$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json) Hash identifier: ywvfOTTAYrKyjeJrwNjoWXaLnGs4p1qRdoZWg1igR5Q= Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 7D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft Manifest number: 1394 Signing time: Mon 11 Aug 2025 08:45:36 +0000 Manifest this update: Mon 11 Aug 2025 08:45:36 +0000 Manifest next update: Tue 26 Aug 2025 08:45:36 +0000 Files and hashes: 1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=) 2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: 0McrA8A/ReLoNtpwEQXk3+9bFTeianymHmV1y6sousU=) 3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=) 4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=) 5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=) 6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=) 7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: Jul 30 06:37:08 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7: 56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b: 62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05: 53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e: 2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7: 08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c: 71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b: bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac: 57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b: ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be: a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4: 97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5: 83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3: 0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63: 9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca: 1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71: 2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9a:36:be:91:15:56:dc:f2:49:40:02:32:4c:33:16:75:86: 65:7f:a1:f1:e4:48:f9:7a:0f:17:a5:d2:fb:f9:9d:a4:e7:76: 31:a3:66:2a:a4:79:37:27:68:a4:21:46:95:c5:05:fe:1a:96: d3:4a:9c:34:ef:43:37:8a:3f:fd:15:28:91:38:29:18:c4:16: cc:a5:71:89:4d:6e:99:dc:2a:53:cd:a5:1c:60:9f:ed:14:a9: 06:3b:c1:21:de:df:d1:bf:1a:51:81:5b:55:50:d6:89:c8:7c: ef:be:0e:1e:81:ce:4f:c6:5d:14:cc:44:81:0f:86:15:53:18: 61:69:5e:5b:5c:08:e8:23:a6:14:41:cf:2d:72:8e:07:44:ff: 02:b1:3f:83:9e:b3:5b:a7:d1:ec:64:dd:e9:34:19:18:33:d5: ba:09:77:04:ca:11:bb:f6:26:39:24:28:57:cd:75:50:16:06: 92:9a:36:62:f3:4b:f6:55:f6:4f:ec:ac:b9:69:bc:e2:12:fd: b3:f0:7a:ed:df:b1:06:ea:12:51:53:89:93:0d:bd:f2:96:67: 98:cc:17:95:57:8b:a8:39:6a:d9:f8:a3:d7:95:c2:fd:85:23: 02:53:f1:40:8b:ef:7d:ee:dd:c8:19:c0:69:a8:dc:c0:d6:b3: 5b:20:2a:58 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2 RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI1MDczMDA2 MzcwOFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMTIzN0ZBMkM0N0E5NjFD MkY5NjZGM0IyMEJCMDlEMjQ3N0FFRjMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZOHN3hMrq5dD/HZETHVu6+NnqARWP0KxhtNZsbYsYEtc74Uxsm /M2sH2wFU020xFcQDAz2tMFpbWk+Kz3y2K4bxYUbPSnaGdr3CGApgds8pJKCnPEu Gc4McasHYN31hJOVHcNyq8ALvUkGmwbN8i4/EtozVJesV9mh1VknLIi0+QQXPU6L 7ilqQ1mhGzSEHAur+C2+oEJrTFD3lXzcBRJkEhfEl6myH+726ImBjKFELtKlg7Gv uj7CO2EQvoec4GajCsFh04R5Gfd8grztWp5jnoHZjrUQ4LLJ5RSoqO3KHXFBvn2X osI6ejbl/4dxL0YbOTlygT0BGK9ATs3cUJECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQSN/osR6lhwvlm87ILsJ0kd67zBzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1 uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOmja+kRVW3PJJQAIyTDMWdYZlf6Hx5Ej5eg8XpdL7+Z2k53Yxo2Yq pHk3J2ikIUaVxQX+GpbTSpw070M3ij/9FSiROCkYxBbMpXGJTW6Z3CpTzaUcYJ/t FKkGO8Eh3t/RvxpRgVtVUNaJyHzvvg4egc5Pxl0UzESBD4YVUxhhaV5bXAjoI6YU Qc8tco4HRP8CsT+DnrNbp9HsZN3pNBkYM9W6CXcEyhG79iY5JChXzXVQFgaSmjZi 80v2VfZP7Ky5abziEv2z8Hrt37EG6hJRU4mTDb3ylmeYzBeVV4uoOWrZ+KPXlcL9 hSMCU/FAi+997t3IGcBpqNzA1rNbICpY -----END CERTIFICATE-----Generated at Mon Aug 11 10:43:38 2025 by rpki-client