$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/mANcHrYe2O7xU9jzK9oTva10LsU.cer File: mANcHrYe2O7xU9jzK9oTva10LsU.cer (raw, json) Hash identifier: vzc4+IL7Zn/0kd9rL8OiFAzCRW0TBUU3qM0kE/BLjpQ= Subject key identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 Authority key identifier: BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F Certificate issuer: /CN=A91A73810000/serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Certificate serial: 579B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer Manifest: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft caRepository: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ Notify URL: https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml Certificate not before: Fri 15 Aug 2025 01:41:33 +0000 Certificate not after: Sat 15 Aug 2026 01:30:02 +0000 Subordinate resources: IP: 2402:2840::/32 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22427 (0x579b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A73810000, serialNumber=BA4412B35F5A8A7147BFC667B59B520DAAC7DA8F Validity Not Before: Aug 15 01:41:33 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=98035C1EB61ED8EEF153D8F32BDA13BDAD742EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f3:3a:0a:d1:92:e9:29:b0:71:54:4e:f9:ec: 89:04:4c:74:00:4e:75:92:6e:61:de:0f:85:c5:b2: a6:cd:fa:31:5e:94:d2:53:9f:ba:22:90:1e:39:16: fe:0e:6b:e5:64:1b:04:24:ff:46:77:3b:ae:df:54: 78:4e:58:57:67:25:31:39:a7:71:67:95:a6:40:55: 13:fa:9e:db:ab:55:da:a8:16:68:0f:eb:d2:67:ed: dd:a8:14:d1:d2:81:82:db:8d:23:57:48:eb:27:8e: 5c:59:7d:c8:9d:4d:86:08:1f:34:fd:9a:b9:b3:b2: 7e:82:e7:a6:1f:9d:ae:5b:b7:ec:d0:a8:9f:e5:22: fe:b7:71:4d:19:c0:dc:36:b1:84:b4:0b:3f:d9:26: 63:c3:93:d6:cc:05:f2:e4:a5:c9:aa:30:12:0e:d0: 6b:b6:3e:26:8b:c2:d2:11:6c:41:27:24:9f:be:7a: 1e:49:77:21:7f:4f:6a:fe:a7:e9:47:20:41:83:b1: ed:ba:c3:21:e0:6a:9d:b5:4c:08:96:7a:cc:bb:26: 51:8a:01:80:98:54:49:5d:db:c1:ca:8e:00:6d:3f: b5:6d:06:28:3c:21:59:73:84:0b:55:3b:cc:b5:a6: 62:6f:36:5d:43:3a:22:a6:2c:3a:e4:41:7a:e2:e1: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:5C:1E:B6:1E:D8:EE:F1:53:D8:F3:2B:DA:13:BD:AD:74:2E:C5 X509v3 Authority Key Identifier: keyid:BA:44:12:B3:5F:5A:8A:71:47:BF:C6:67:B5:9B:52:0D:AA:C7:DA:8F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Subject Information Access: CA Repository - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/ RPKI Manifest - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30315/mANcHrYe2O7xU9jzK9oTva10LsU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2402:2840::/32 Signature Algorithm: sha256WithRSAEncryption 36:f0:0a:57:66:ee:2a:d4:c7:7e:11:41:79:61:40:fa:5b:31: e6:51:f0:09:57:e6:2c:71:2d:2f:05:dd:b3:3a:d9:7f:a4:2d: 62:ca:e1:b6:bc:4e:ff:e0:9d:06:56:15:9a:01:b6:5b:2f:34: 55:b5:43:90:37:49:6e:89:88:bc:dc:07:a4:09:54:ef:6f:ff: 1f:30:83:5a:74:65:12:7a:20:21:5f:73:3a:76:51:c4:bd:35: ef:7c:2c:f0:27:70:49:d8:26:b4:62:99:bb:14:27:07:ef:34: 06:01:64:fa:77:98:f0:d7:3c:ab:9a:97:bf:b3:5e:36:f2:de: d9:32:b7:e4:fc:f1:4a:e4:63:ea:bf:50:3c:38:84:74:23:8b: 3a:1d:5c:57:e1:65:68:b9:86:3c:01:5f:fa:a8:28:8e:4b:08: 28:c9:ad:09:74:bd:8b:ab:5f:64:6e:9a:25:dc:fb:81:d3:1a: 1a:4f:a0:a8:53:24:10:94:21:bb:c8:fb:44:bb:10:a9:db:14: 8b:5a:20:66:e9:51:1a:3a:d1:43:8d:31:98:36:86:1b:13:1a: 41:7c:16:0f:06:2b:32:c8:ef:5e:87:fd:9e:c5:18:36:5f:14: 5c:f7:6a:6d:14:cd:f3:3a:8b:8c:2c:ce:92:f6:98:41:3b:a1: 2f:14:7f:b0 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICV5swDQYJKoZIhvcNAQELBQAwSjEVMBMGA1UEAxMMQTkx QTczODEwMDAwMTEwLwYDVQQFEyhCQTQ0MTJCMzVGNUE4QTcxNDdCRkM2NjdCNTlC NTIwREFBQzdEQThGMB4XDTI1MDgxNTAxNDEzM1oXDTI2MDgxNTAxMzAwMlowMzEx MC8GA1UEAxMoOTgwMzVDMUVCNjFFRDhFRUYxNTNEOEYzMkJEQTEzQkRBRDc0MkVD NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKjzOgrRkukpsHFUTvns iQRMdABOdZJuYd4PhcWyps36MV6U0lOfuiKQHjkW/g5r5WQbBCT/Rnc7rt9UeE5Y V2clMTmncWeVpkBVE/qe26tV2qgWaA/r0mft3agU0dKBgtuNI1dI6yeOXFl9yJ1N hggfNP2aubOyfoLnph+drlu37NCon+Ui/rdxTRnA3DaxhLQLP9kmY8OT1swF8uSl yaowEg7Qa7Y+JovC0hFsQSckn756Hkl3IX9Pav6n6UcgQYOx7brDIeBqnbVMCJZ6 zLsmUYoBgJhUSV3bwcqOAG0/tW0GKDwhWXOEC1U7zLWmYm82XUM6IqYsOuRBeuLh Sb8CAwEAAaOCAowwggKIMB0GA1UdDgQWBBSYA1weth7Y7vFT2PMr2hO9rXQuxTAf BgNVHSMEGDAWgBS6RBKzX1qKcUe/xme1m1INqsfajzAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMGIGA1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vcnBraS1yZXBvc2l0 b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdWtRU3MxOWFpbkZIdjhabnRa dFNEYXJIMm84LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5j Oi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0 NjhGN0M3MkZEMUZGMi91a1FTczE5YWluRkh2OFpudFp0U0RhckgybzguY2VyMA8G A1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMIIBAwYIKwYBBQUHAQsEgfYw gfMwRAYIKwYBBQUHMAWGOHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9hcC9BOTFBNzM4MTAwMDAvMzAzMTUvMGMGCCsGAQUFBzAKhldyc3luYzovL3Jw a2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzMwMzE1L21B TmNIclllMk83eFU5anpLOW9UdmExMExzVS5tZnQwRgYIKwYBBQUHMA2GOmh0dHBz Oi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRwL2FwL25vdGlmaWNhdGlv bi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAihAMA0GCSqGSIb3 DQEBCwUAA4IBAQA28ApXZu4q1Md+EUF5YUD6WzHmUfAJV+YscS0vBd2zOtl/pC1i yuG2vE7/4J0GVhWaAbZbLzRVtUOQN0luiYi83AekCVTvb/8fMINadGUSeiAhX3M6 dlHEvTXvfCzwJ3BJ2Ca0Ypm7FCcH7zQGAWT6d5jw1zyrmpe/s1428t7ZMrfk/PFK 5GPqv1A8OIR0I4s6HVxX4WVouYY8AV/6qCiOSwgoya0JdL2Lq19kbpol3PuB0xoa T6CoUyQQlCG7yPtEuxCp2xSLWiBm6VEaOtFDjTGYNoYbExpBfBYPBisyyO9eh/2e xRg2XxRc92ptFM3zOouMLM6S9phBO6EvFH+w -----END CERTIFICATE-----Generated at Sat Aug 23 07:33:28 2025 by rpki-client