$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft File: 4qAcFfKuEP_hot-5OfujIiLIHos.mft (raw, json) Hash identifier: lg4zhHpV58s94e/rd9nYmt4qwuifC3VpB4MvjJ/1Kk8= Subject key identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B Certificate issuer: /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Certificate serial: 1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft Manifest number: 06E3 Signing time: Sat 23 Aug 2025 08:13:22 +0000 Manifest this update: Sat 23 Aug 2025 08:13:22 +0000 Manifest next update: Sun 07 Sep 2025 08:13:22 +0000 Files and hashes: 1: 4qAcFfKuEP_hot-5OfujIiLIHos.crl (hash: aeNNRMTJj9vlTMXyWkqUzTQ2/Fakn8XfUc7sYl5uNzE=) 2: GBW_VD7DOK2r1RAwqUE501IE0hw.roa (hash: b8qF1fCMRyn1zHloCjm2VRm+d5A9XnfJA4ozLK4JvKI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Validity Not Before: Aug 15 01:36:45 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=C6CB7946F6B7FEB93EDC5DC4133E657403EFA99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:e7:4a:64:d4:83:bc:9a:e7:1a:43:9c:fb: 2c:b7:2c:34:a2:17:09:61:30:55:8f:07:cd:e0:b2: 7f:44:cc:2f:57:a1:f2:9e:fa:7b:96:f8:4a:df:fb: 19:d6:44:07:47:68:54:48:49:8b:0d:cc:61:77:78: b3:11:e7:06:f0:2a:90:66:35:6e:d5:bb:96:51:ce: e6:5e:62:5c:65:6f:85:18:b3:4f:f3:d1:2a:87:5b: 3d:3a:b4:25:49:eb:7c:b8:67:3e:d8:d3:86:f4:26: d7:ce:c5:29:6a:bc:dd:50:71:18:97:7a:75:8a:a3: b5:eb:d3:87:3b:98:e5:a2:a7:06:e7:c5:a9:f6:5d: 27:5f:19:da:94:62:34:0e:a5:f1:c5:71:35:07:82: 17:fb:ac:f8:7b:63:8c:0e:c5:93:b0:ab:84:ec:22: a1:4c:6e:23:1a:3c:bb:f8:14:eb:3d:21:97:9e:da: dd:3a:92:69:98:03:40:2e:eb:9a:69:bb:d5:ea:b9: 4d:92:3b:82:d7:36:34:48:62:3f:d2:65:e7:83:f6: e5:27:7a:e4:47:3d:37:0b:13:ac:c1:24:8a:45:fa: 87:8d:20:10:d2:4b:45:b4:f1:13:28:06:8f:98:c6: 75:ee:8a:83:5a:37:d1:29:3f:25:5c:f0:31:03:38: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B X509v3 Authority Key Identifier: keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ff:cf:b1:40:3d:85:c3:d0:db:53:ea:59:aa:4c:7d:37:d0: 37:d5:7b:9a:70:d1:84:0a:29:4c:3f:4c:49:f3:6e:4b:15:6b: 77:29:76:ef:de:0c:06:84:4f:40:6f:2e:12:a6:ec:61:3d:52: 1b:42:04:ad:77:e7:60:02:f7:51:dd:ce:a8:fc:39:2f:66:ba: a8:5c:2c:00:08:04:59:fc:a8:80:1b:bc:0b:95:0f:a4:52:d1: 25:6d:2a:a1:d1:bb:fa:42:8c:ee:93:43:e5:e2:6c:b5:02:11: 13:25:74:5e:93:e1:69:02:f0:d6:52:47:df:2d:36:5a:3e:93: 35:3e:bd:8d:b4:4d:78:94:1f:1e:ed:4d:97:dc:87:4a:ba:17: 74:58:07:00:1a:8a:78:18:09:72:e1:cc:f4:e6:45:0e:a6:73: 7b:69:15:26:0d:70:58:bb:7d:3a:33:f8:fd:6f:c3:44:16:87: 70:c1:bc:64:d4:84:3b:11:f6:4a:12:b2:dc:6c:8e:19:e5:6e: 22:d8:73:cd:5d:e4:ac:62:e6:b5:db:0e:c0:c9:ce:44:7e:35: 34:c6:4f:5f:ce:6b:e3:75:61:da:a4:ab:81:de:49:60:5a:f4: b7:c8:36:c6:c1:42:5e:43:57:58:3d:81:e2:dd:f3:fa:23:76: d2:45:59:38 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw MUMxNUYyQUUxMEZGRTFBMkRGQjkzOUZCQTMyMjIyQzgxRThCMB4XDTI1MDgxNTAx MzY0NVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzZDQjc5NDZGNkI3RkVC OTNFREM1REM0MTMzRTY1NzQwM0VGQTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhK50pk1IO8mucaQ5z7LLcsNKIXCWEwVY8HzeCyf0TML1eh8p76 e5b4St/7GdZEB0doVEhJiw3MYXd4sxHnBvAqkGY1btW7llHO5l5iXGVvhRizT/PR KodbPTq0JUnrfLhnPtjThvQm187FKWq83VBxGJd6dYqjtevThzuY5aKnBufFqfZd J18Z2pRiNA6l8cVxNQeCF/us+HtjjA7Fk7CrhOwioUxuIxo8u/gU6z0hl57a3TqS aZgDQC7rmmm71eq5TZI7gtc2NEhiP9Jl54P25Sd65Ec9NwsTrMEkikX6h40gENJL RbTxEygGj5jGde6Kg1o30Sk/JVzwMQM4tssCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTGy3lG9rf+uT7cXcQTPmV0A++pmzAfBgNVHSMEGDAWgBTioBwV8q4Q/+Gi37k5 +6MiIsgeizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTIvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJaUxJSG9zLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJ aUxJSG9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTEyLzRxQWNGZkt1RVBfaG90LTVPZnVqSWlMSUhvcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAe/8+xQD2Fw9DbU+pZqkx9N9A31XuacNGECilMP0xJ825LFWt3KXbv 3gwGhE9Aby4SpuxhPVIbQgStd+dgAvdR3c6o/DkvZrqoXCwACARZ/KiAG7wLlQ+k UtElbSqh0bv6Qozuk0Pl4my1AhETJXRek+FpAvDWUkffLTZaPpM1Pr2NtE14lB8e 7U2X3IdKuhd0WAcAGop4GAly4cz05kUOpnN7aRUmDXBYu306M/j9b8NEFodwwbxk 1IQ7EfZKErLcbI4Z5W4i2HPNXeSsYua12w7Ayc5EfjU0xk9fzmvjdWHapKuB3klg WvS3yDbGwUJeQ1dYPYHi3fP6I3bSRVk4 -----END CERTIFICATE-----Generated at Sat Aug 23 11:04:08 2025 by rpki-client