$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft File: U5vfL-GP84f9A4QsUIGhRe7rHPc.mft (raw, json) Hash identifier: 88xXQcsgwLEBQyw7kiRV13w4mwi5ghKGqW3rlwAHrjM= Subject key identifier: 23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 Certificate issuer: /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Certificate serial: 48 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft Manifest number: 0868 Signing time: Mon 20 Oct 2025 19:26:49 +0000 Manifest this update: Mon 20 Oct 2025 19:26:49 +0000 Manifest next update: Tue 04 Nov 2025 19:26:49 +0000 Files and hashes: 1: 0dTu7i0QE1MmdwBmZwQht6Ip4vs.roa (hash: brxXRnxehaTeJPUvvAv2aJPjGavcr32h8KRoz9Bm7Gw=) 2: 25n0k1GgZh2ksd47dcWAD9oCe3I.roa (hash: S/TZPxJ+L9ZqihZWiA88yicTJh2PCbxBitBAPBC1HDo=) 3: 9SDBBu7dJRVHkMbct_RYsMuJOPw.roa (hash: ka7qAiKZpcHEflgg9CKwwESmSFjL4Ac1Ce7/F1rUGnM=) 4: BoEAeyRkcZS_QFStonRbyOsKqIY.roa (hash: HVh+hGl1fpkAWkSLA3yxCdikcc1cEJeXrKJCPMwE21Y=) 5: U5vfL-GP84f9A4QsUIGhRe7rHPc.crl (hash: SwNBHLRRGuozkCuGs4Vw/y0Kvhl3BvNxUjruHTpjuf0=) 6: Y3rUQEevYw_edDBgVpD-bjNVHF4.roa (hash: zV7J/nP2DCikY9zTp0upJvJK9SIVxMCBvvS9CEPrg8U=) 7: ab18vAWCCiRQ0bei0-s0GDomD_I.roa (hash: UhpA28rPMETDzIUktf97td9keRGqG7FXmLLuw7baDN8=) 8: apOFNH78vG0gTf900P5kAmHoNsk.roa (hash: dBqz9Fcc/gKitPEJCAcIIwof0yyBuO9DZ0/RSe/IhKY=) 9: hYnSGc5uaroYvyZp3D8eGeNI5Vg.roa (hash: Y9ECUrETmTg7gcgYSfQn7KuDPoVmdxNRsPZR5PqcwTE=) 10: pSkGf5BEtL5V4Zc_sxR_VGsx7yI.roa (hash: WKdnDBbjK5F/bCNADBD533qf+yFHSEXW+/DjO6cl6qQ=) 11: rLBquink9VsRT-uwa7QWwjPvPls.roa (hash: plzJf/NOqQwLejq3UcQGiy72dV58pWHI/vyDhiAWDSw=) 12: u8Es1L1Qe3MCtDUpGSxSq5PjAEw.roa (hash: 22pWaa0D+vQjqZPAYHk+noJy9/zeBdhmPZHD2YqmvCI=) 13: z4hzQp2TWWjkLDbdgpW07hfU5bM.roa (hash: kLX/wF6QM+YLFZDpFMn8J1n5NJEhuMSpTF6LqwFMUTw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7 Validity Not Before: Oct 15 01:38:15 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=2306FD64C5010CE033EC76139542E8EF87B26AAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e7:9c:9b:7b:d4:00:2b:07:28:3d:78:8f:d4: 90:eb:4c:7e:a9:9d:48:33:6e:3f:73:8a:30:d8:eb: 45:23:88:af:47:9e:a1:fa:c8:03:74:ea:ac:bb:8c: 59:bc:9c:aa:b7:fb:65:d6:f4:81:ca:05:45:75:2b: 92:66:ba:4e:7d:61:a3:68:11:96:07:cb:38:9a:88: 8f:9b:d5:c6:90:78:a6:54:71:ad:9e:a2:70:3c:eb: c7:a6:f9:41:a5:4c:98:44:1c:19:40:85:cd:8f:7d: a9:74:8c:1e:c0:04:27:3f:f2:45:0c:d8:60:82:0f: 4f:f3:96:28:b8:ac:f6:dd:8e:7a:5e:bc:30:0c:12: b1:b9:5c:2e:95:a9:68:ef:05:2c:17:92:8b:9f:9c: 98:80:b6:a6:f6:2b:26:a0:58:b4:da:c0:a8:9f:a0: c3:6d:f2:07:6e:0d:1b:24:52:32:46:73:86:df:91: 25:0c:d1:b9:f0:8a:db:95:25:49:28:ee:f0:f3:1a: 4d:d1:29:1b:95:d0:7b:45:9c:b4:81:3a:99:d6:7b: 47:51:a1:2f:51:16:5f:2e:54:e0:97:f1:74:79:cb: 7e:d1:12:26:5b:01:2b:3b:d5:76:9c:5c:46:09:94: 88:7b:c7:1f:74:72:f8:6d:4e:31:56:e8:a7:5c:a7: c4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:FD:64:C5:01:0C:E0:33:EC:76:13:95:42:E8:EF:87:B2:6A:AD X509v3 Authority Key Identifier: keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:62:02:f2:2f:da:6a:78:f5:52:1e:32:f4:7f:0b:8a:4c:b3: 82:38:10:5f:e2:01:ad:eb:1e:4b:21:d6:ad:d2:94:11:47:7e: ed:84:17:2d:a8:e2:3f:3e:0b:17:81:21:72:1d:38:45:8a:bc: e3:8f:eb:2b:58:c5:b9:29:2d:44:33:2f:79:84:e2:d3:60:42: 18:61:02:90:67:27:d1:1d:98:d7:29:76:2b:ed:92:90:84:75: 5e:4e:f6:f1:13:ac:1d:0b:5a:3c:54:7d:6a:c1:bc:44:18:a5: 93:1f:4b:66:ea:0b:2d:3a:88:25:ad:a8:13:3d:a3:1c:af:cf: 13:9a:6f:c9:00:87:f0:b2:d4:9b:85:43:79:1c:14:89:c7:e5: 64:51:d6:51:6e:30:df:ba:dc:4e:60:f9:01:4c:6d:73:96:60: 5e:d1:0c:ca:e3:73:92:6e:bc:9e:98:5f:55:8f:a5:aa:c7:e3: 16:ae:a7:04:af:88:21:35:ef:bb:62:47:4d:9d:dd:22:ed:8b: 9d:5f:a4:d8:43:48:d3:0f:16:fc:94:ce:90:60:91:9e:1d:ad: 63:52:ab:9f:a4:ff:04:4e:63:b9:4a:78:bf:e0:7e:ef:9f:22: 63:4f:8b:20:97:37:8a:d7:c1:66:99:30:7a:3f:72:32:e2:09: 2d:5a:ab:c6 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTI1MTAxNTAx MzgxNVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMjMwNkZENjRDNTAxMENF MDMzRUM3NjEzOTU0MkU4RUY4N0IyNkFBRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOjnnJt71AArByg9eI/UkOtMfqmdSDNuP3OKMNjrRSOIr0eeofrI A3TqrLuMWbycqrf7Zdb0gcoFRXUrkma6Tn1ho2gRlgfLOJqIj5vVxpB4plRxrZ6i cDzrx6b5QaVMmEQcGUCFzY99qXSMHsAEJz/yRQzYYIIPT/OWKLis9t2Oel68MAwS sblcLpWpaO8FLBeSi5+cmIC2pvYrJqBYtNrAqJ+gw23yB24NGyRSMkZzht+RJQzR ufCK25UlSSju8PMaTdEpG5XQe0WctIE6mdZ7R1GhL1EWXy5U4JfxdHnLftESJlsB KzvVdpxcRgmUiHvHH3Ry+G1OMVbop1ynxKUCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQjBv1kxQEM4DPsdhOVQujvh7JqrTAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3 ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDYvVTV2ZkwtR1A4NGY5QTRRc1VJR2hSZTdySFBjLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAC1iAvIv2mp49VIeMvR/C4pMs4I4EF/iAa3rHksh1q3SlBFHfu2EFy2o4j8+ CxeBIXIdOEWKvOOP6ytYxbkpLUQzL3mE4tNgQhhhApBnJ9EdmNcpdivtkpCEdV5O 9vETrB0LWjxUfWrBvEQYpZMfS2bqCy06iCWtqBM9oxyvzxOab8kAh/Cy1JuFQ3kc FInH5WRR1lFuMN+63E5g+QFMbXOWYF7RDMrjc5JuvJ6YX1WPparH4xaupwSviCE1 77tiR02d3SLti51fpNhDSNMPFvyUzpBgkZ4drWNSq5+k/wROY7lKeL/gfu+fImNP iyCXN4rXwWaZMHo/cjLiCS1aq8Y= -----END CERTIFICATE-----Generated at Mon Oct 20 23:14:20 2025 by rpki-client