$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft File: mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft (raw, json) Hash identifier: ULLMlC7j01hU/u66qJho4i1fVgaEMJKOSDus8ViW8Ww= Subject key identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 1F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft Manifest number: 04BF Signing time: Sun 18 May 2025 22:33:06 +0000 Manifest this update: Sun 18 May 2025 22:33:06 +0000 Manifest next update: Mon 02 Jun 2025 22:33:06 +0000 Files and hashes: 1: 2GlfNZemEu2k0jV-73uoiytXxNs.roa (hash: EpU8NDYPGXDeOveduAY4GQ6T5O7u0+z7HF6PjjVaaos=) 2: Z_gtlGulRhAjU0l0frDIM-3rfds.roa (hash: ci5tfJ1GnbJdXnUKb8rNgK4TTH8m1nMX83yu6hiKa1I=) 3: mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl (hash: ygCP0f5+myX7nzNlrx4Ceom88KlN6z3jzlYFWrB/gvc=) 4: udt0lG_tZB8R18vtGykImhucsvs.roa (hash: tyC2IIQtm/GLDnuBpwDIHuOXwTwrNeAvzdHDDhR0PUg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 May 2025 22:28:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: May 15 01:39:40 2025 GMT Not After : May 15 01:30:03 2026 GMT Subject: CN=2557C2B67D5CEC87356BC7AD6F629B95BE8367AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:1e:da:87:2a:57:8d:99:1e:4a:30:7b:f2: 7e:15:f7:e0:68:3f:bf:c0:a7:7e:44:35:bb:7d:d3: da:fc:e9:44:c5:90:ed:49:8a:bb:6f:4d:58:e2:55: 4f:72:86:bf:51:97:af:b1:96:39:07:28:aa:9d:30: 1f:01:fd:98:f7:a1:16:8f:1e:b1:b9:1e:67:2f:7f: 89:a3:48:34:20:bf:7f:69:fb:6f:b5:fe:96:9b:8b: 6d:92:ab:ce:02:48:bf:09:3f:6b:e9:33:26:c8:18: 0c:83:24:70:dd:be:eb:63:7f:ab:b5:b6:1a:2b:ff: cf:6e:bd:bc:68:6f:d6:1d:eb:fe:40:27:77:a1:d6: 1d:2b:a0:17:f8:12:8c:e8:01:c1:c5:5a:61:64:e0: 0e:8e:15:de:ae:a6:ee:16:9d:ed:d1:02:3b:43:19: 9f:12:78:1f:93:1b:3a:80:52:81:a0:3b:78:c6:57: 2a:7f:d9:af:a6:0b:68:9a:5d:d4:f7:4c:d4:98:9e: 16:b9:b3:4d:56:91:a4:d9:00:4f:cb:17:b3:ec:9d: 10:f1:ab:b2:88:fc:74:d9:47:22:98:57:ec:5b:f6: 81:a6:b9:96:39:25:aa:8d:3c:1e:20:54:be:38:b5: 58:bb:7e:ce:b6:0e:85:74:56:32:15:47:ad:f0:03: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1d:0a:24:46:8b:1e:72:c0:b2:e7:04:6e:d8:30:a4:47:a7: 0a:4c:d5:91:47:0e:f1:a2:07:ce:74:82:76:d0:83:4d:3f:8e: 11:db:7a:e0:69:c0:34:3b:49:fd:e3:1c:f6:79:7c:67:26:0c: 5b:46:5b:91:f3:5d:52:32:59:e8:7c:3a:51:32:dc:8f:33:96: c3:fa:c9:22:71:02:da:65:fa:84:36:9a:e3:b4:67:01:e9:1d: 23:9d:9e:84:69:a3:6f:47:5a:20:1b:6e:82:88:59:68:3e:18: 12:62:e8:54:c2:bb:15:46:95:df:ff:7a:32:97:b8:d7:bb:f6: 38:0c:65:f4:e1:2b:13:9d:98:c7:32:d3:09:f4:b7:40:97:52: 42:b8:a2:ff:62:77:e7:30:af:02:2b:4e:08:8e:89:bd:e0:cc: 91:27:ff:44:0b:a9:eb:d7:76:57:a9:ec:b5:5c:34:d9:ba:4c: c3:5a:a6:8e:fb:40:88:9c:ef:bc:c7:d7:37:a6:ee:ef:34:11: 0a:3f:76:f7:36:66:4f:ca:bc:14:b9:86:28:f9:fd:1c:a6:64: ed:4d:7c:92:29:3f:fc:0c:6c:95:24:fd:73:7f:b1:e2:bf:46: 18:6e:21:7f:20:f8:8c:18:06:30:67:94:c7:7b:30:07:85:77: cd:11:9f:a4 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI1MDUxNTAx Mzk0MFoXDTI2MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMjU1N0MyQjY3RDVDRUM4 NzM1NkJDN0FENkY2MjlCOTVCRTgzNjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMKzHtqHKleNmR5KMHvyfhX34Gg/v8CnfkQ1u33T2vzpRMWQ7UmK u29NWOJVT3KGv1GXr7GWOQcoqp0wHwH9mPehFo8esbkeZy9/iaNINCC/f2n7b7X+ lpuLbZKrzgJIvwk/a+kzJsgYDIMkcN2+62N/q7W2Giv/z269vGhv1h3r/kAnd6HW HSugF/gSjOgBwcVaYWTgDo4V3q6m7had7dECO0MZnxJ4H5MbOoBSgaA7eMZXKn/Z r6YLaJpd1PdM1JieFrmzTVaRpNkAT8sXs+ydEPGrsoj8dNlHIphX7Fv2gaa5ljkl qo08HiBUvji1WLt+zrYOhXRWMhVHrfADAGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQlV8K2fVzshzVrx61vYpuVvoNnrDAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjUvbUo2Q1p5eVlwaWNTQ3JweTNyNi1JZ0ZZU2FBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBADAdCiRGix5ywLLnBG7YMKRHpwpM1ZFHDvGiB850gnbQg00/jhHbeuBpwDQ7 Sf3jHPZ5fGcmDFtGW5HzXVIyWeh8OlEy3I8zlsP6ySJxAtpl+oQ2muO0ZwHpHSOd noRpo29HWiAbboKIWWg+GBJi6FTCuxVGld//ejKXuNe79jgMZfThKxOdmMcy0wn0 t0CXUkK4ov9id+cwrwIrTgiOib3gzJEn/0QLqevXdlep7LVcNNm6TMNapo77QIic 77zH1zem7u80EQo/dvc2Zk/KvBS5hij5/RymZO1NfJIpP/wMbJUk/XN/seK/Rhhu IX8g+IwYBjBnlMd7MAeFd80Rn6Q= -----END CERTIFICATE-----Generated at Mon May 19 00:40:33 2025 by rpki-client