$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft File: lMLwvhgAiadZPZ7TfQToUu1aJZo.mft (raw, json) Hash identifier: TcE2pi9XyjvvNS7as3wDRtno/5vfcukjQTIJ204ChJ8= Subject key identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Certificate serial: 12 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft Manifest number: 0521 Signing time: Sat 23 Aug 2025 07:17:02 +0000 Manifest this update: Sat 23 Aug 2025 07:17:02 +0000 Manifest next update: Sun 07 Sep 2025 07:17:02 +0000 Files and hashes: 1: 8xJpBtOOkh5hRQG2vQ9llzBm7M0.roa (hash: eiGvYxvhOEIe0iMPRHFbAvqkQ255a/PFuW4IkyFfJHM=) 2: JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa (hash: TwwjEsfC9xaO3foZCHM/bfklCy5s+OGJTBOGEvgBTNo=) 3: SRYpotz2RoBeAUwOUBG1vWsb3Io.roa (hash: QZivSbgtAIr6gMj7ICdN/7zGxY9ZsvF6eQziJFvIxUg=) 4: lMLwvhgAiadZPZ7TfQToUu1aJZo.crl (hash: 8twR3axEvjV43gxqEkr1Vw8XoXBu2thVVatu0eH9B74=) 5: r11895MVlJGIUtB6fIeoBpJ0jJU.roa (hash: oBN6xOg8huVoSkcun7ZuxmXYrFcL4ObiDTxI4YwsPvo=) 6: re1T1gWRqXqvmt4z7Eaq_m5S-Cc.roa (hash: Hj9sHsHxQhDpfCbi24l4bqoM++fO+wHCrJL0m0eR328=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:41:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Validity Not Before: Aug 15 01:31:50 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=FB3EF1E1239D35C989C737983D97AE74695333EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:ee:a6:91:a4:bc:95:20:f3:44:49:82:58: d3:2b:a2:3c:84:de:a2:34:f4:8f:30:d3:55:ae:1f: 41:86:ab:d2:55:cb:ea:08:cd:e2:2c:8b:ab:72:29: 13:d0:b3:b8:3f:b3:50:93:b7:6e:d6:db:19:68:f7: 2e:be:88:dc:c7:89:5d:07:df:3f:6d:9b:0b:c0:1a: ce:85:04:0a:f8:83:4c:41:70:a9:75:4f:ab:f3:75: 47:e3:f8:57:ea:ff:25:12:04:75:c6:f3:86:fd:f3: 08:17:2e:38:21:9f:f3:e4:aa:81:e5:d7:51:3d:42: 85:31:17:b8:ad:0e:36:b7:d4:06:fb:95:2e:ec:84: 48:87:5e:1b:56:f3:9f:34:f1:5f:dd:e2:c6:39:3c: dc:9c:3d:1f:07:cb:67:b1:71:1b:43:f4:fc:45:f9: de:d1:e4:97:82:42:d5:a4:4f:d0:a6:af:61:a9:a8: 93:29:63:d0:a7:bd:e5:d5:2d:ce:e0:b1:68:5d:46: 17:eb:31:ed:b8:bc:cf:cd:ea:02:8b:74:45:65:50: 0b:45:1e:57:60:c0:40:47:c5:96:7e:e9:27:7d:11: 61:d7:a2:87:51:21:7f:86:e1:54:8f:1d:9f:dc:be: 28:2f:40:97:6e:28:21:73:c0:50:5d:0c:70:27:a1: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE X509v3 Authority Key Identifier: keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:64:00:0f:fd:97:7e:70:53:d3:2e:e5:48:1e:6d:b0:8d:1d: ef:a9:66:f1:df:1a:fb:15:0a:51:64:63:8b:8a:03:5d:31:ff: 82:62:54:c7:aa:9f:d4:4e:f5:1a:50:1b:4c:fb:0a:42:3b:6a: f0:5e:31:f3:b1:75:de:44:68:34:ea:a5:f1:9e:87:82:97:ea: ae:24:ba:ba:b6:fd:2f:2e:a1:c6:20:bb:bf:8e:a0:70:21:90: f5:7c:69:06:6d:51:b8:e7:e0:d9:34:55:22:dc:b3:4e:e1:e2: 21:4e:d8:f6:d3:5d:c9:cb:01:09:c0:8c:96:3f:79:ed:65:7f: 44:bf:b1:98:9a:05:2d:be:f7:e6:74:cb:20:ed:36:9c:0f:ea: 78:af:1a:0b:7c:1f:2f:4a:8b:44:1f:35:b1:54:4a:94:4a:50: b1:98:0d:c0:1d:13:92:71:ee:46:ae:f2:e7:18:d1:c8:1b:b3: fd:98:1b:48:4f:64:47:77:e5:37:55:41:f0:e5:58:b4:b1:ed: c9:f4:53:15:76:7e:5f:b9:ba:fb:91:ae:9c:0b:71:ef:8c:0a: a2:d1:e2:ea:8a:be:97:36:1c:2c:a1:ca:8e:39:35:45:0e:8e: cb:87:71:c9:9b:f7:8f:f1:39:a8:99:5d:43:f0:17:9e:ba:8a: 26:5d:0d:4e -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEMy RjBCRTE4MDA4OUE3NTkzRDlFRDM3RDA0RTg1MkVENUEyNTlBMB4XDTI1MDgxNTAx MzE1MFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRkIzRUYxRTEyMzlEMzVD OTg5QzczNzk4M0Q5N0FFNzQ2OTUzMzNFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ9E7qaRpLyVIPNESYJY0yuiPITeojT0jzDTVa4fQYar0lXL6gjN 4iyLq3IpE9CzuD+zUJO3btbbGWj3Lr6I3MeJXQffP22bC8AazoUECviDTEFwqXVP q/N1R+P4V+r/JRIEdcbzhv3zCBcuOCGf8+SqgeXXUT1ChTEXuK0ONrfUBvuVLuyE SIdeG1bznzTxX93ixjk83Jw9HwfLZ7FxG0P0/EX53tHkl4JC1aRP0KavYamokylj 0Ke95dUtzuCxaF1GF+sx7bi8z83qAot0RWVQC0UeV2DAQEfFln7pJ30RYdeih1Eh f4bhVI8dn9y+KC9Al24oIXPAUF0McCehS1UCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBT7PvHhI501yYnHN5g9l650aVMz7jAfBgNVHSMEGDAWgBSUwvC+GACJp1k9ntN9 BOhS7VolmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTAzL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUxYUpaby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUx YUpaby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDMvbE1Md3ZoZ0FpYWRaUFo3VGZRVG9VdTFhSlpvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAERkAA/9l35wU9Mu5UgebbCNHe+pZvHfGvsVClFkY4uKA10x/4JiVMeqn9RO 9RpQG0z7CkI7avBeMfOxdd5EaDTqpfGeh4KX6q4kurq2/S8uocYgu7+OoHAhkPV8 aQZtUbjn4Nk0VSLcs07h4iFO2PbTXcnLAQnAjJY/ee1lf0S/sZiaBS2+9+Z0yyDt NpwP6nivGgt8Hy9Ki0QfNbFUSpRKULGYDcAdE5Jx7kau8ucY0cgbs/2YG0hPZEd3 5TdVQfDlWLSx7cn0UxV2fl+5uvuRrpwLce+MCqLR4uqKvpc2HCyhyo45NUUOjsuH ccmb94/xOaiZXUPwF566iiZdDU4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:43:30 2025 by rpki-client