$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft File: jIbjLs6aPIUP6-ppZB81RCc9U3E.mft (raw, json) Hash identifier: NiyhIa7IEYD9bl01d91R3c0ghmTTIAhRu5CCUUQILSw= Subject key identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 Certificate issuer: /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Certificate serial: 0E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft Manifest number: 0409 Signing time: Sat 26 Apr 2025 19:37:58 +0000 Manifest this update: Sat 26 Apr 2025 19:37:58 +0000 Manifest next update: Sun 11 May 2025 19:37:58 +0000 Files and hashes: 1: 4x5a0Mk3ks_PlWC3C8hulDbbwR0.roa (hash: CxJiCQGLleqCmqGEXa06iF2gOZ1zcxP5VUFnrCsxEBk=) 2: VS6Dyh2blpj35aYjCGLrljr4Q6E.roa (hash: Xa1wCryL5pGUz40/Q/4Yvy2AsNOlEslmigjawYuNWgs=) 3: VxW2dGsDSxTbLIKgHIDXUOAkLi0.roa (hash: DDH6gVdQir1fVPcY9xW0QyELWDpCuu4V2xXCEejuBss=) 4: jIbjLs6aPIUP6-ppZB81RCc9U3E.crl (hash: tOqY/XBnWuz4efSR922lLoKO2J3WXNsPJvZBWw/5Vi4=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 19:11:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371 Validity Not Before: Apr 15 01:32:15 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=5ECE2B36424F7F10C9ED27ADCA06CD776B94A6BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:15:dc:d6:93:72:f4:2b:6a:0e:3f:9c:c7:f6: 38:f7:be:dd:56:80:77:bb:61:ef:bf:8c:bd:2b:8f: 63:ea:51:5b:d3:7b:ee:15:ae:f3:a0:59:39:f4:39: 8a:ed:56:cd:4f:cc:b7:02:99:fb:23:41:65:3a:9f: c6:fb:6e:80:f0:37:85:51:b0:71:b6:21:32:8f:ca: cc:d2:be:0f:91:d0:68:83:dd:c1:76:6a:d9:68:7e: 34:9e:8c:61:a7:fa:9d:ef:06:90:0a:43:80:5a:ed: d4:45:60:a2:8c:f3:4e:20:ed:51:53:98:dd:d3:c7: e4:9f:6b:28:45:9e:01:c8:5b:4c:d0:95:77:bd:e9: 4a:a5:52:d6:09:85:25:67:28:6a:1e:05:26:78:a0: 16:ac:6e:e0:a5:8b:cd:3c:15:84:7f:4e:5f:67:bd: 65:01:be:d2:71:4e:7d:3c:b4:fc:94:40:76:21:19: 72:91:32:5a:58:6b:70:20:82:c0:84:6a:c4:cd:cd: 45:8d:7c:0b:fd:6b:09:c7:6d:52:5c:69:53:4c:0f: 6a:4d:31:db:fa:9e:bd:e1:54:31:2e:b7:de:9d:dd: 43:72:2f:0e:d9:23:cc:50:5a:e4:9b:18:4b:a1:e6: 50:67:11:4e:cb:e7:29:ff:cd:f5:ad:a2:94:3f:e5: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:2B:36:42:4F:7F:10:C9:ED:27:AD:CA:06:CD:77:6B:94:A6:BF X509v3 Authority Key Identifier: keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:63:d6:e2:27:9c:89:d3:af:f3:1b:b5:f9:f2:69:14:9b:99: 80:91:94:85:cb:e3:02:e1:7b:f6:8c:58:39:e5:8e:62:b2:0c: ba:b3:da:52:a3:bf:be:26:52:6b:66:6f:e9:a8:85:22:a4:ef: ed:5b:b9:e4:78:78:02:fa:73:e5:50:d0:d4:43:b3:71:50:0a: af:38:86:73:89:a8:6b:cd:a3:4e:85:8a:37:55:46:f1:6c:a7: 52:6d:d5:2d:e9:b3:f3:af:d2:f2:83:e5:f0:e7:80:59:22:2b: 01:95:14:5f:01:60:e7:84:1e:91:df:11:ef:74:e9:7f:1d:4f: 3a:71:9a:e9:5e:f1:d9:e6:74:98:b5:dd:a7:27:a9:bb:b1:aa: 5c:aa:63:05:70:9e:a4:3e:fa:3e:2e:8e:41:b8:fd:25:73:1b: 7f:5d:64:95:ef:67:ca:95:c2:f9:0d:4b:e4:9d:61:ab:f9:0b: 7e:7a:d6:66:3e:5d:16:0c:f4:1a:37:ca:50:ad:a1:58:2d:3e: 2e:78:67:06:b0:92:88:3f:96:2c:a7:25:e3:f6:cc:ea:1b:d2: 1e:6b:21:b2:94:bc:8a:d5:57:ef:14:76:7b:77:54:32:49:78: 83:d3:e9:73:9b:12:dc:d8:b8:fb:a2:2d:90:6a:cf:90:c5:73: e3:e7:52:14 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2 RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI1MDQxNTAx MzIxNVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNUVDRTJCMzY0MjRGN0Yx MEM5RUQyN0FEQ0EwNkNENzc2Qjk0QTZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ8V3NaTcvQrag4/nMf2OPe+3VaAd7th77+MvSuPY+pRW9N77hWu 86BZOfQ5iu1WzU/MtwKZ+yNBZTqfxvtugPA3hVGwcbYhMo/KzNK+D5HQaIPdwXZq 2Wh+NJ6MYaf6ne8GkApDgFrt1EVgoozzTiDtUVOY3dPH5J9rKEWeAchbTNCVd73p SqVS1gmFJWcoah4FJnigFqxu4KWLzTwVhH9OX2e9ZQG+0nFOfTy0/JRAdiEZcpEy WlhrcCCCwIRqxM3NRY18C/1rCcdtUlxpU0wPak0x2/qeveFUMS633p3dQ3IvDtkj zFBa5JsYS6HmUGcRTsvnKf/N9a2ilD/lCmsCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRezis2Qk9/EMntJ63KBs13a5SmvzAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAVWPW4iecidOv8xu1+fJpFJuZgJGUhcvjAuF79oxYOeWOYrIMurPaUqO/ viZSa2Zv6aiFIqTv7Vu55Hh4Avpz5VDQ1EOzcVAKrziGc4moa82jToWKN1VG8Wyn Um3VLemz86/S8oPl8OeAWSIrAZUUXwFg54Qekd8R73Tpfx1POnGa6V7x2eZ0mLXd pyepu7GqXKpjBXCepD76Pi6OQbj9JXMbf11kle9nypXC+Q1L5J1hq/kLfnrWZj5d Fgz0GjfKUK2hWC0+LnhnBrCSiD+WLKcl4/bM6hvSHmshspS8itVX7xR2e3dUMkl4 g9Ppc5sS3Ni4+6ItkGrPkMVz4+dSFA== -----END CERTIFICATE-----Generated at Sat Apr 26 23:36:30 2025 by rpki-client