$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft File: OvKWmsuGFl3yI6UJuuG137TZBLg.mft (raw, json) Hash identifier: xXoHab9G8xWgHFH/0NuZS0DWHyyAkG4I/MdWnW/4Dag= Subject key identifier: E7:1B:72:4B:C9:42:3D:B0:56:CA:C7:A0:85:0B:1F:45:1E:8F:F6:34 Authority key identifier: 3A:F2:96:9A:CB:86:16:5D:F2:23:A5:09:BA:E1:B5:DF:B4:D9:04:B8 Certificate issuer: /CN=3AF2969ACB86165DF223A509BAE1B5DFB4D904B8 Certificate serial: 04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft Manifest number: 0159 Signing time: Wed 13 Aug 2025 21:57:45 +0000 Manifest this update: Wed 13 Aug 2025 21:57:45 +0000 Manifest next update: Thu 28 Aug 2025 21:57:45 +0000 Files and hashes: 1: JCkiQwFHtt4VZA-nvOE_DOqPPcc.roa (hash: e/2kBpmTz8xyo3NRjvD7/mjAQJFui4EVSXkTh2+WsmA=) 2: OvKWmsuGFl3yI6UJuuG137TZBLg.crl (hash: BHV+ZMskxQCCDB90h/8KF1r1/GZCzfro+lzJYL3LUBQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 21:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF2969ACB86165DF223A509BAE1B5DFB4D904B8 Validity Not Before: Jul 30 06:42:19 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=E71B724BC9423DB056CAC7A0850B1F451E8FF634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:b1:25:ee:c4:7e:ef:81:3d:c6:72:93:3f: 82:7f:70:be:75:62:b4:3c:4c:07:40:42:c3:69:39: bf:e8:99:30:f5:a2:95:85:2f:1e:73:cb:a9:46:72: 78:b9:ca:d3:fb:6d:ac:fd:5a:1f:9a:d9:26:e1:5d: ca:5d:c9:c7:51:af:3f:95:9f:d0:5c:4e:c9:77:f2: 08:ef:82:14:86:46:9a:4b:03:33:3b:a8:d2:86:91: 23:d0:20:72:08:c8:ed:32:19:b8:3b:fe:75:2f:ff: c1:7e:d6:c1:66:89:f9:28:02:f3:c3:59:e3:7f:c7: 01:05:f0:49:6a:16:c3:78:6c:9e:40:49:94:f1:6d: 8b:e5:82:d6:90:1b:e1:24:21:83:7f:93:3e:39:14: f9:e2:8d:68:c1:3a:45:07:18:33:52:91:cd:64:26: 98:9b:09:5c:16:c2:4c:1b:99:68:dc:39:ec:8d:74: 51:78:39:33:0d:15:ec:7f:6c:f3:8a:d1:18:0c:79: 28:29:55:28:5d:5b:1c:d8:f8:5a:d7:a7:c4:08:e0: ee:99:a9:a4:be:7d:df:28:3c:67:48:1e:d1:d2:92: 6d:9a:ff:c0:f8:a3:23:5d:8e:66:87:51:c0:e9:ce: 00:69:85:ec:87:e4:2a:4f:6b:36:93:d9:65:b0:4c: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:72:4B:C9:42:3D:B0:56:CA:C7:A0:85:0B:1F:45:1E:8F:F6:34 X509v3 Authority Key Identifier: keyid:3A:F2:96:9A:CB:86:16:5D:F2:23:A5:09:BA:E1:B5:DF:B4:D9:04:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:35:b2:f1:ae:38:97:db:c9:77:71:80:16:f7:80:9f:7d:a7: 5c:fd:12:3f:53:47:18:3a:df:f8:f4:e3:ac:3c:95:58:0c:41: 63:ed:ee:99:ca:be:9b:50:f5:3b:fa:21:2b:28:6e:0f:08:66: 50:f2:5c:b7:37:10:fe:a0:97:d1:25:3a:c7:c7:06:5c:de:f1: 19:c2:1a:e6:a8:2f:19:66:ea:e0:78:ff:3a:d3:b5:0e:15:93: d8:bb:90:d2:94:60:f3:e3:8d:b5:48:18:19:8f:e4:e5:1c:d8: 26:7f:be:2e:5b:45:50:26:42:d5:1b:9a:48:e7:a2:85:a1:5d: 49:52:6c:01:ff:2b:41:c5:7c:a3:45:12:47:cd:62:4c:0b:fc: 11:09:ac:4c:e8:fa:58:c1:b0:c8:85:a5:37:0b:a2:27:18:50: bc:fa:1d:68:ed:7d:05:58:a1:b2:3b:16:d5:28:0d:3c:99:2b: d7:03:b5:47:3f:8d:13:d4:40:ea:9d:ba:05:31:dd:37:fa:fe: 63:3b:3f:d1:c3:b4:b5:84:75:76:d2:6b:55:ad:77:f1:e1:39: 03:06:50:75:77:3f:b4:a3:74:4c:47:88:09:ea:56:2a:b1:f2: 91:ee:e2:14:f6:46:c9:f6:01:82:a3:ac:57:3c:5a:0a:82:92: c9:b6:1f:f0 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQUYy OTY5QUNCODYxNjVERjIyM0E1MDlCQUUxQjVERkI0RDkwNEI4MB4XDTI1MDczMDA2 NDIxOVoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRTcxQjcyNEJDOTQyM0RC MDU2Q0FDN0EwODUwQjFGNDUxRThGRjYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALQUsSXuxH7vgT3GcpM/gn9wvnVitDxMB0BCw2k5v+iZMPWilYUv HnPLqUZyeLnK0/ttrP1aH5rZJuFdyl3Jx1GvP5Wf0FxOyXfyCO+CFIZGmksDMzuo 0oaRI9AgcgjI7TIZuDv+dS//wX7WwWaJ+SgC88NZ43/HAQXwSWoWw3hsnkBJlPFt i+WC1pAb4SQhg3+TPjkU+eKNaME6RQcYM1KRzWQmmJsJXBbCTBuZaNw57I10UXg5 Mw0V7H9s84rRGAx5KClVKF1bHNj4WtenxAjg7pmppL593yg8Z0ge0dKSbZr/wPij I12OZodRwOnOAGmF7IfkKk9rNpPZZbBMqEUCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBTnG3JLyUI9sFbKx6CFCx9FHo/2NDAfBgNVHSMEGDAWgBQ68paay4YWXfIjpQm6 4bXftNkEuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwNC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3VFpCTGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3 VFpCTGcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwNC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3VFpCTGcubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAKDWy8a44l9vJd3GAFveAn32nXP0SP1NHGDrf+PTjrDyVWAxBY+3umcq+ m1D1O/ohKyhuDwhmUPJctzcQ/qCX0SU6x8cGXN7xGcIa5qgvGWbq4Hj/OtO1DhWT 2LuQ0pRg8+ONtUgYGY/k5RzYJn++LltFUCZC1RuaSOeihaFdSVJsAf8rQcV8o0US R81iTAv8EQmsTOj6WMGwyIWlNwuiJxhQvPodaO19BVihsjsW1SgNPJkr1wO1Rz+N E9RA6p26BTHdN/r+Yzs/0cO0tYR1dtJrVa138eE5AwZQdXc/tKN0TEeICepWKrHy ke7iFPZGyfYBgqOsVzxaCoKSybYf8A== -----END CERTIFICATE-----Generated at Wed Aug 13 23:43:50 2025 by rpki-client