$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft File: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft (raw, json) Hash identifier: sat/ZbunjLsV7k09wlo44Q0mhM4/zvfUV+wFqF0gW2E= Subject key identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Certificate serial: 32 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft Manifest number: 0895 Signing time: Mon 20 Oct 2025 19:02:17 +0000 Manifest this update: Mon 20 Oct 2025 19:02:17 +0000 Manifest next update: Tue 04 Nov 2025 19:02:17 +0000 Files and hashes: 1: ME3FUTW5xtIOu6_smwhIlqR1mxA.roa (hash: OxmtQSNOANVdu2Hlqo5l9/LPQ7+SEaiCX779qsrG8fo=) 2: PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl (hash: e9eWWPHAQjS88dcvZnny8ZrnXrLIPIbD7Zt+DIKgKV0=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A Validity Not Before: Oct 15 01:37:13 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=573737236B69B1521637DBF5F18D18F14F887104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:a1:5f:6c:fd:2e:5f:07:b4:71:68:91:4c: 6b:64:ee:2e:28:8d:d7:6b:21:84:af:df:bc:9c:5f: 01:98:fa:c8:92:07:ab:01:22:66:97:63:22:9a:a4: 8b:2e:38:df:24:85:e3:81:3c:9d:56:87:e5:fd:33: 11:df:23:fb:6f:26:48:e5:3e:03:8b:71:c9:ad:40: 76:8b:a6:49:06:4d:2b:1f:7d:14:69:a5:5b:8b:68: 44:30:42:fc:48:ec:1b:7a:9a:c2:06:ab:50:1f:f0: 25:37:ce:1f:f6:17:e8:97:07:2a:71:ae:d6:b8:3d: 9b:ea:67:25:19:3c:0f:f0:78:c8:37:43:0b:ab:bb: 0f:ff:c3:bf:66:f1:09:c4:ef:f7:c9:d7:25:be:9b: 0b:66:fc:a2:5a:8b:3c:ca:d9:80:50:25:a7:00:2d: 00:f0:52:d2:0a:e8:35:bd:be:11:5e:03:01:b9:cc: 48:1f:36:73:d0:06:c8:b5:20:d3:ea:54:43:e6:e2: 05:6b:f8:48:41:37:39:56:75:7a:b6:86:31:60:d0: c8:74:92:f4:45:20:12:a8:00:40:22:a1:de:4f:82: 5e:d8:e4:f4:6c:57:19:2d:2b:a0:d9:36:9f:ee:5c: c6:aa:e8:6b:1d:54:03:aa:fe:ad:f7:04:b9:7e:9d: b8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:37:37:23:6B:69:B1:52:16:37:DB:F5:F1:8D:18:F1:4F:88:71:04 X509v3 Authority Key Identifier: keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c0:e5:07:ba:8e:fc:47:87:a6:57:e0:8b:47:86:de:9d:fc: 92:e3:e9:9a:1a:ce:f8:fa:9a:0a:7c:bd:ba:14:e8:de:d0:48: 1c:2b:ed:ba:b2:04:d6:a1:bb:08:59:bf:de:f8:71:ab:f6:a7: 58:b5:9a:ef:5e:1f:61:9e:a9:f4:a7:e7:74:a0:97:56:da:f4: fe:a0:f5:8a:94:d4:b7:db:63:f9:2f:e8:c5:57:ba:b5:fa:98: 69:0b:1a:a1:42:49:3b:32:41:8d:50:87:9a:cc:31:82:77:85: 42:fd:38:cc:a9:a4:d3:f0:0e:34:fd:73:da:f3:2c:26:55:44: c0:96:b8:69:52:6b:4a:3c:4d:1c:7f:bf:12:02:a9:82:f1:1e: 16:49:ac:91:d8:d0:3a:e2:34:33:28:f6:67:29:05:3a:6b:c6: 4e:db:03:25:84:e7:4b:e6:c4:c6:6f:fb:aa:f4:f9:8f:3d:60: 0d:91:ea:05:06:04:59:1e:ef:16:25:f0:54:2a:2f:e3:bd:1c: 63:46:d4:2a:f2:64:31:82:cf:76:b9:8f:b0:9d:c0:cf:d2:fb: eb:cb:74:eb:80:01:3b:c4:1e:5c:b9:e1:d3:a4:90:19:a8:bf: 16:ee:04:73:fb:96:fd:53:27:79:73:50:3a:63:05:1d:ba:f5: e2:f7:d4:11 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBMjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQzI2 N0QwMjhGRDk5QzYxM0UzQTZGNDI1NDE1RDdEQjdGQ0QxRDRBMB4XDTI1MTAxNTAx MzcxM1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNTczNzM3MjM2QjY5QjE1 MjE2MzdEQkY1RjE4RDE4RjE0Rjg4NzEwNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM6poV9s/S5fB7RxaJFMa2TuLiiN12shhK/fvJxfAZj6yJIHqwEi ZpdjIpqkiy443ySF44E8nVaH5f0zEd8j+28mSOU+A4txya1AdoumSQZNKx99FGml W4toRDBC/EjsG3qawgarUB/wJTfOH/YX6JcHKnGu1rg9m+pnJRk8D/B4yDdDC6u7 D//Dv2bxCcTv98nXJb6bC2b8olqLPMrZgFAlpwAtAPBS0groNb2+EV4DAbnMSB82 c9AGyLUg0+pUQ+biBWv4SEE3OVZ1eraGMWDQyHSS9EUgEqgAQCKh3k+CXtjk9GxX GS0roNk2n+5cxqroax1UA6r+rfcEuX6duEECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRXNzcja2mxUhY32/XxjRjxT4hxBDAfBgNVHSMEGDAWgBQ8Jn0Cj9mcYT46b0JU Fdfbf80dSjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyNDUvUENaOUFvX1puR0UtT205Q1ZCWFgyM19OSFVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUENaOUFvX1puR0UtT205Q1ZCWFgy M19OSFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjQ1L1BDWjlBb19abkdFLU9tOUNWQlhYMjNfTkhVby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCewOUHuo78R4emV+CLR4benfyS4+maGs74+poKfL26FOje0EgcK+26 sgTWobsIWb/e+HGr9qdYtZrvXh9hnqn0p+d0oJdW2vT+oPWKlNS322P5L+jFV7q1 +phpCxqhQkk7MkGNUIeazDGCd4VC/TjMqaTT8A40/XPa8ywmVUTAlrhpUmtKPE0c f78SAqmC8R4WSayR2NA64jQzKPZnKQU6a8ZO2wMlhOdL5sTGb/uq9PmPPWANkeoF BgRZHu8WJfBUKi/jvRxjRtQq8mQxgs92uY+wncDP0vvry3TrgAE7xB5cueHTpJAZ qL8W7gRz+5b9Uyd5c1A6YwUduvXi99QR -----END CERTIFICATE-----Generated at Mon Oct 20 23:14:27 2025 by rpki-client