$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft File: is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft (raw, json) Hash identifier: 6REHuOU8Y6pPUgpS0kadbc4jbY9UW+w8Exf0A2OK4Q8= Subject key identifier: 40:A4:5A:97:3E:2E:07:1A:BE:34:97:6B:57:2C:37:B6:A4:43:09:BE Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6 Certificate issuer: /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6 Certificate serial: 57 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft Manifest number: 0536 Signing time: Sat 26 Apr 2025 11:38:57 +0000 Manifest this update: Sat 26 Apr 2025 11:38:57 +0000 Manifest next update: Sun 11 May 2025 11:38:57 +0000 Files and hashes: 1: gWq14NOCSVkeb4IbHnEhvvxseSw.roa (hash: uPP0RLUSy2pCb3D1lRlcacuwNkAs2inqYgXWv7FWRwM=) 2: is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl (hash: MjrR3KVgTRx1XjtG6Q4US1udaP1gmAnf0iG4XmWAeXo=) 3: mCi_hgJzzSOEMbaFL1K8z_KeDnQ.roa (hash: sQXIvWh35sqPoGQSuXGq5gxjnjsiklAaNqjc5mKxt3w=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 87 (0x57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6 Validity Not Before: Apr 15 01:35:12 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=40A45A973E2E071ABE34976B572C37B6A44309BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:80:fa:7b:5c:e3:cf:c0:7b:0f:fa:c6:ce: 28:0c:63:7e:19:4b:93:3c:86:eb:d3:a3:67:0d:02: 60:98:92:01:be:bf:b7:03:e3:98:62:f7:cc:d1:03: a6:a5:98:e3:97:83:3e:f1:66:32:0b:49:51:84:05: 7f:eb:96:73:34:80:2a:c8:3f:a3:dd:19:6b:7a:b6: 6a:bf:bd:75:9c:53:1a:5e:73:b7:f4:92:1d:1b:76: 5a:3d:1f:71:e8:92:b7:e5:46:51:0e:a8:a7:ea:01: 14:ce:2a:10:95:66:59:1c:df:22:6a:45:aa:39:79: 1d:31:36:83:a7:1c:13:8a:8c:66:a6:49:4b:db:5f: 6b:c8:8a:2a:89:92:19:ff:22:cf:3d:75:4d:60:fa: eb:fa:a1:84:2a:6a:5b:cd:8a:d0:cd:be:0a:3a:23: 76:80:23:4d:8e:8f:49:b4:27:95:f1:39:b9:d2:64: c8:64:13:e2:ae:24:98:bb:ae:ea:c1:4f:d0:13:11: d8:00:dd:92:8f:75:46:33:04:de:9d:d5:ef:7a:e8: 11:b9:6f:9a:50:85:2a:3e:f3:08:5f:d2:47:d4:dd: 55:67:78:c7:6b:80:21:85:97:58:ef:24:ac:44:d6: 0f:ec:d0:ef:27:14:77:6a:82:13:21:41:2f:25:36: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A4:5A:97:3E:2E:07:1A:BE:34:97:6B:57:2C:37:B6:A4:43:09:BE X509v3 Authority Key Identifier: keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:c5:85:51:ec:18:82:fe:39:20:86:87:2c:bd:03:6a:50:a1: 03:cf:74:c9:e3:7f:45:89:13:29:08:2b:e8:bb:eb:89:36:55: 24:35:91:84:ab:36:33:6b:3b:b2:3a:f8:bf:65:ce:e8:ca:d1: d4:ef:e6:95:9f:89:f9:d4:ef:6c:d9:cd:f4:9f:01:77:e9:e6: 38:b8:d4:33:47:f3:9c:21:e5:40:c2:a9:ad:9e:b0:3e:a0:fa: d1:58:38:a5:3b:c4:2b:9d:64:69:19:c5:42:9b:10:3f:58:7d: ad:04:40:ff:d2:25:e0:8e:20:91:c4:58:ad:25:1c:b5:2d:d7: 04:ff:be:36:0a:90:aa:64:93:5a:3f:96:65:c9:25:c9:cf:cc: 3d:a5:4d:b7:7e:32:20:ef:15:b6:f7:82:6b:ba:b8:cd:70:02: f3:4b:c1:eb:2f:d0:7e:ca:aa:69:82:ad:dd:10:be:a5:1b:73: 2f:4a:2b:5e:6c:31:36:17:de:3a:fe:03:c0:e5:59:6a:f0:fd: 50:ad:b7:52:c2:fe:2a:9f:cf:ab:61:1e:0e:58:75:c9:f6:a2: 62:5c:5b:cb:eb:48:a6:4b:ab:ae:55:2a:4d:aa:4c:78:5a:a3: eb:33:9b:3f:86:66:44:1b:e1:47:e1:d2:60:6c:b9:e5:f2:51: 6e:1b:81:28 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QUNE QUIxRTFFQTYzM0JBOEFEMThBMkFDQjcyMzYwRTkyODBDNEI2MB4XDTI1MDQxNTAx MzUxMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDBBNDVBOTczRTJFMDcx QUJFMzQ5NzZCNTcyQzM3QjZBNDQzMDlCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALjZgPp7XOPPwHsP+sbOKAxjfhlLkzyG69OjZw0CYJiSAb6/twPj mGL3zNEDpqWY45eDPvFmMgtJUYQFf+uWczSAKsg/o90Za3q2ar+9dZxTGl5zt/SS HRt2Wj0fceiSt+VGUQ6op+oBFM4qEJVmWRzfImpFqjl5HTE2g6ccE4qMZqZJS9tf a8iKKomSGf8izz11TWD66/qhhCpqW82K0M2+CjojdoAjTY6PSbQnlfE5udJkyGQT 4q4kmLuu6sFP0BMR2ADdko91RjME3p3V73roEblvmlCFKj7zCF/SR9TdVWd4x2uA IYWXWO8krETWD+zQ7ycUd2qCEyFBLyU2CnECAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRApFqXPi4HGr40l2tXLDe2pEMJvjAfBgNVHSMEGDAWgBSKzaseHqYzuorRiirL cjYOkoDEtjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAwMy9pczJySGg2bU03cUswWW9xeTNJMkRwS0F4TFkuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pczJySGg2bU03cUswWW9xeTNJMkRw S0F4TFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTAwMy9pczJySGg2bU03cUswWW9xeTNJMkRwS0F4TFkubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAnMWFUewYgv45IIaHLL0DalChA890yeN/RYkTKQgr6LvriTZVJDWRhKs2 M2s7sjr4v2XO6MrR1O/mlZ+J+dTvbNnN9J8Bd+nmOLjUM0fznCHlQMKprZ6wPqD6 0Vg4pTvEK51kaRnFQpsQP1h9rQRA/9Il4I4gkcRYrSUctS3XBP++NgqQqmSTWj+W Zcklyc/MPaVNt34yIO8VtveCa7q4zXAC80vB6y/QfsqqaYKt3RC+pRtzL0orXmwx NhfeOv4DwOVZavD9UK23UsL+Kp/Pq2EeDlh1yfaiYlxby+tIpkurrlUqTapMeFqj 6zObP4ZmRBvhR+HSYGy55fJRbhuBKA== -----END CERTIFICATE-----Generated at Sat Apr 26 15:07:27 2025 by rpki-client