$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft File: FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft (raw, json) Hash identifier: TBw74nHOOaKr7MH70rj+7MtpvYyLp33B0NKzqPoqLfY= Subject key identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A Authority key identifier: 14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 Certificate issuer: /CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Certificate serial: 4E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft Manifest number: 09A1 Signing time: Fri 04 Jul 2025 13:53:13 +0000 Manifest this update: Fri 04 Jul 2025 13:53:13 +0000 Manifest next update: Sat 19 Jul 2025 13:53:13 +0000 Files and hashes: 1: 3DMBnMrkzHTEZydJ8Z_YbgcDNis.roa (hash: pABnEty8E04ycw6oPAlLGvw4El3xbN6PSUwGEWh2rlU=) 2: FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl (hash: prrywl43jZh3jGSnus9YNcmFJxkP6YH0cxqsx3ZOzhw=) 3: rr2l_BrlPICs6GaXOLyguTCsRdA.roa (hash: SPVoInmOh3chMjxVqsWUoEpQZMOkSDuudZk/GJi7f3Q=) 4: ucLnLB-OnNXJ5rn9FADqN8YGxj4.roa (hash: DkgGRBDToPP1fqMqqt356eBNizFUzzsaWYf3AYdg5cY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1426C384E2A49283FA747D079E83DD32B65D7E85 Validity Not Before: Jun 15 01:32:25 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=B94324409B5915BCC59B9F13CE4CB42746E41E2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:52:97:0c:2c:8e:9a:c6:90:9d:04:a0:79:eb: f2:64:c2:46:b4:3e:99:44:a2:f6:7a:81:4b:a6:df: af:b7:f2:e9:e6:0e:64:32:00:12:a8:6c:33:80:20: e4:c9:3d:a5:8c:de:7d:45:29:63:45:04:95:96:1c: f0:64:7c:7c:82:b1:40:a3:63:19:b2:42:58:03:03: b3:ac:af:c7:33:62:08:fe:d6:04:6e:8a:29:09:be: 5c:e9:da:45:a7:ec:aa:05:4e:07:14:91:f7:b1:0c: ee:54:a5:71:7e:00:28:d8:a5:d2:65:af:55:82:49: 0b:43:f1:45:68:17:64:e4:7d:38:8a:86:d9:4a:43: a1:47:09:78:4d:a3:36:ae:52:a2:3c:c3:bf:f5:ce: aa:46:68:b6:f6:2e:46:12:ba:3d:7f:0b:8c:1e:df: 82:a2:1d:88:d3:39:2d:6d:c2:a5:51:9b:76:0c:65: 87:0a:3b:7d:5e:f7:6e:f2:2a:39:94:bc:6b:68:a1: 50:6a:00:03:1d:af:17:b1:92:6e:0c:58:2d:d2:71: 0f:c3:35:3e:18:e7:a4:56:3d:f7:dc:9c:1a:e1:f2: 2c:cb:39:b0:14:ea:6a:6a:31:fc:64:b2:d9:bf:a6: 20:d8:59:42:f0:ea:e7:f6:f6:d8:13:f2:1b:9f:18: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:43:24:40:9B:59:15:BC:C5:9B:9F:13:CE:4C:B4:27:46:E4:1E:2A X509v3 Authority Key Identifier: keyid:14:26:C3:84:E2:A4:92:83:FA:74:7D:07:9E:83:DD:32:B6:5D:7E:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FCbDhOKkkoP6dH0HnoPdMrZdfoU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/925/FCbDhOKkkoP6dH0HnoPdMrZdfoU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:75:ed:33:00:23:66:9a:16:0f:3e:76:bd:60:6a:96:6b:ca: dc:71:a2:c7:46:4b:ad:42:0d:02:99:1c:bf:5e:03:aa:73:13: ec:51:72:45:3a:79:30:22:4b:8c:8f:9e:52:ec:55:35:9f:6e: d6:31:b7:f2:1c:30:55:3d:9d:f4:24:97:79:12:ec:a5:2d:66: 9e:af:4b:1a:f2:85:32:41:cd:34:13:8e:2c:33:d9:ff:a0:ce: 2f:a3:03:0c:2e:b5:4d:4e:1d:af:f6:93:62:b0:00:76:d8:1c: 90:b3:4a:37:e5:47:e8:ec:5e:9b:a4:70:de:9a:c2:e5:c5:36: 9f:b5:27:a4:35:ca:63:1b:72:84:79:6e:c8:8e:e3:cd:d2:5a: 01:11:b5:01:f2:fb:ff:6a:1d:4e:5b:bf:81:5d:ca:fa:60:55: 09:98:54:e4:9c:c0:9c:7c:ef:b1:9a:58:37:d3:7e:f3:8a:e7: 4a:76:7d:91:cb:34:d9:5c:ed:c2:9e:2c:4b:e7:65:a1:f7:fd: d4:5a:fc:e0:93:af:05:31:54:88:59:4a:99:fd:c9:f4:52:bf: 64:23:20:04:6f:4f:7a:e4:75:b9:79:67:dc:18:a4:ed:f2:cd: f3:38:bb:38:3d:e4:6e:50:77:70:c6:44:55:35:22:87:69:5b: 5c:f7:6e:63 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBTjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNDI2 QzM4NEUyQTQ5MjgzRkE3NDdEMDc5RTgzREQzMkI2NUQ3RTg1MB4XDTI1MDYxNTAx MzIyNVoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQjk0MzI0NDA5QjU5MTVC Q0M1OUI5RjEzQ0U0Q0I0Mjc0NkU0MUUyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM9SlwwsjprGkJ0EoHnr8mTCRrQ+mUSi9nqBS6bfr7fy6eYOZDIA EqhsM4Ag5Mk9pYzefUUpY0UElZYc8GR8fIKxQKNjGbJCWAMDs6yvxzNiCP7WBG6K KQm+XOnaRafsqgVOBxSR97EM7lSlcX4AKNil0mWvVYJJC0PxRWgXZOR9OIqG2UpD oUcJeE2jNq5SojzDv/XOqkZotvYuRhK6PX8LjB7fgqIdiNM5LW3CpVGbdgxlhwo7 fV73bvIqOZS8a2ihUGoAAx2vF7GSbgxYLdJxD8M1PhjnpFY999ycGuHyLMs5sBTq amox/GSy2b+mINhZQvDq5/b22BPyG58YHpkCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBS5QyRAm1kVvMWbnxPOTLQnRuQeKjAfBgNVHSMEGDAWgBQUJsOE4qSSg/p0fQee g90ytl1+hTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI1L0ZDYkRoT0tra29QNmRIMEhub1BkTXJaZGZvVS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZDYkRoT0tra29QNmRIMEhub1BkTXJa ZGZvVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjUvRkNiRGhPS2trb1A2ZEgwSG5vUGRNclpkZm9VLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBACt17TMAI2aaFg8+dr1gapZrytxxosdGS61CDQKZHL9eA6pzE+xRckU6eTAi S4yPnlLsVTWfbtYxt/IcMFU9nfQkl3kS7KUtZp6vSxryhTJBzTQTjiwz2f+gzi+j AwwutU1OHa/2k2KwAHbYHJCzSjflR+jsXpukcN6awuXFNp+1J6Q1ymMbcoR5bsiO 483SWgERtQHy+/9qHU5bv4FdyvpgVQmYVOScwJx877GaWDfTfvOK50p2fZHLNNlc 7cKeLEvnZaH3/dRa/OCTrwUxVIhZSpn9yfRSv2QjIARvT3rkdbl5Z9wYpO3yzfM4 uzg95G5Qd3DGRFU1IodpW1z3bmM= -----END CERTIFICATE-----Generated at Fri Jul 4 15:41:31 2025 by rpki-client