$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft File: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft (raw, json) Hash identifier: NvDmNIod2rPCkZjfhkRtOG+pUmrqzgkXHjj6tUtXCo4= Subject key identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 59 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft Manifest number: 05A6 Signing time: Sun 18 May 2025 22:14:51 +0000 Manifest this update: Sun 18 May 2025 22:14:51 +0000 Manifest next update: Mon 02 Jun 2025 22:14:51 +0000 Files and hashes: 1: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl (hash: xS8a+BVOMbpyNaHWV2r1aAU1dnqCfbv2gIZdZOTi8B8=) 2: a_EDNZTeRPpY4YVtX5W6JULtf1M.roa (hash: U6l3w/dsr99RpBJPR0DtMvZyS/zVIbYk9oqtrrXVdbE=) 3: gXuiA1e97M2lsBDNhVxRjHkMNGw.roa (hash: 6gWRhueMxewcN2yPoPCv9AcspoNcMHHI59mUZZFxK/U=) 4: m1D65ylCQgyFrNpcbnF_SQOdO_M.roa (hash: +0S78jw+xGyXF7P2cty9ByEptHhN8wx6zagrobkfPBg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 18:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: May 15 01:32:49 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=E0F66B23437DB9F3647F233AC514E7B814D90475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:7f:5f:22:a8:cb:51:62:86:54:c3:23:46: 0c:9b:c0:e8:ed:59:5c:1d:1e:70:52:d6:a9:28:7a: 83:54:3e:4a:8e:5a:2b:96:b6:28:25:f8:e8:2f:10: 14:ef:35:f8:b8:c0:ee:73:76:ac:d0:e8:63:1b:40: 2e:3e:1d:3d:20:fe:97:0e:9e:2d:84:50:41:c5:d3: c2:6a:f0:ad:29:8e:96:ec:ab:3e:0e:0c:31:2d:b3: dc:2a:9d:64:31:7c:64:f2:f6:33:7f:c8:0c:0a:3d: bf:5d:42:fd:cf:a7:06:da:08:ca:0e:db:6b:5f:ab: af:bd:17:2a:85:b8:d0:2d:12:ae:06:cd:2c:c8:27: 65:4d:2a:5e:5a:8e:ef:44:73:cd:c8:94:c8:e6:95: 25:6e:f7:ec:44:5b:d2:a2:c1:1d:60:7e:2f:a6:dd: c9:95:96:3b:65:2c:74:01:b9:c2:96:62:36:7c:65: 52:1b:f5:21:31:ef:15:a5:fc:e2:81:2d:36:f7:0e: 76:67:eb:d6:9a:09:4f:5a:9b:b5:84:a4:f1:51:d7: d6:8d:8b:7b:a5:f3:a3:4a:51:9e:c4:a7:e6:88:4a: e2:85:1a:8e:51:98:48:2d:da:30:4e:a9:62:0c:9c: f6:39:93:8f:37:9e:43:07:bf:ee:24:df:f0:7f:86: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:09:44:0a:45:71:c0:59:c8:de:14:83:d1:b6:a0:02:d1:db: 28:ec:3d:8f:c0:27:05:c2:3d:72:87:f3:59:64:ce:5e:53:74: 1a:8f:4d:37:a1:68:cf:e4:aa:c1:04:4c:f3:05:7f:e7:c5:ae: 68:e8:2b:7c:4f:d6:0e:6c:37:4f:74:5a:b7:9f:a6:84:7d:a7: 80:67:ab:3a:a1:57:da:c9:4c:68:b5:33:cb:3a:0b:c6:b4:35: 91:48:7b:8a:f4:b1:b5:1a:e8:eb:78:df:3e:3e:8f:e5:a5:61: 4f:0b:6c:5b:a4:33:b5:0f:af:ca:57:a6:19:3d:dc:50:c0:56: 8b:ee:d8:3b:cd:86:80:91:e8:64:26:2a:de:69:70:36:86:f8: 89:1c:05:33:7c:4f:78:9a:1f:d8:c5:54:44:07:47:9b:5e:f5: e2:7b:ff:d6:c2:50:99:d3:a8:18:f7:a5:63:ca:07:74:ac:17: 65:0e:12:e0:ce:1c:e5:98:2c:6d:07:60:0a:37:61:94:21:a1: 3f:6f:ec:e9:11:35:1a:50:f1:2a:44:88:f8:34:6c:df:71:23: e3:ce:db:e3:b6:31:8d:7b:af:1a:5a:14:6c:1c:36:84:63:a3: 42:72:d6:89:77:94:ed:c2:e0:02:d7:ba:85:c0:cf:3e:d1:5b: 43:3f:88:7d -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI1MDUxNTAx MzI0OVoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRTBGNjZCMjM0MzdEQjlG MzY0N0YyMzNBQzUxNEU3QjgxNEQ5MDQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu2f18iqMtRYoZUwyNGDJvA6O1ZXB0ecFLWqSh6g1Q+So5aK5a2 KCX46C8QFO81+LjA7nN2rNDoYxtALj4dPSD+lw6eLYRQQcXTwmrwrSmOluyrPg4M MS2z3CqdZDF8ZPL2M3/IDAo9v11C/c+nBtoIyg7ba1+rr70XKoW40C0SrgbNLMgn ZU0qXlqO70RzzciUyOaVJW737ERb0qLBHWB+L6bdyZWWO2UsdAG5wpZiNnxlUhv1 ITHvFaX84oEtNvcOdmfr1poJT1qbtYSk8VHX1o2Le6Xzo0pRnsSn5ohK4oUajlGY SC3aME6pYgyc9jmTjzeeQwe/7iTf8H+GFGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTg9msjQ32582R/IzrFFOe4FNkEdTAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvMXBBUEhqRW01Z252VHhvUHVGWHJUZVRqb1lvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIMJRApFccBZyN4Ug9G2oALR2yjsPY/AJwXCPXKH81lkzl5TdBqPTTehaM/k qsEETPMFf+fFrmjoK3xP1g5sN090WrefpoR9p4BnqzqhV9rJTGi1M8s6C8a0NZFI e4r0sbUa6Ot43z4+j+WlYU8LbFukM7UPr8pXphk93FDAVovu2DvNhoCR6GQmKt5p cDaG+IkcBTN8T3iaH9jFVEQHR5te9eJ7/9bCUJnTqBj3pWPKB3SsF2UOEuDOHOWY LG0HYAo3YZQhoT9v7OkRNRpQ8SpEiPg0bN9xI+PO2+O2MY17rxpaFGwcNoRjo0Jy 1ol3lO3C4ALXuoXAzz7RW0M/iH0= -----END CERTIFICATE-----Generated at Mon May 19 01:32:27 2025 by rpki-client