$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft File: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft (raw, json) Hash identifier: HvO+4zo/2BV6av8p4cox0sv8b6alsHHEPtvMCQ0iysE= Subject key identifier: A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6 Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 Certificate issuer: /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Certificate serial: C8 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft Manifest number: 168A Signing time: Sat 26 Apr 2025 14:18:33 +0000 Manifest this update: Sat 26 Apr 2025 14:18:33 +0000 Manifest next update: Sun 11 May 2025 14:18:33 +0000 Files and hashes: 1: 0PAFmAhpbvgLdbmDJ2k--iIBYHk.roa (hash: TBfXVVvl+I0JOMNOaqJ2W8PgyyEjUUuyDsyxlWdqHQ8=) 2: 0srX8y3Jti07Hnnicc6k3BJYxP8.roa (hash: 61jZ1lE6xB9tfCWmSxBSU9uF8bAHLEcOth1NkEiAkMc=) 3: 9xscJtcTW-WeHnNRVY5DMCVbbPE.roa (hash: zksblTLVuKotYLK7oArWGaAO8yzsfbDfhbrvdg5mY84=) 4: AQTDxTcTCI45hOxBEWNl9A73EE4.roa (hash: VDyCiePXtRnfNcZR9iXhw09mC6UtKgholnIkcdgrcWk=) 5: EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl (hash: +ysFz0AzE4Nla45LbROvPoZ6ftrKOM0p+riEI3Blx5I=) 6: J5Rz8oXbQEJk8gssAfFbzH27kWE.roa (hash: /NvhgjAlB+2N48IuXxAhT1RxoomG+cancg5GOevnSpk=) 7: Muz4veYwYMXngxvdeFbGQkfqNzU.roa (hash: 9ktCjshvkIjF784V91Opr/PUKTq9lV72q0Qty0VQTlM=) 8: NAMn1afCARECE5vUVMtAYD75tTI.roa (hash: Rx5R0Q3ISExp8EqhSw0eelilGT5MkxakecoZB8o5nro=) 9: aCKUeZU3WSLhACxmTMwCPJCZLUw.roa (hash: gTGxvDID6/8y43sm1M1aG0OHolLQnUlbjN1MRV66t2Y=) 10: b5b-aW5uwh5i28IiNA7cctuW7DE.roa (hash: HWEP2PDQOID+gOurylLkMhJOtRgCxlzrSon9J10JluM=) 11: dlqlP92ne5iXEr_Jps1uHbvFaho.roa (hash: f3GSmSdhBD6ujxXoBZu17In7bwsMfVTCYKMhuNl4Ofs=) 12: iu1Fhx_wusf6qNPH07bxdsJ9tjs.roa (hash: 8CjfmAubG1rN3/yYGa9jSzoh1YjrWwT5yuraFxJJrRQ=) 13: rwNTvoN2RBjF4jD-4xLiPW6WfmE.roa (hash: Gs930vS1gAJpIdv986KapZr9qmnD8HKt/jvA2d7np90=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7 Validity Not Before: Apr 15 01:34:15 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=A2DBFF238A859EEFBB4DB793FD7F3A61A12B2CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7e:6c:d2:72:c9:1f:db:e3:b2:49:f6:c7:c7: 5c:ec:bf:ad:a9:5a:2c:07:07:6e:da:77:23:a3:26: 90:c0:eb:93:89:97:11:10:e8:dc:23:34:fa:73:14: 12:bb:f5:16:71:5b:30:6a:77:f7:78:37:98:8f:c4: 63:1a:60:d2:d7:26:59:58:e2:65:58:14:44:77:00: ec:0e:21:92:0d:08:88:a4:82:ec:d1:9f:81:63:8b: c6:c4:64:d2:9c:ab:05:6a:1c:1a:d2:2f:c0:70:14: 8f:58:09:6f:0d:9f:c1:d7:3e:c6:36:8a:5c:24:0d: a7:4a:f4:fe:95:75:d7:6d:47:e0:14:19:b1:2e:17: b3:09:88:04:18:4c:17:c0:d5:00:c5:ab:29:39:2a: b2:17:87:43:bd:58:13:04:fd:88:18:8c:42:9f:2a: 40:55:7b:38:4c:25:7d:e7:f7:54:a0:16:ae:d9:2f: 55:10:b9:eb:7a:1a:a2:b6:80:17:5d:a9:26:96:e1: 49:7a:7f:ab:6b:84:9f:58:0f:82:bf:7c:e9:48:81: d5:74:34:fb:3a:0e:48:7c:88:1b:d6:ae:f4:05:0e: fc:ac:6d:13:39:0f:f5:d4:51:7e:26:19:2f:35:64: 51:2d:2a:34:cc:fa:36:81:e0:fc:a7:1d:24:57:ed: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DB:FF:23:8A:85:9E:EF:BB:4D:B7:93:FD:7F:3A:61:A1:2B:2C:E6 X509v3 Authority Key Identifier: keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:5e:7c:1d:4b:76:e7:44:12:fb:ab:b8:85:a7:c9:e4:50:c1: 89:89:ca:28:2f:0f:73:98:15:e0:ab:04:9a:ca:9b:f9:3f:cd: 08:a3:1f:3e:2a:6b:09:f1:ab:33:e0:bd:fa:fe:27:72:82:db: 67:a8:4a:6b:93:ce:e1:83:43:7f:37:2f:2e:95:f9:25:ee:25: 35:36:05:0f:b6:e8:8d:fb:2b:d7:42:7c:56:26:90:21:ad:3f: 2f:de:d3:2a:7c:e6:35:fb:8b:08:33:f7:de:db:18:4c:52:b5: 19:34:15:c9:6f:3e:61:9e:4a:6e:a8:80:45:d4:aa:7f:2e:c0: 44:8b:40:85:b3:e8:0a:f5:e2:ef:a6:49:40:f5:d3:54:fc:0d: 21:21:79:b6:53:87:d7:92:a8:55:aa:fb:20:20:35:1f:fe:5d: f7:19:8b:32:4a:c9:76:b9:1f:a6:3f:82:3a:ea:c2:06:62:a6: 7a:4b:2e:0e:28:f0:fd:02:36:4a:cc:ea:ea:19:28:89:2e:be: ee:25:13:a8:58:a1:38:b4:8b:b3:b0:7a:d1:7c:63:f6:f6:f9: b9:97:cb:54:d9:11:b1:d7:81:d7:d1:db:a4:05:e2:f7:7d:b7: 68:f2:2f:cd:86:3e:ad:52:4e:bf:88:66:10:0e:31:77:ff:2c: 8a:2f:69:f0 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNTA0MTUw MTM0MTVaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEyREJGRjIzOEE4NTlF RUZCQjREQjc5M0ZEN0YzQTYxQTEyQjJDRTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDHfmzScskf2+OySfbHx1zsv62pWiwHB27adyOjJpDA65OJlxEQ 6NwjNPpzFBK79RZxWzBqd/d4N5iPxGMaYNLXJllY4mVYFER3AOwOIZINCIikguzR n4Fji8bEZNKcqwVqHBrSL8BwFI9YCW8Nn8HXPsY2ilwkDadK9P6VdddtR+AUGbEu F7MJiAQYTBfA1QDFqyk5KrIXh0O9WBME/YgYjEKfKkBVezhMJX3n91SgFq7ZL1UQ uet6GqK2gBddqSaW4Ul6f6trhJ9YD4K/fOlIgdV0NPs6Dkh8iBvWrvQFDvysbRM5 D/XUUX4mGS81ZFEtKjTM+jaB4PynHSRX7RMbAgMBAAGjggJBMIICPTAdBgNVHQ4E FgQUotv/I4qFnu+7TbeT/X86YaErLOYwHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw L0E5MUE3MzgxMDAwMC8xMDE3My9FQnFRNU9kTVFEcS1qbDRLSC1qa0ZYcTlLdWMu bWZ0MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0B AQsFAAOCAQEAI158HUt250QS+6u4hafJ5FDBiYnKKC8Pc5gV4KsEmsqb+T/NCKMf PiprCfGrM+C9+v4ncoLbZ6hKa5PO4YNDfzcvLpX5Je4lNTYFD7bojfsr10J8ViaQ Ia0/L97TKnzmNfuLCDP33tsYTFK1GTQVyW8+YZ5KbqiARdSqfy7ARItAhbPoCvXi 76ZJQPXTVPwNISF5tlOH15KoVar7ICA1H/5d9xmLMkrJdrkfpj+COurCBmKmeksu Dijw/QI2Sszq6hkoiS6+7iUTqFihOLSLs7B60Xxj9vb5uZfLVNkRsdeB19HbpAXi 9323aPIvzYY+rVJOv4hmEA4xd/8sii9p8A== -----END CERTIFICATE-----Generated at Sat Apr 26 17:15:41 2025 by rpki-client