$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft File: zgXnGt3sD442G7VasQP1PThWxgo.mft (raw, json) Hash identifier: kzB+wMmj7ORm+sDhwWQ7bTZaWOjRKd0gDPRq2UYqxSs= Subject key identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A Certificate issuer: /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Certificate serial: 21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft Manifest number: 05BF Signing time: Fri 04 Jul 2025 11:27:13 +0000 Manifest this update: Fri 04 Jul 2025 11:27:13 +0000 Manifest next update: Sat 19 Jul 2025 11:27:13 +0000 Files and hashes: 1: -9JaxDwswvAQjLzAyiNRz8teJUk.roa (hash: dD0c/M+2IH7N5f3WVM7gw3CAfv7/BaSsrCe8z7BT1RI=) 2: H_2Z0rQ4lFVS_t_4vqcd9QVR6_k.roa (hash: vVgSBCNMSjCvZXvXhszjUZaYYnZLOpxOv2+H1spliCA=) 3: IxZgprQlYFPc4O_aLN9eNDjwQc4.roa (hash: px+tfL7aBBNwfCvHQ8qdV0JTnvPL+/5lwzfROahJBZI=) 4: JPJ1dNzJ6LMzJflQvKxCMd_Sm-I.roa (hash: nLbNOJNWQ+vk+Lj7DDY4VcqW2h8sreZ0KTwkzvjd6H8=) 5: qkutPpnEcKBM92MkdsKCn8d9Qns.roa (hash: Hb6ZtPvMy1PQaa6eYkShP2BgH9e8SRRTRRl8SOn7e20=) 6: zgXnGt3sD442G7VasQP1PThWxgo.crl (hash: 2xL5WY1dB/pAKWGoGekThq0qiDkFUY3edz6JBAHZg70=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A Validity Not Before: Jun 15 01:42:26 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=BB89C02D63E51EAD6174D36108C1A92938DB1631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:8b:f6:1d:a0:50:6d:4a:b7:b8:f4:05:42: ab:f1:61:76:e7:81:24:bd:b0:b1:f8:33:b7:70:f5: b2:34:10:0f:c1:39:c1:42:01:16:cc:89:a7:ae:ae: b2:a0:6c:0e:71:6a:ec:20:2c:8d:e8:a0:f6:96:5d: 17:64:c5:e6:b0:03:03:cf:cb:4c:ca:3d:a8:c8:23: ba:83:5c:37:8a:39:6a:45:54:66:dc:c8:49:96:72: f0:7f:aa:18:26:18:16:eb:a7:c9:97:ab:e2:63:24: be:85:82:df:c6:d4:2e:83:53:2f:d7:86:d5:23:31: 76:8c:d7:04:8e:81:12:65:4d:3e:15:e5:4d:03:3f: 9c:0b:0c:c8:4a:9d:45:66:42:10:94:5a:f3:77:5a: 3c:a9:8e:f3:fa:59:a8:a4:81:6d:b5:55:23:87:28: dd:29:6b:1c:1e:25:ea:bb:61:eb:d7:0f:95:e4:81: e4:03:2c:f8:d1:70:2f:54:8b:e9:c3:6b:d8:30:b2: 8b:4d:02:e9:ca:e0:53:7f:31:43:12:f1:2c:9e:81: ba:80:3a:13:59:1f:e9:98:9a:b0:56:48:1a:af:70: 29:5f:3e:ae:91:73:98:40:c0:5a:8a:d7:3f:db:52: 00:44:96:fd:bd:d3:c1:6b:df:1c:11:e2:2f:57:68: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:C0:2D:63:E5:1E:AD:61:74:D3:61:08:C1:A9:29:38:DB:16:31 X509v3 Authority Key Identifier: keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:c1:31:6a:33:8a:44:cb:80:77:05:e1:51:7c:e2:16:d9:71: bd:3b:b6:65:6f:85:3d:b9:bc:3c:10:e3:c9:4e:ec:61:29:7c: 60:24:02:a1:13:8f:8c:a6:46:5d:e5:88:08:8c:66:f6:79:4e: 69:3c:18:e3:f6:7a:4e:27:6b:ac:02:49:da:9e:34:ad:5d:c2: 49:1a:c0:5f:50:fb:ad:a9:95:09:52:f5:11:f0:c2:fd:90:2b: 06:a6:79:4a:1e:d7:3b:82:d7:9d:67:6d:27:e8:37:94:58:1b: 64:ea:e2:cb:8f:23:04:67:74:26:7a:cd:07:bf:14:a8:b9:50: fc:0c:ea:50:92:db:7a:90:33:70:30:4a:70:79:ee:be:00:c4: 93:f8:ce:b5:7d:ee:14:04:1e:c6:6c:6d:64:7d:d2:fd:d7:fe: 67:b7:61:83:f9:7c:2e:7f:34:bd:e7:2e:99:66:31:b6:a7:ce: 23:cb:37:7c:d5:fa:0a:e2:7d:f2:26:1d:2f:c6:40:5a:8c:5d: 45:45:d3:04:45:ba:14:79:5c:1b:2d:f1:cf:0e:fa:a5:31:10: ff:62:07:c6:25:01:9f:69:05:35:f3:93:f3:62:a7:6d:95:51: ee:18:48:dc:45:fb:39:ed:a6:28:4d:ee:a8:5a:e5:c1:39:ab: 3a:da:8b:af -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRTA1 RTcxQURERUMwRjhFMzYxQkI1NUFCMTAzRjUzRDM4NTZDNjBBMB4XDTI1MDYxNTAx NDIyNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQkI4OUMwMkQ2M0U1MUVB RDYxNzREMzYxMDhDMUE5MjkzOERCMTYzMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKxYi/YdoFBtSre49AVCq/FhdueBJL2wsfgzt3D1sjQQD8E5wUIB FsyJp66usqBsDnFq7CAsjeig9pZdF2TF5rADA8/LTMo9qMgjuoNcN4o5akVUZtzI SZZy8H+qGCYYFuunyZer4mMkvoWC38bULoNTL9eG1SMxdozXBI6BEmVNPhXlTQM/ nAsMyEqdRWZCEJRa83daPKmO8/pZqKSBbbVVI4co3SlrHB4l6rth69cPleSB5AMs +NFwL1SL6cNr2DCyi00C6crgU38xQxLxLJ6BuoA6E1kf6ZiasFZIGq9wKV8+rpFz mEDAWorXP9tSAESW/b3TwWvfHBHiL1doOG0CAwEAAaOCAjswggI3MB0GA1UdDgQW BBS7icAtY+UerWF002EIwakpONsWMTAfBgNVHSMEGDAWgBTOBeca3ewPjjYbtVqx A/U9OFbGCjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzMvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhXeGdvLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvemdYbkd0M3NENDQyRzdWYXNRUDFQVGhX eGdvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzMzL3pnWG5HdDNzRDQ0Mkc3VmFzUVAxUFRoV3hnby5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBpwTFqM4pEy4B3BeFRfOIW2XG9O7Zlb4U9ubw8EOPJTuxhKXxgJAKhE4+MpkZd 5YgIjGb2eU5pPBjj9npOJ2usAknanjStXcJJGsBfUPutqZUJUvUR8ML9kCsGpnlK Htc7gtedZ20n6DeUWBtk6uLLjyMEZ3Qmes0HvxSouVD8DOpQktt6kDNwMEpwee6+ AMST+M61fe4UBB7GbG1kfdL91/5nt2GD+XwufzS95y6ZZjG2p84jyzd81foK4n3y Jh0vxkBajF1FRdMERboUeVwbLfHPDvqlMRD/YgfGJQGfaQU185PzYqdtlVHuGEjc Rfs57aYoTe6oWuXBOas62ouv -----END CERTIFICATE-----Generated at Fri Jul 4 16:19:43 2025 by rpki-client