$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft File: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft (raw, json) Hash identifier: BfDRUfuVpS3xorPyorkJnpvv9U5Ol5u3moOv2Iv8IKw= Subject key identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A Certificate issuer: /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Certificate serial: 61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft Manifest number: 07ED Signing time: Sat 23 Aug 2025 23:19:10 +0000 Manifest this update: Sat 23 Aug 2025 23:19:10 +0000 Manifest next update: Sun 07 Sep 2025 23:19:10 +0000 Files and hashes: 1: 1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl (hash: dlxYhRZp4HqLy8K/mylVA1dEQK0x/KxGXja32f5eJf8=) 2: 9BN2niA51ihqVhld-znS0ef18Yg.roa (hash: ehFDNu/LDodThSr7WjopHh/cBtyfTqDDhEHgesUtRrw=) 3: AgwHkS7UnqYT34tnEJJz6ySsVh0.roa (hash: GgOeNJfrwB0Clbl70txuZCXxxNMQt0i3aFJ87GvfFNI=) 4: a_EDNZTeRPpY4YVtX5W6JULtf1M.roa (hash: U6l3w/dsr99RpBJPR0DtMvZyS/zVIbYk9oqtrrXVdbE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 19:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A Validity Not Before: Aug 15 01:39:21 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=E0F66B23437DB9F3647F233AC514E7B814D90475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:7f:5f:22:a8:cb:51:62:86:54:c3:23:46: 0c:9b:c0:e8:ed:59:5c:1d:1e:70:52:d6:a9:28:7a: 83:54:3e:4a:8e:5a:2b:96:b6:28:25:f8:e8:2f:10: 14:ef:35:f8:b8:c0:ee:73:76:ac:d0:e8:63:1b:40: 2e:3e:1d:3d:20:fe:97:0e:9e:2d:84:50:41:c5:d3: c2:6a:f0:ad:29:8e:96:ec:ab:3e:0e:0c:31:2d:b3: dc:2a:9d:64:31:7c:64:f2:f6:33:7f:c8:0c:0a:3d: bf:5d:42:fd:cf:a7:06:da:08:ca:0e:db:6b:5f:ab: af:bd:17:2a:85:b8:d0:2d:12:ae:06:cd:2c:c8:27: 65:4d:2a:5e:5a:8e:ef:44:73:cd:c8:94:c8:e6:95: 25:6e:f7:ec:44:5b:d2:a2:c1:1d:60:7e:2f:a6:dd: c9:95:96:3b:65:2c:74:01:b9:c2:96:62:36:7c:65: 52:1b:f5:21:31:ef:15:a5:fc:e2:81:2d:36:f7:0e: 76:67:eb:d6:9a:09:4f:5a:9b:b5:84:a4:f1:51:d7: d6:8d:8b:7b:a5:f3:a3:4a:51:9e:c4:a7:e6:88:4a: e2:85:1a:8e:51:98:48:2d:da:30:4e:a9:62:0c:9c: f6:39:93:8f:37:9e:43:07:bf:ee:24:df:f0:7f:86: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:F6:6B:23:43:7D:B9:F3:64:7F:23:3A:C5:14:E7:B8:14:D9:04:75 X509v3 Authority Key Identifier: keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:2b:6e:18:1b:29:46:5f:b0:8f:fb:f4:8d:2d:c3:fb:a0:d2: 86:75:ee:02:28:5e:1e:7d:83:81:64:08:9c:af:1e:34:2b:b0: 54:c8:28:47:59:8c:c6:bf:51:04:05:30:36:a0:ec:60:5e:4b: 2f:2a:40:33:93:5a:14:42:87:7f:0a:06:65:27:27:c8:9b:da: b1:f1:de:ff:46:35:b4:35:d5:53:7d:13:07:95:89:09:bb:64: ac:0d:47:88:20:5b:5e:79:7d:be:50:ae:bd:60:fa:12:0d:1f: 97:b3:62:5e:72:a0:1d:fc:23:de:37:39:36:e5:4e:15:13:56: cd:04:6c:95:18:2f:88:09:1b:41:c1:ff:35:96:ff:07:cb:82: 99:25:5a:2a:5b:a9:e9:c1:ae:9e:ce:92:21:1f:48:48:e7:51: c5:d4:96:b1:79:18:3f:39:65:70:77:d4:80:84:bf:0c:1c:25: 4e:1d:9e:5a:c3:ba:36:95:3f:68:51:79:ea:e5:21:95:ac:42: 18:d8:59:68:0a:80:fa:ad:9e:08:ae:37:50:31:b3:a4:b8:55: bb:22:18:d5:1b:bc:bb:23:90:b3:6f:59:ef:22:2e:c0:68:d6: d2:3e:f5:ab:4d:e1:b9:d0:e6:55:6a:1c:d0:3d:c2:70:91:33: 9c:1c:b2:cd -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENjkw MEYxRTMxMjZFNjA5RUY0RjFBMEZCODU1RUI0REU0RTNBMThBMB4XDTI1MDgxNTAx MzkyMVoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRTBGNjZCMjM0MzdEQjlG MzY0N0YyMzNBQzUxNEU3QjgxNEQ5MDQ3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALu2f18iqMtRYoZUwyNGDJvA6O1ZXB0ecFLWqSh6g1Q+So5aK5a2 KCX46C8QFO81+LjA7nN2rNDoYxtALj4dPSD+lw6eLYRQQcXTwmrwrSmOluyrPg4M MS2z3CqdZDF8ZPL2M3/IDAo9v11C/c+nBtoIyg7ba1+rr70XKoW40C0SrgbNLMgn ZU0qXlqO70RzzciUyOaVJW737ERb0qLBHWB+L6bdyZWWO2UsdAG5wpZiNnxlUhv1 ITHvFaX84oEtNvcOdmfr1poJT1qbtYSk8VHX1o2Le6Xzo0pRnsSn5ohK4oUajlGY SC3aME6pYgyc9jmTjzeeQwe/7iTf8H+GFGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTg9msjQ32582R/IzrFFOe4FNkEdTAfBgNVHSMEGDAWgBTWkA8eMSbmCe9PGg+4 VetN5OOhijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODk3LzFwQVBIakVtNWdudlR4b1B1RlhyVGVUam9Zby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzFwQVBIakVtNWdudlR4b1B1RlhyVGVU am9Zby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84OTcvMXBBUEhqRW01Z252VHhvUHVGWHJUZVRqb1lvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAkrbhgbKUZfsI/79I0tw/ug0oZ17gIoXh59g4FkCJyvHjQrsFTIKEdZjMa/ UQQFMDag7GBeSy8qQDOTWhRCh38KBmUnJ8ib2rHx3v9GNbQ11VN9EweViQm7ZKwN R4ggW155fb5Qrr1g+hINH5ezYl5yoB38I943OTblThUTVs0EbJUYL4gJG0HB/zWW /wfLgpklWipbqenBrp7OkiEfSEjnUcXUlrF5GD85ZXB31ICEvwwcJU4dnlrDujaV P2hReerlIZWsQhjYWWgKgPqtngiuN1Axs6S4VbsiGNUbvLsjkLNvWe8iLsBo1tI+ 9atN4bnQ5lVqHNA9wnCRM5wcss0= -----END CERTIFICATE-----Generated at Sun Aug 24 03:21:32 2025 by rpki-client