$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: CGdv56SlT6DUPe8/o1zu7xIW/dSCdw7x0LM6kfBTIi0= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 1D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 04A3 Signing time: Sun 18 May 2025 02:29:50 +0000 Manifest this update: Sun 18 May 2025 02:29:50 +0000 Manifest next update: Mon 02 Jun 2025 02:29:50 +0000 Files and hashes: 1: -9JaxDwswvAQjLzAyiNRz8teJUk.roa (hash: dD0c/M+2IH7N5f3WVM7gw3CAfv7/BaSsrCe8z7BT1RI=) 2: H_2Z0rQ4lFVS_t_4vqcd9QVR6_k.roa (hash: vVgSBCNMSjCvZXvXhszjUZaYYnZLOpxOv2+H1spliCA=) 3: IxZgprQlYFPc4O_aLN9eNDjwQc4.roa (hash: px+tfL7aBBNwfCvHQ8qdV0JTnvPL+/5lwzfROahJBZI=) 4: JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa (hash: nLbNOJNWQ+vk+Lj7DDY4VcqW2h8sreZ0KTwkzvjd6H8=) 5: qkutPpnEcKBM92MkdsKCn8d9Qns.roa (hash: Hb6ZtPvMy1PQaa6eYkShP2BgH9e8SRRTRRl8SOn7e20=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: s9Gq2IuNPWaxz75F0OziZhcZUm8Jnoa0SRF9EUikYpc=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: May 15 01:42:20 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:96:95:a3:6d:0e:2a:6f:a7:5f:48:ff:53:a4:d5:2e:b5:35: 06:8f:28:b7:fb:8f:57:ef:22:d8:8b:b6:88:ba:78:61:25:86: b1:65:e8:64:63:84:56:e3:37:9e:f9:76:7e:ce:c1:59:1c:84: 51:94:02:2a:26:c7:1d:49:01:36:b1:1e:fd:2a:b4:48:d6:be: 24:99:60:64:10:60:e9:25:d1:0e:03:b0:ff:85:8e:ae:37:79: 8c:ad:e7:34:d6:6e:3f:c8:b3:e2:1d:44:04:6d:84:7a:69:89: a7:51:6f:12:9c:a7:02:3c:e1:d4:19:fc:1a:13:2b:aa:a4:72: 99:ea:56:e4:fc:82:00:14:72:4d:06:53:84:dd:bf:17:a8:3d: 9f:c6:d5:06:cf:dd:df:f0:4d:5c:82:fb:95:94:8b:c9:23:07: d3:e7:b1:d3:3f:5c:2d:d1:3d:51:0e:f2:71:7a:f8:4d:59:df: 6e:1e:d5:d2:f8:1a:49:8e:24:6f:f2:8a:30:1e:13:56:79:17: 20:83:fb:8f:ae:35:51:b9:97:63:9a:34:ba:83:62:a3:97:81: 8b:2d:8f:f2:63:f3:5e:33:4b:75:08:63:8f:02:a8:34:6e:2c: 41:13:9d:62:a3:ca:72:1a:b3:69:41:32:a5:f6:bb:48:3b:db: 7f:fc:6a:cb -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI1MDUxNTAx NDIyMFoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAjswggI3MB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDDlpWjbQ4qb6dfSP9TpNUutTUGjyi3+49X7yLYi7aIunhhJYaxZehkY4RW4zee +XZ+zsFZHIRRlAIqJscdSQE2sR79KrRI1r4kmWBkEGDpJdEOA7D/hY6uN3mMrec0 1m4/yLPiHUQEbYR6aYmnUW8SnKcCPOHUGfwaEyuqpHKZ6lbk/IIAFHJNBlOE3b8X qD2fxtUGz93f8E1cgvuVlIvJIwfT57HTP1wt0T1RDvJxevhNWd9uHtXS+BpJjiRv 8oowHhNWeRcgg/uPrjVRuZdjmjS6g2Kjl4GLLY/yY/NeM0t1CGOPAqg0bixBE51i o8pyGrNpQTKl9rtIO9t//GrL -----END CERTIFICATE-----Generated at Sun May 18 21:29:40 2025 by rpki-client