:26:4f:7b:28:bb:8e:fe: 45:e6:3e:16:bd:bd:04:04:d8:03:04:eb:34:81:7c: 6a:5c:25:0b:0d:b7:a1:7b:bf:72:fc:fd:97:c8:d8: 44:19:7c:3c:f2:a6:3e:5a:3e:1e:d0:90:83:6b:00: d3:66:55:b2:01:b7:30:22:6a:47:4d:7c:d7:04:9d: 16:9b:fa:b8:40:2e:40:47:f6:8f:0e:14:cf:6b:75: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1B:49:F7:B8:94:A6:63:AC:74:E0:BB:78:BE:E3:B6:9C:A9:3D:90 X509v3 Authority Key Identifier: keyid:B3:DF:98:D4:8F:44:8B:48:A4:71:1C:87:6C:CD:27:BA:8B:71:85:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30089/s9-Y1I9Ei0ikcRyHbM0nuotxhSc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:5e:e1:10:16:c8:e5:e5:bf:c5:eb:9d:5a:65:5c:db:e0:5a: 49:d5:fb:40:ee:c0:bb:90:96:ff:44:5d:60:02:59:d9:a7:a6: de:3f:0e:51:3d:d4:9c:ac:8a:3f:d6:5d:18:9b:b1:2d:89:5a: 91:73:ca:ce:05:32:27:bb:4c:1c:0b:34:96:d8:bc:34:f6:9c: e2:eb:8b:27:87:c9:b1:20:ee:fd:1e:0d:de:b9:2d:cd:74:46: 79:9e:be:c9:4c:21:95:6d:88:f9:4e:45:1f:3f:79:47:11:cf: a2:86:da:f1:00:e9:90:fe:f1:20:d5:60:51:f5:f0:b6:2d:1a: dd:3b:6b:41:30:fd:12:d3:4c:18:23:12:66:16:78:bb:d4:7f: f2:46:da:42:b5:62:3d:76:66:7d:0d:42:61:2e:35:66:72:da: 2e:1c:39:52:fa:73:60:68:db:b7:90:9f:ee:51:6b:09:8e:b2: b2:47:a4:af:59:7c:e0:13:95:41:3c:36:61:0f:06:5f:d0:9e: db:43:4f:f4:f4:a8:db:d7:27:af:d8:a3:f4:c4:65:c3:b7:99: 2f:75:11:c6:fd:7a:bb:78:79:8e:02:21:e2:d2:b5:4e:8f:78: ba:f6:01:02:f2:dd:c3:d1:0f:45:6f:38:1f:eb:97:a4:ab:85: 90:55:e9:f9 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCM0RG OThENDhGNDQ4QjQ4QTQ3MTFDODc2Q0NEMjdCQThCNzE4NTI3MB4XDTI1MTAxNTAx NDQ0NloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQjQxQjQ5RjdCODk0QTY2 M0FDNzRFMEJCNzhCRUUzQjY5Q0E5M0Q5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAPxAPPuKJHG+uMX0YIuSin9T6sxbYXp98zCqS//qQH/tVGPuoynp SaWQggxItGbnVTeTzxn5Pg984ZLLY7ycdaUyS6Zi/XJGHzisE/WcDJvyiotDJT2c iRNSXa0GA79Qt0P8FWR9jBcgI9lPkALHROnbrQOr7Vq/8dP361spPmF/ziL8ELtB 0AkVROgd9P07eVCB5niF5r+1Mnt78HKiaZXBh6hy/nSqk8kSycQmT3sou47+ReY+ Fr29BATYAwTrNIF8alwlCw23oXu/cvz9l8jYRBl8PPKmPlo+HtCQg2sA02ZVsgG3 MCJqR0181wSdFpv6uEAuQEf2jw4Uz2t1T70CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBS0G0n3uJSmY6x04Lt4vuO2nKk9kDAfBgNVHSMEGDAWgBSz35jUj0SLSKRxHIds zSe6i3GFJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwODkvczktWTFJOUVpMGlrY1J5SGJNMG51b3R4aFNjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvczktWTFJOUVpMGlrY1J5SGJNMG51 b3R4aFNjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDg5L3M5LVkxSTlFaTBpa2NSeUhiTTBudW90eGhTYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcXuEQFsjl5b/F651aZVzb4FpJ1ftA7sC7kJb/RF1gAlnZp6bePw5R PdScrIo/1l0Ym7EtiVqRc8rOBTInu0wcCzSW2Lw09pzi64snh8mxIO79Hg3euS3N dEZ5nr7JTCGVbYj5TkUfP3lHEc+ihtrxAOmQ/vEg1WBR9fC2LRrdO2tBMP0S00wY IxJmFni71H/yRtpCtWI9dmZ9DUJhLjVmctouHDlS+nNgaNu3kJ/uUWsJjrKyR6Sv WXzgE5VBPDZhDwZf0J7bQ0/09Kjb1yev2KP0xGXDt5kvdRHG/Xq7eHmOAiHi0rVO j3i69gEC8t3D0Q9Fbzgf65ekq4WQVen5 -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:45 2025 by rpki-client