$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft File: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft (raw, json) Hash identifier: 8nzTGZgNfpTEIqBTInm1SnIDzes+SKX4UyBUjxmhe/w= Subject key identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft Manifest number: 06C2 Signing time: Sat 05 Jul 2025 06:47:10 +0000 Manifest this update: Sat 05 Jul 2025 06:47:10 +0000 Manifest next update: Sun 20 Jul 2025 06:47:10 +0000 Files and hashes: 1: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl (hash: HxfC3orE8YsY8YFCEFvalGJkbxKmz+CJrtQkH76s8Xs=) 2: 9BN2niA51ihqVhld-znS0ef18Yg.roa (hash: ehFDNu/LDodThSr7WjopHh/cBtyfTqDDhEHgesUtRrw=) 3: a_EDNZTeRPpY4YVtX5W6JULtf1M.roa (hash: U6l3w/dsr99RpBJPR0DtMvZyS/zVIbYk9oqtrrXVdbE=) 4: gXuiA1e97M2lsBDNhVxRjHkMNGw.roa (hash: 6gWRhueMxewcN2yPoPCv9AcspoNcMHHI59mUZZFxK/U=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Jun 15 01:33:11 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=E0F66B23437DB9F3647F233AC514E7B814D90475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:7f:5f:22:a8:cb:51:62:86:54:c3:23:46: 0c:9b:c0:e8:ed:59:5c:1d:1e:70:52:d6:a9:28:7a: 83:54:3e:4a:8e:5a:2b:96:b6:28:25:f8:e8:2f:10: 14:ef:35:f8:b8:c0:ee:73:76:ac:d0:e8:63:1b:40: 2e:3e:1d:3d:20:fe:97:0e:9e:2d:84:50:41:c5:d3: c2:6a:f0:ad:29:8e:96:ec:ab:3e:0e:0c:31:2d:b3: dc:2a:9d:64:31:7c:64:f2:f6:33:7f:c8:0c:0a:3d: bf:5d:42:fd:cf:a7:06:da:08:ca:0e:db:6b:5f:ab: af:bd:17:2a:85:b8:d0:2d:12:ae:06:cd:2c:c8:27: 65:4d:2a:5e:5a:8e:ef:44:73:cd:c8:94:c8:e6:95: 25:6e:f7:ec:44:5b:d2:a2:c1:1d:60:7e:2f:a6:dd: c9:95:96:3b:65:2c:74:01:b9:c2:96:62:36:7c:65: 52:1b:f5:21:31:ef:15:a5:fc:e2:81:2d:36:f7:0e: 76:67:eb:d6:9a:09:4f:5a:9b:b5:84:a4:f1:51:d7: d6:8d:8b:7b:a5:f3:a3:4a:51:9e:c4:a7:e6:88:4a: e2:85:1a:8e:51:98:48:2d:da:30:4e:a9:62:0c:9c: f6:39:93:8f:37:9e:43:07:bf:ee:24:df:f0:7f:86: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:99:fc:15:f0:51:c9:df:ac:bb:e1:fc:2a:af:dd:53:fd:d6: f8:a3:e7:c0:3a:fb:67:99:6b:46:be:c8:aa:1a:2b:1d:cd:fa: 0d:ca:44:10:87:d1:ba:1e:6a:a4:04:50:73:dd:ef:ed:bc:59: b3:96:f9:5a:35:cf:6c:84:f0:4f:e0:fb:f2:03:3f:ff:6a:01: 19:d7:37:41:9f:12:54:14:7c:1a:51:5a:a8:e9:b4:10:07:10: 9d:40:75:82:7c:df:b6:53:31:54:60:0f:a8:79:f0:61:08:7f: 39:4c:0d:37:2d:2b:64:a8:65:14:6e:20:38:6f:a7:e8:ad:e3: f6:0f:e0:9f:f1:90:49:be:2b:ec:79:2e:44:6f:d4:19:d0:b6: ef:42:0b:22:16:72:b4:01:11:cd:bc:9b:78:63:2c:45:90:cb: 93:12:13:ce:06:e8:56:5f:eb:34:0e:51:e5:6b:19:69:1d:22: 23:aa:6a:f7:83:95:cc:03:b9:f8:de:f4:e4:fb:84:2e:50:ec: 61:3d:b2:97:f2:fc:28:63:86:b2:f1:2a:f1:fd:8e:e3:10:f4: cc:df:28:f2:41:7d:ed:5f:ee:8d:ec:71:11:ea:ad:05:41:ff: fa:c4:cc:77:63:42:33:18:4b:84:76:7f:96:4a:99:1f:04:e9: 90:b4:c2:27 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI1MDYxNTAx MzMxMVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoRTBGNjZCMjM0MzdEQjlG MzY0N0YyMzNBQzUxNEU3QjgxNEQ5MDQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu2f18iqMtRYoZUwyNGDJvA6O1ZXB0ecFLWqSh6g1Q+So5aK5a2 KCX46C8QFO81+LjA7nN2rNDoYxtALj4dPSD+lw6eLYRQQcXTwmrwrSmOluyrPg4M MS2z3CqdZDF8ZPL2M3/IDAo9v11C/c+nBtoIyg7ba1+rr70XKoW40C0SrgbNLMgn ZU0qXlqO70RzzciUyOaVJW737ERb0qLBHWB+L6bdyZWWO2UsdAG5wpZiNnxlUhv1 ITHvFaX84oEtNvcOdmfr1poJT1qbtYSk8VHX1o2Le6Xzo0pRnsSn5ohK4oUajlGY SC3aME6pYgyc9jmTjzeeQwe/7iTf8H+GFGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTg9msjQ32582R/IzrFFOe4FNkEdTAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvMXBBUEhqRW01Z252VHhvUHVGWHJUZVRqb1lvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJmZ/BXwUcnfrLvh/Cqv3VP91vij58A6+2eZa0a+yKoaKx3N+g3KRBCH0boe aqQEUHPd7+28WbOW+Vo1z2yE8E/g+/IDP/9qARnXN0GfElQUfBpRWqjptBAHEJ1A dYJ837ZTMVRgD6h58GEIfzlMDTctK2SoZRRuIDhvp+it4/YP4J/xkEm+K+x5LkRv 1BnQtu9CCyIWcrQBEc28m3hjLEWQy5MSE84G6FZf6zQOUeVrGWkdIiOqaveDlcwD ufje9OT7hC5Q7GE9spfy/ChjhrLxKvH9juMQ9MzfKPJBfe1f7o3scRHqrQVB//rE zHdjQjMYS4R2f5ZKmR8E6ZC0wic= -----END CERTIFICATE-----Generated at Sat Jul 5 08:40:56 2025 by rpki-client