$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.mft File: SGfkCiPQl-oAJfbd6wYve1PVGyc.mft (raw, json) Hash identifier: +g/Rj4pxqIpbAlA7aNmzc6CjTeVt+AsaW9o7G7lWz04= Subject key identifier: 35:2B:82:8E:3F:0D:0D:33:69:4F:56:A1:FB:52:71:AE:6F:80:37:64 Authority key identifier: 48:67:E4:0A:23:D0:97:EA:00:25:F6:DD:EB:06:2F:7B:53:D5:1B:27 Certificate issuer: /CN=4867E40A23D097EA0025F6DDEB062F7B53D51B27 Certificate serial: 08 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.mft Manifest number: 0292 Signing time: Mon 20 Oct 2025 11:15:00 +0000 Manifest this update: Mon 20 Oct 2025 11:15:00 +0000 Manifest next update: Tue 04 Nov 2025 11:15:00 +0000 Files and hashes: 1: SGfkCiPQl-oAJfbd6wYve1PVGyc.crl (hash: S3rCCKx9gTFQfAi8TCErPU+IXQzx2lkxfAAaGp+dEUw=) 2: V-6ji3ixKnkUXK7m3pFoJf6aY2E.roa (hash: HkcqUEAdO2FRPibChJU6q3WBDIdXi/1z23jzO/vjt0Q=) 3: nBeys0Kf1fTgJu0ZAo6zHO1vNpI.roa (hash: HMwiA1AROARXN7YPnoLzg1G9iZgcE0pvcpf8n4kcETM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 12:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4867E40A23D097EA0025F6DDEB062F7B53D51B27 Validity Not Before: Oct 15 01:33:08 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=352B828E3F0D0D33694F56A1FB5271AE6F803764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:c4:41:ea:5c:6e:5f:82:f2:2b:c3:2f:9d: c2:ba:bb:e7:6e:db:25:69:18:6b:a9:2c:60:3f:d1: fa:22:67:9d:91:fd:e7:11:56:d3:96:65:9b:64:80: dc:10:e4:0d:b6:b9:c0:a3:40:62:c2:61:c4:c2:fb: 8f:f8:ef:38:6f:62:77:fe:f3:4b:50:6c:45:54:08: 89:04:5a:2f:92:52:91:26:7d:2f:8a:dd:3a:59:d0: 62:b7:e6:2d:cb:06:aa:c2:19:f1:af:ac:7e:f8:a9: 4f:7e:d9:cc:09:44:1d:a4:8d:02:dc:21:a1:1d:48: 6e:74:09:82:4e:5e:20:0d:6f:0b:b7:08:cc:0c:43: 46:31:c8:f6:a6:16:69:88:5e:86:f5:83:7b:91:3e: b9:2d:64:82:61:7b:d8:82:57:37:42:83:ed:7d:0a: 5d:4a:2b:ec:5c:87:2b:78:6f:69:3f:48:4f:b0:f7: ab:9a:04:45:92:9c:5a:84:cd:50:89:00:45:34:29: 46:84:2d:7b:2f:c7:19:e5:9e:7c:7f:2f:7f:39:25: 38:f9:51:d1:0b:30:c6:53:4f:a5:42:72:50:34:18: 92:d4:dc:bb:9f:32:39:49:a0:91:0b:e7:d7:74:d8: fc:ed:2b:11:61:71:03:7b:22:4a:0a:97:d7:46:55: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:82:8E:3F:0D:0D:33:69:4F:56:A1:FB:52:71:AE:6F:80:37:64 X509v3 Authority Key Identifier: keyid:48:67:E4:0A:23:D0:97:EA:00:25:F6:DD:EB:06:2F:7B:53:D5:1B:27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SGfkCiPQl-oAJfbd6wYve1PVGyc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4098/SGfkCiPQl-oAJfbd6wYve1PVGyc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:34:eb:7d:f9:87:f3:c5:05:d8:42:cf:8e:04:55:52:78:d0: d4:08:b4:76:ad:e4:2c:74:90:93:4f:ec:3b:ef:07:70:11:aa: 88:78:47:d1:4b:21:a1:a6:90:e5:cb:0a:db:b9:d5:12:b4:b1: d6:5f:55:a2:e5:5a:e9:ec:26:b0:97:2c:b0:2a:55:ba:de:8d: bc:50:a5:f0:f4:3b:98:0a:82:4e:ef:e6:4b:b3:ec:70:5b:fb: 87:46:5d:b7:11:f6:37:f2:97:bc:a8:4e:5e:86:7c:c7:50:46: e8:33:1f:a9:c6:8d:e1:e8:71:a0:b3:81:20:2b:0a:52:d7:b2: e3:5e:28:30:ec:d1:26:6a:08:9b:60:83:ad:6b:f7:c2:da:ce: 04:3e:f6:27:fa:47:0c:89:fd:8d:e3:e2:25:09:e3:a4:4d:4f: 8b:c0:71:22:82:7c:86:d8:52:76:ee:60:6b:b8:9b:12:5b:b9: fd:00:c1:13:7c:0f:b1:8c:8c:2b:59:66:87:df:c8:ed:a3:cb: 52:eb:8b:73:d8:00:e5:2e:a5:49:a5:45:1c:75:6c:63:79:23: df:ec:47:83:18:12:e7:36:fc:f1:a4:f1:ab:3a:e7:7b:b0:3b: 0a:78:2e:c6:73:a6:1b:63:27:6e:40:56:c6:1a:b4:a3:b7:ca: 5b:3e:6d:d0 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0ODY3 RTQwQTIzRDA5N0VBMDAyNUY2RERFQjA2MkY3QjUzRDUxQjI3MB4XDTI1MTAxNTAx MzMwOFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMzUyQjgyOEUzRjBEMEQz MzY5NEY1NkExRkI1MjcxQUU2RjgwMzc2NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAObHxEHqXG5fgvIrwy+dwrq7527bJWkYa6ksYD/R+iJnnZH95xFW 05Zlm2SA3BDkDba5wKNAYsJhxML7j/jvOG9id/7zS1BsRVQIiQRaL5JSkSZ9L4rd OlnQYrfmLcsGqsIZ8a+sfvipT37ZzAlEHaSNAtwhoR1IbnQJgk5eIA1vC7cIzAxD RjHI9qYWaYhehvWDe5E+uS1kgmF72IJXN0KD7X0KXUor7FyHK3hvaT9IT7D3q5oE RZKcWoTNUIkARTQpRoQtey/HGeWefH8vfzklOPlR0QswxlNPpUJyUDQYktTcu58y OUmgkQvn13TY/O0rEWFxA3siSgqX10ZVQjMCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBQ1K4KOPw0NM2lPVqH7UnGub4A3ZDAfBgNVHSMEGDAWgBRIZ+QKI9CX6gAl9t3r Bi97U9UbJzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDA5OC9TR2ZrQ2lQUWwtb0FKZmJkNndZdmUxUFZHeWMuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9TR2ZrQ2lQUWwtb0FKZmJkNndZdmUx UFZHeWMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNDA5OC9TR2ZrQ2lQUWwtb0FKZmJkNndZdmUxUFZHeWMubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEADTTrffmH88UF2ELPjgRVUnjQ1Ai0dq3kLHSQk0/sO+8HcBGqiHhH0Ush oaaQ5csK27nVErSx1l9VouVa6ewmsJcssCpVut6NvFCl8PQ7mAqCTu/mS7PscFv7 h0ZdtxH2N/KXvKhOXoZ8x1BG6DMfqcaN4ehxoLOBICsKUtey414oMOzRJmoIm2CD rWv3wtrOBD72J/pHDIn9jePiJQnjpE1Pi8BxIoJ8hthSdu5ga7ibElu5/QDBE3wP sYyMK1lmh9/I7aPLUuuLc9gA5S6lSaVFHHVsY3kj3+xHgxgS5zb88aTxqzrne7A7 CnguxnOmG2MnbkBWxhq0o7fKWz5t0A== -----END CERTIFICATE-----Generated at Mon Oct 20 13:42:49 2025 by rpki-client