$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft File: mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft (raw, json) Hash identifier: 1oaYTQYZGID6TeNHgLfoCHX/tkXLJblPsvus99ISlUs= Subject key identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 28 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft Manifest number: 085B Signing time: Mon 20 Oct 2025 19:28:52 +0000 Manifest this update: Mon 20 Oct 2025 19:28:52 +0000 Manifest next update: Tue 04 Nov 2025 19:28:52 +0000 Files and hashes: 1: 2GlfNZemEu2k0jV-73uoiytXxNs.roa (hash: EpU8NDYPGXDeOveduAY4GQ6T5O7u0+z7HF6PjjVaaos=) 2: Z_gtlGulRhAjU0l0frDIM-3rfds.roa (hash: ci5tfJ1GnbJdXnUKb8rNgK4TTH8m1nMX83yu6hiKa1I=) 3: mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl (hash: NatSHrZoGYULKmmgE7g3QDocbIynFwOPflVTeJ4a3gc=) 4: udt0lG_tZB8R18vtGykImhucsvs.roa (hash: tyC2IIQtm/GLDnuBpwDIHuOXwTwrNeAvzdHDDhR0PUg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 21:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: Oct 15 01:43:13 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=2557C2B67D5CEC87356BC7AD6F629B95BE8367AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:1e:da:87:2a:57:8d:99:1e:4a:30:7b:f2: 7e:15:f7:e0:68:3f:bf:c0:a7:7e:44:35:bb:7d:d3: da:fc:e9:44:c5:90:ed:49:8a:bb:6f:4d:58:e2:55: 4f:72:86:bf:51:97:af:b1:96:39:07:28:aa:9d:30: 1f:01:fd:98:f7:a1:16:8f:1e:b1:b9:1e:67:2f:7f: 89:a3:48:34:20:bf:7f:69:fb:6f:b5:fe:96:9b:8b: 6d:92:ab:ce:02:48:bf:09:3f:6b:e9:33:26:c8:18: 0c:83:24:70:dd:be:eb:63:7f:ab:b5:b6:1a:2b:ff: cf:6e:bd:bc:68:6f:d6:1d:eb:fe:40:27:77:a1:d6: 1d:2b:a0:17:f8:12:8c:e8:01:c1:c5:5a:61:64:e0: 0e:8e:15:de:ae:a6:ee:16:9d:ed:d1:02:3b:43:19: 9f:12:78:1f:93:1b:3a:80:52:81:a0:3b:78:c6:57: 2a:7f:d9:af:a6:0b:68:9a:5d:d4:f7:4c:d4:98:9e: 16:b9:b3:4d:56:91:a4:d9:00:4f:cb:17:b3:ec:9d: 10:f1:ab:b2:88:fc:74:d9:47:22:98:57:ec:5b:f6: 81:a6:b9:96:39:25:aa:8d:3c:1e:20:54:be:38:b5: 58:bb:7e:ce:b6:0e:85:74:56:32:15:47:ad:f0:03: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1e:f1:ba:b9:30:7b:e0:2c:9a:9b:7b:7c:3a:3e:4e:7c:99: 64:8f:26:13:6b:8b:f0:9c:23:06:d2:90:9c:51:62:4f:50:64: 9d:1b:cf:e6:24:89:1b:88:00:22:46:79:70:b6:47:1e:6b:8e: ba:d6:25:6c:45:49:dc:93:ac:0f:77:5a:83:5d:fc:b0:89:c3: 6d:ac:69:ce:c7:9a:32:b4:4c:e6:a9:a0:0b:71:40:ea:52:54: 8a:19:e7:04:6b:06:92:a5:88:9b:bd:0e:39:4e:a1:08:52:40: 4d:92:39:e8:b5:10:d9:da:bd:3e:54:62:9b:3b:2c:d1:2c:6e: 85:ca:eb:65:f0:26:42:0c:60:54:b8:5b:25:62:73:3e:c4:f1: 0d:d2:6a:df:78:c8:62:cd:0b:75:a1:c0:05:5a:c5:28:d1:1f: af:5c:45:59:fa:36:da:23:50:f5:cc:26:43:d5:c5:f0:4a:20: 17:df:22:6b:78:ac:1c:ad:0e:d8:62:2c:96:ed:ec:f9:bd:d3: db:00:77:12:61:00:ad:ac:bf:d9:68:79:9c:99:0b:a5:a6:1e: 74:86:af:2f:9d:f8:0a:9c:19:91:93:7f:9a:8a:17:b4:2a:cd: 5b:47:ea:57:b8:1c:26:61:8b:85:27:25:73:70:fc:0d:14:81: c9:ff:f3:e4 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI1MTAxNTAx NDMxM1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMjU1N0MyQjY3RDVDRUM4 NzM1NkJDN0FENkY2MjlCOTVCRTgzNjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMKzHtqHKleNmR5KMHvyfhX34Gg/v8CnfkQ1u33T2vzpRMWQ7UmK u29NWOJVT3KGv1GXr7GWOQcoqp0wHwH9mPehFo8esbkeZy9/iaNINCC/f2n7b7X+ lpuLbZKrzgJIvwk/a+kzJsgYDIMkcN2+62N/q7W2Giv/z269vGhv1h3r/kAnd6HW HSugF/gSjOgBwcVaYWTgDo4V3q6m7had7dECO0MZnxJ4H5MbOoBSgaA7eMZXKn/Z r6YLaJpd1PdM1JieFrmzTVaRpNkAT8sXs+ydEPGrsoj8dNlHIphX7Fv2gaa5ljkl qo08HiBUvji1WLt+zrYOhXRWMhVHrfADAGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQlV8K2fVzshzVrx61vYpuVvoNnrDAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjUvbUo2Q1p5eVlwaWNTQ3JweTNyNi1JZ0ZZU2FBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ4e8bq5MHvgLJqbe3w6Pk58mWSPJhNri/CcIwbSkJxRYk9QZJ0bz+YkiRuI ACJGeXC2Rx5rjrrWJWxFSdyTrA93WoNd/LCJw22sac7HmjK0TOapoAtxQOpSVIoZ 5wRrBpKliJu9DjlOoQhSQE2SOei1ENnavT5UYps7LNEsboXK62XwJkIMYFS4WyVi cz7E8Q3Sat94yGLNC3WhwAVaxSjRH69cRVn6NtojUPXMJkPVxfBKIBffImt4rByt DthiLJbt7Pm909sAdxJhAK2sv9loeZyZC6WmHnSGry+d+AqcGZGTf5qKF7QqzVtH 6le4HCZhi4UnJXNw/A0Ugcn/8+Q= -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:46 2025 by rpki-client