$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft File: VrJOODhFr-fapjHAHYD7UWw0i7A.mft (raw, json) Hash identifier: Ss3FpZYujY/PM8WXG9ImZ6M1BZxYzZcT2lk8zamHRsc= Subject key identifier: E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4 Authority key identifier: 56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0 Certificate issuer: /CN=56B24E383845AFE7DAA631C01D80FB516C348BB0 Certificate serial: 05 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft Manifest number: 0108 Signing time: Sun 18 May 2025 02:15:55 +0000 Manifest this update: Sun 18 May 2025 02:15:55 +0000 Manifest next update: Mon 02 Jun 2025 02:15:55 +0000 Files and hashes: 1: K03-WjLYOd1HsPB7C9phAG2f_Is.roa (hash: AS1r+GhsGIxu7cJEOtlfjdwuvT/ekIwzgGxIvuZ9x/0=) 2: TpzjShFDkh5n2KnbnTSM1bc4-78.roa (hash: 9lgomC8CNJnaCGR3udsJYmIRXb/RDExg+GTPgNguKDo=) 3: VrJOODhFr-fapjHAHYD7UWw0i7A.crl (hash: W+HZV82Z3uafR5TaM/XepEKOTvXLBncNP6WlvPVjt74=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56B24E383845AFE7DAA631C01D80FB516C348BB0 Validity Not Before: May 15 01:30:20 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=E2259B1529EE6A496D36569FFBCA2ECD646F56C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:51:4d:65:7b:41:bc:d8:34:6d:80:33:2b:d7: ee:38:79:39:d0:82:10:6a:1b:e2:ee:a8:40:b4:5c: 44:69:0a:e6:4f:20:a9:43:33:fc:f8:ec:38:57:5f: 70:fd:41:9d:78:a7:44:45:69:22:9b:6b:bb:2e:d9: 86:3c:f2:f0:20:cf:03:7e:a3:c5:1c:19:b0:51:d3: 7c:20:7b:a6:5f:15:e9:03:4e:47:d2:cf:a6:32:3c: e2:f8:f6:f3:14:67:d1:ce:f5:b9:51:ad:54:a8:53: 10:53:e3:7b:12:b1:20:87:33:eb:e0:58:45:a7:1e: 55:10:40:f2:43:a6:a8:a6:35:7d:2e:a6:9f:c2:cf: da:b5:46:2c:98:6d:9f:77:58:ac:a4:d6:e8:d6:b3: 74:8e:c9:6f:94:42:ce:3f:af:d8:ed:39:39:fe:24: e1:1a:6c:7a:7a:94:4a:48:79:a6:fe:b7:c9:23:fc: 3a:c4:40:14:5e:b3:af:e5:43:29:d4:c1:d9:47:22: e9:8e:de:90:a7:77:58:7f:1d:db:1f:30:ba:84:2f: f7:4f:21:65:10:7d:a2:ed:d7:20:a3:cd:ac:c0:90: c1:fa:29:dd:3e:24:c0:a8:d9:74:40:26:ee:a6:34: f0:06:36:91:18:61:14:6a:80:48:b5:7c:8c:c0:45: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:25:9B:15:29:EE:6A:49:6D:36:56:9F:FB:CA:2E:CD:64:6F:56:C4 X509v3 Authority Key Identifier: keyid:56:B2:4E:38:38:45:AF:E7:DA:A6:31:C0:1D:80:FB:51:6C:34:8B:B0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VrJOODhFr-fapjHAHYD7UWw0i7A.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/433/VrJOODhFr-fapjHAHYD7UWw0i7A.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:99:a7:d9:ac:23:13:15:c0:75:c4:32:5f:aa:d4:ba:2c:94: d8:a0:2c:54:9d:1d:b9:a3:3e:f8:ba:e3:00:6f:a7:66:f3:89: 23:69:1d:97:7b:c0:28:a8:1d:46:99:aa:69:e1:13:99:06:76: 7e:ce:c4:a0:97:db:d5:24:1a:9f:6d:88:a3:c8:41:cc:e7:1c: ff:c8:74:47:cc:a4:e6:0b:5b:33:78:6c:a4:15:70:11:80:15: ad:6b:9e:ef:d2:24:7d:46:ce:2e:c9:ed:b0:c7:6e:4e:63:2b: c9:e6:e5:40:8b:4d:72:56:49:47:de:57:be:92:7c:8e:37:41: a0:76:a2:75:1e:c5:ae:3e:7a:ed:fd:61:31:a7:e3:f4:64:2c: 14:c4:01:f2:60:9d:94:48:d7:63:78:5f:21:bb:b9:28:65:98: 35:f7:59:0e:e2:d9:a6:4b:fd:d7:78:2e:35:b8:c9:77:06:fb: 7f:14:70:52:c0:59:c9:14:d2:55:5d:0e:26:f9:9b:be:9c:39: 78:ba:ae:de:5c:cf:6c:aa:e9:d3:02:96:ee:8c:33:40:30:79: 11:58:b0:06:d5:8d:5e:54:c3:75:bf:9f:60:ea:4b:5d:ce:6a: 10:73:74:95:21:8b:9d:22:c2:bc:57:31:27:b0:ee:9b:88:b9: 97:a5:e1:a8 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NkIy NEUzODM4NDVBRkU3REFBNjMxQzAxRDgwRkI1MTZDMzQ4QkIwMB4XDTI1MDUxNTAx MzAyMFoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRTIyNTlCMTUyOUVFNkE0 OTZEMzY1NjlGRkJDQTJFQ0Q2NDZGNTZDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMZRTWV7QbzYNG2AMyvX7jh5OdCCEGob4u6oQLRcRGkK5k8gqUMz /PjsOFdfcP1BnXinREVpIptruy7Zhjzy8CDPA36jxRwZsFHTfCB7pl8V6QNOR9LP pjI84vj28xRn0c71uVGtVKhTEFPjexKxIIcz6+BYRaceVRBA8kOmqKY1fS6mn8LP 2rVGLJhtn3dYrKTW6NazdI7Jb5RCzj+v2O05Of4k4RpsenqUSkh5pv63ySP8OsRA FF6zr+VDKdTB2Uci6Y7ekKd3WH8d2x8wuoQv908hZRB9ou3XIKPNrMCQwfop3T4k wKjZdEAm7qY08AY2kRhhFGqASLV8jMBFFRcCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTiJZsVKe5qSW02Vp/7yi7NZG9WxDAfBgNVHSMEGDAWgBRWsk44OEWv59qmMcAd gPtRbDSLsDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDMzL1ZySk9PRGhGci1mYXBqSEFIWUQ3VVd3MGk3QS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZySk9PRGhGci1mYXBqSEFIWUQ3VVd3 MGk3QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80MzMvVnJKT09EaEZyLWZhcGpIQUhZRDdVV3cwaTdBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAGWZp9msIxMVwHXEMl+q1LoslNigLFSdHbmjPvi64wBvp2bziSNpHZd7wCio HUaZqmnhE5kGdn7OxKCX29UkGp9tiKPIQcznHP/IdEfMpOYLWzN4bKQVcBGAFa1r nu/SJH1Gzi7J7bDHbk5jK8nm5UCLTXJWSUfeV76SfI43QaB2onUexa4+eu39YTGn 4/RkLBTEAfJgnZRI12N4XyG7uShlmDX3WQ7i2aZL/dd4LjW4yXcG+38UcFLAWckU 0lVdDib5m76cOXi6rt5cz2yq6dMClu6MM0AweRFYsAbVjV5Uw3W/n2DqS13OahBz dJUhi50iwrxXMSew7puIuZel4ag= -----END CERTIFICATE-----Generated at Sun May 18 22:06:40 2025 by rpki-client