$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft File: uRC9lDeWfHr903Th6m6-1_pvlrU.mft (raw, json) Hash identifier: Mdio9B+Frexyxq8XWhJCzy6H5TdG3UwJp6/DFbbun6A= Subject key identifier: 52:B4:0B:A2:3A:17:DC:38:40:A5:50:5A:49:C2:10:55:45:98:12:CC Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 Certificate issuer: /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Certificate serial: 43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft Manifest number: 05F5 Signing time: Fri 04 Jul 2025 11:42:09 +0000 Manifest this update: Fri 04 Jul 2025 11:42:09 +0000 Manifest next update: Sat 19 Jul 2025 11:42:09 +0000 Files and hashes: 1: -SPxMuez1cdq8ts8s197n8Ok_ik.roa (hash: YF1D2X1jumyNzbDCoOQf/GzbPPSQbAHbIPCKUyfR03o=) 2: 3O4FEcZuAV8crtAqGgkBmAu5QQY.roa (hash: AIviidSLbVTPwLps67Aq3plA7Ph9SBm+MiwnpJnxeUo=) 3: 9yBOsLxpzwDo5Or4vjEXoU5RfQU.roa (hash: Huwy0k+8yLn5DtmWHxkU4wKySUSWPYbaL3Pouy2kEfY=) 4: B5KUPmSpMDA2h9jhmXkhNXir9Pk.roa (hash: pmeM1U0qdafsyMzcRKjSIQYRVv9T3X1NXd1Hr5aLhNk=) 5: He7arKJdZs7Wp_t0v9T7KEUr4bI.roa (hash: sp+7rxu1QHOVlR4lJDtJnRKVMPaA8aLjGJoV0JsVpFs=) 6: QKA7n4yLVChzi9n0j5puNfnhaqE.roa (hash: e6esoYtShcO0fojBkDYs5CMrE7eJ+gSFfdFkPqPUNA4=) 7: TNhlvwcYA2i_-ynU6438hr1Eq98.roa (hash: BSB/f6pvDTsitFrwPPffbStip4IGPFFt8z6j6hJvTXU=) 8: cL2XV-LzReVocQhBQBVsABr4jK4.roa (hash: nWXo1WXIMF8RfjHQqq61Ef+ECLWbtAAiQsEQYR8/B68=) 9: h3OQC2Ew8cEkVNVc-APlHFMSlLE.roa (hash: 4EIseoNqmWB2Uzqfytxr2kQsVNfr0mwubqEmwJnLCnk=) 10: iMi2ig8lhjzSdOJKxHjF1z1q-gk.roa (hash: VubjvFLg4+by1pA/YLduVkD1+RFRy74aYKDw8L/iMUc=) 11: uRC9lDeWfHr903Th6m6-1_pvlrU.crl (hash: /VsNlT3xEUTNh/RhigSQl4ijeuQSDylGKwJIDWBe5u4=) 12: xk038HkPLr-DmgYam_VEDIF7K1g.roa (hash: jTqs+zVN48fWvh1zcgTmyNH96XZLHj7kfZuLsOVitT0=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5 Validity Not Before: Jun 15 01:41:38 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=52B40BA23A17DC3840A5505A49C21055459812CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:69:a5:25:de:7c:97:4d:3f:9b:c6:16:e1:b9: a8:e8:f4:99:93:d9:fa:f6:21:1d:e0:4d:19:37:68: da:4b:f7:2d:3c:f7:fa:7c:da:35:95:0a:b3:fd:f1: 69:3d:f9:05:72:77:0d:28:4e:d2:7c:e3:d7:74:16: b2:6c:de:1b:a8:71:3f:1b:1d:4d:0f:9a:41:e0:2e: c3:ec:3a:db:c1:1a:99:b9:25:17:49:17:ad:62:1e: 99:ca:e8:42:7c:84:d7:b4:b3:d4:44:cc:13:61:df: 43:29:66:91:f4:4a:f2:9f:39:eb:a0:21:52:5a:46: f2:40:4e:d7:88:15:af:9d:23:6c:f8:a6:b8:b9:17: e1:16:d0:f0:b3:b9:9d:d3:4e:ce:0e:0b:e0:64:d7: a6:07:8b:1d:91:5f:6f:df:58:e5:c7:89:27:ad:bf: 08:6f:2c:a2:30:ac:e4:99:15:e9:b6:5f:6c:47:06: 48:d3:e5:93:4e:7b:de:ce:a3:63:8b:78:e9:a4:68: cd:d4:e9:e4:b5:ea:80:45:41:fd:d4:8f:a4:b2:44: 7a:0c:81:d5:cf:75:25:14:80:24:8d:1c:d6:56:0b: 2e:3d:61:6e:9d:a9:b3:cf:f8:62:5d:44:17:c4:73: 7e:9c:b0:69:46:57:55:4d:20:a5:5d:01:85:eb:7a: ca:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B4:0B:A2:3A:17:DC:38:40:A5:50:5A:49:C2:10:55:45:98:12:CC X509v3 Authority Key Identifier: keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:37:58:1c:de:f8:e1:fc:fa:5b:4c:ca:a0:c6:31:6d:63:89: 35:4d:23:4b:7c:c8:de:fb:bd:97:7e:db:6c:db:17:6c:43:83: 0f:cc:59:e9:f6:78:55:25:21:5c:b1:59:01:a1:e8:a4:76:1c: 0a:67:74:9b:c3:0f:ba:0a:7a:cb:e7:72:d2:e3:bf:ea:f9:2c: c7:c1:51:73:db:79:0d:be:32:59:2d:cd:2f:4b:6b:19:9e:af: 68:b6:1f:82:ce:99:b6:22:fb:2f:7e:2b:de:b0:bb:94:e6:f3: 47:3d:0d:c7:37:20:f4:c1:fc:d7:64:5b:e3:30:95:d0:04:78: c0:7d:24:c5:27:92:af:66:55:56:dc:86:40:73:c0:19:ef:3e: 6c:1b:5c:ba:f9:1e:55:f8:71:41:0d:4d:18:96:a7:27:43:41: 06:93:af:9c:b2:8a:8c:36:b3:7b:ba:9e:4d:7d:72:b2:c5:30: ba:16:3c:aa:01:f8:09:66:ea:0a:da:23:53:21:61:c5:a0:30: b6:00:18:da:14:6b:41:7b:d4:e5:27:43:a8:47:e7:6e:9c:b7: c4:dd:db:3f:44:31:2c:52:16:63:d3:4f:a4:04:20:57:a0:56: 9b:b2:cb:1c:02:05:2f:1c:a7:04:98:e6:95:46:8b:dd:30:12: 79:ed:5b:fc -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI1MDYxNTAx NDEzOFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoNTJCNDBCQTIzQTE3REMz ODQwQTU1MDVBNDlDMjEwNTU0NTk4MTJDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANZppSXefJdNP5vGFuG5qOj0mZPZ+vYhHeBNGTdo2kv3LTz3+nza NZUKs/3xaT35BXJ3DShO0nzj13QWsmzeG6hxPxsdTQ+aQeAuw+w628EambklF0kX rWIemcroQnyE17Sz1ETME2HfQylmkfRK8p8566AhUlpG8kBO14gVr50jbPimuLkX 4RbQ8LO5ndNOzg4L4GTXpgeLHZFfb99Y5ceJJ62/CG8sojCs5JkV6bZfbEcGSNPl k0573s6jY4t46aRozdTp5LXqgEVB/dSPpLJEegyB1c91JRSAJI0c1lYLLj1hbp2p s8/4Yl1EF8RzfpywaUZXVU0gpV0Bhet6yj0CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRStAuiOhfcOEClUFpJwhBVRZgSzDAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDIzL3VSQzlsRGVXZkhyOTAzVGg2bTYtMV9wdmxyVS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbN1gc3vjh/PpbTMqgxjFtY4k1TSNLfMje+72Xftts2xdsQ4MPzFnp 9nhVJSFcsVkBoeikdhwKZ3Sbww+6CnrL53LS47/q+SzHwVFz23kNvjJZLc0vS2sZ nq9oth+Czpm2IvsvfivesLuU5vNHPQ3HNyD0wfzXZFvjMJXQBHjAfSTFJ5KvZlVW 3IZAc8AZ7z5sG1y6+R5V+HFBDU0YlqcnQ0EGk6+csoqMNrN7up5NfXKyxTC6Fjyq AfgJZuoK2iNTIWHFoDC2ABjaFGtBe9TlJ0OoR+dunLfE3ds/RDEsUhZj00+kBCBX oFabssscAgUvHKcEmOaVRovdMBJ57Vv8 -----END CERTIFICATE-----Generated at Fri Jul 4 16:12:28 2025 by rpki-client