$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft File: guWyiiD0xqYqRhL2xd-3o9ZNneo.mft (raw, json) Hash identifier: +VfoH9PkSLq1RFGhFOtBiIHcDrLV72R10S8oHr/GOm4= Subject key identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA Certificate issuer: /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Certificate serial: 50 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft Manifest number: 08CA Signing time: Mon 20 Oct 2025 14:49:40 +0000 Manifest this update: Mon 20 Oct 2025 14:49:40 +0000 Manifest next update: Tue 04 Nov 2025 14:49:40 +0000 Files and hashes: 1: DAes_GN9zpnYk4EeBzt2cj-26vE.roa (hash: KOjwr2Nfckx8EGupbQlAX6sJDMj/o4/KxieIld2RaBI=) 2: dmL_MHiDKs33DcKXfr1ef_QwcTQ.roa (hash: nDCDcLQSOrDP/w+ldAssVjQS9VYjt3V+31+IHT+5wQY=) 3: guWyiiD0xqYqRhL2xd-3o9ZNneo.crl (hash: P/QCNgQ8OjiEI+DE4V0WpOI2uwdgAFraVmAzKgocbjM=) 4: jFScQ9VRgF1uAtp-BEXwr3_FKO4.roa (hash: q4xY2bL+ahLjo1eN4/GUIWtRweDxWhb8lzO3KNMI/U4=) 5: ohdXgKctXmgQY3ELVi0RChYeEls.roa (hash: GcISsiUMvwue3VHD0Ob+RkSW04dUAEFQz5FNVF2XLQk=) 6: udYM7a7I-gRxHF5vnPYcVzMotjw.roa (hash: 1ZkXFw86F9LMEHQ7yMH989MOLMJvKUWhsgSwySsUQfE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Validity Not Before: Oct 15 01:42:06 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=386B8CA4A5FDB1EE07A124DDEC82A3B3007FF350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:58:3a:1c:75:36:98:50:2e:a7:58:ad:9d: 64:60:e1:10:97:ed:fc:94:b1:4d:69:ba:67:0e:8a: 56:e6:38:64:76:b1:43:84:bd:3d:e5:bf:12:59:a1: 68:b1:11:92:cc:82:9d:b9:fd:76:f9:5c:15:39:a5: c1:42:5e:03:25:66:6f:bd:91:3a:34:4c:46:e5:77: 5f:6d:d1:97:74:5a:50:1b:2c:db:74:1f:e0:f7:76: 15:68:a7:b8:a6:46:bd:e5:91:0c:0f:70:38:53:fc: f7:09:4a:37:98:d7:e4:f6:79:42:02:b7:4f:d7:16: 28:f3:f0:ee:43:fd:81:4b:05:6b:5a:82:91:02:42: 01:25:ea:a6:ad:a7:df:19:10:9e:6a:ed:f8:5d:77: 72:f2:17:20:56:45:4d:d2:5c:eb:cd:7a:ed:22:eb: 4d:dc:4f:d4:98:b1:bc:61:b9:91:86:6c:47:58:6c: aa:f1:ce:bf:66:c1:5b:fd:79:06:8e:a6:07:d9:71: 2c:e7:c5:b6:ec:d6:72:fd:d5:87:c7:2b:da:3c:3c: 97:43:1c:00:52:bb:e2:16:6b:ea:9f:4c:46:6a:4f: bf:26:f9:33:25:b4:85:05:77:51:a0:d2:df:83:5b: d9:8b:58:d6:c7:b2:9a:23:15:75:19:a1:bd:bb:85: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 X509v3 Authority Key Identifier: keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:85:7a:de:ae:65:18:47:26:00:6e:f1:df:e8:aa:86:7e:9b: bd:b9:a3:fc:83:0c:b0:5e:f9:e6:b0:c2:8e:b0:d4:06:1f:13: be:d6:04:80:ff:2a:0e:23:04:f7:40:63:8c:90:0f:b1:6c:d4: 35:9f:dd:2a:13:bf:0c:ea:32:0a:11:8a:2c:46:9f:0e:62:91: 9e:a1:28:08:cc:1e:8c:5c:cc:06:27:cc:b1:ee:20:f1:9e:69: 0c:9d:02:1c:1b:2b:3e:69:62:e6:32:39:07:b3:f1:d6:df:4c: 4c:97:5c:26:d1:66:25:29:4f:e7:ff:db:85:ad:6b:34:85:8a: a8:a6:2b:a4:b2:c5:9b:3c:3f:52:5a:4b:23:65:f7:c4:5c:86: 6d:e8:34:00:43:4a:e6:7a:f4:cb:a0:32:32:ff:e5:ef:63:a0: 7f:d5:2b:af:8b:7d:18:45:08:e3:33:0e:8c:a0:53:0d:b3:65: 0d:de:ac:af:96:22:74:00:43:31:97:30:76:14:e6:60:8c:9c: 74:ce:ed:a5:e9:32:e0:90:61:b3:30:5b:77:d0:4e:29:53:8b: dc:3e:7f:30:4d:db:55:67:88:c9:ed:25:31:de:9e:3b:30:7c: 95:48:58:c1:10:45:08:d4:f3:d3:8c:ea:83:2b:1a:ff:a6:9b: d1:1e:74:97 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBUDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1 QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MTAxNTAx NDIwNloXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzg2QjhDQTRBNUZEQjFF RTA3QTEyNERERUM4MkEzQjMwMDdGRjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL27WDocdTaYUC6nWK2dZGDhEJft/JSxTWm6Zw6KVuY4ZHaxQ4S9 PeW/ElmhaLERksyCnbn9dvlcFTmlwUJeAyVmb72ROjRMRuV3X23Rl3RaUBss23Qf 4Pd2FWinuKZGveWRDA9wOFP89wlKN5jX5PZ5QgK3T9cWKPPw7kP9gUsFa1qCkQJC ASXqpq2n3xkQnmrt+F13cvIXIFZFTdJc68167SLrTdxP1JixvGG5kYZsR1hsqvHO v2bBW/15Bo6mB9lxLOfFtuzWcv3Vh8cr2jw8l0McAFK74hZr6p9MRmpPvyb5MyW0 hQV3UaDS34Nb2YtY1seymiMVdRmhvbuFlOkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQ4a4ykpf2x7gehJN3sgqOzAH/zUDAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF 37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzY3L2d1V3lpaUQweHFZcVJoTDJ4ZC0zbzlaTm5lby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHhXrermUYRyYAbvHf6KqGfpu9uaP8gwywXvnmsMKOsNQGHxO+1gSA /yoOIwT3QGOMkA+xbNQ1n90qE78M6jIKEYosRp8OYpGeoSgIzB6MXMwGJ8yx7iDx nmkMnQIcGys+aWLmMjkHs/HW30xMl1wm0WYlKU/n/9uFrWs0hYqopiukssWbPD9S WksjZffEXIZt6DQAQ0rmevTLoDIy/+XvY6B/1Suvi30YRQjjMw6MoFMNs2UN3qyv liJ0AEMxlzB2FOZgjJx0zu2l6TLgkGGzMFt30E4pU4vcPn8wTdtVZ4jJ7SUx3p47 MHyVSFjBEEUI1PPTjOqDKxr/ppvRHnSX -----END CERTIFICATE-----Generated at Mon Oct 20 17:25:15 2025 by rpki-client