$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.mft File: INfDMfvDXQhVTUG-Lpw78EsHX8k.mft (raw, json) Hash identifier: 2EMuxe6sJAuHWJuT4rqRxMfAaPisOG8WSAegfPwAvc4= Subject key identifier: 42:25:0B:CD:A3:84:3F:C7:05:93:34:6C:A7:FE:83:AB:78:57:23:28 Authority key identifier: 20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9 Certificate issuer: /CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9 Certificate serial: 05 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.mft Manifest number: 01E5 Signing time: Sun 04 May 2025 09:03:24 +0000 Manifest this update: Sun 04 May 2025 09:03:24 +0000 Manifest next update: Mon 19 May 2025 09:03:24 +0000 Files and hashes: 1: INfDMfvDXQhVTUG-Lpw78EsHX8k.crl (hash: tFUtERXbtqcx5axF0UjqJJzMqhnfJ7HWNfH+sD41Jo4=) 2: vk0KF9Hnes8-XtTxq7QYHqTSjTI.roa (hash: pfncDLL4IaerOshVST/mbYtNk53kIlpmvbb66EWqDzo=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20D7C331FBC35D08554D41BE2E9C3BF04B075FC9 Validity Not Before: Apr 15 01:38:06 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=42250BCDA3843FC70593346CA7FE83AB78572328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:71:a9:c6:ab:58:3a:4f:46:4c:8c:07:1e: 66:ce:07:f5:c2:79:5a:16:5a:f7:dd:ca:5b:e1:56: 73:3e:df:f8:b4:23:93:6f:b6:36:be:26:e7:05:02: f5:42:5a:c3:72:92:31:9d:78:97:6f:5e:fd:59:0a: 66:b2:59:cb:fe:7d:39:09:e2:7a:3f:03:45:6a:44: 1f:ae:88:48:16:88:9d:58:ec:98:8f:a9:e1:ba:c0: 20:79:a0:f5:65:84:27:a4:95:f6:ae:de:95:1a:3a: e1:b8:71:f1:1d:61:cd:d3:f0:41:0e:5f:80:1d:e9: 76:1b:fc:0e:4a:70:91:92:31:33:dc:2d:25:bb:65: 88:32:c3:1a:ef:93:da:ff:b3:18:aa:42:a3:7f:69: 2d:d3:31:49:3d:2a:3d:11:b1:0c:cb:1b:7e:57:01: c3:dc:d4:bd:73:d5:bb:a1:b9:e8:0a:5c:d7:d6:bc: e4:47:ea:32:46:8d:e5:e3:b3:f3:ee:c7:d1:81:13: 8b:4c:0e:e9:9d:60:0f:59:f3:a7:8f:0b:2f:9f:44: d7:1d:a5:b4:0e:3d:4b:f5:b1:78:29:fa:37:b7:11: b9:6d:d4:45:85:31:1d:71:e4:87:e7:ee:81:b0:d2: 8c:10:ac:65:23:4d:91:c1:03:b3:25:7a:16:c0:5a: fa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:25:0B:CD:A3:84:3F:C7:05:93:34:6C:A7:FE:83:AB:78:57:23:28 X509v3 Authority Key Identifier: keyid:20:D7:C3:31:FB:C3:5D:08:55:4D:41:BE:2E:9C:3B:F0:4B:07:5F:C9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/INfDMfvDXQhVTUG-Lpw78EsHX8k.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1455/INfDMfvDXQhVTUG-Lpw78EsHX8k.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:bf:b6:c9:b6:5b:b6:ea:b7:78:50:b2:e8:1c:0b:34:85:45: 53:b0:90:d1:00:79:75:a2:be:d1:46:5f:2a:73:a3:49:1d:b2: cb:68:2e:13:41:78:49:28:4c:b9:72:e6:fb:3f:67:a2:82:3f: 68:cd:c0:a7:8f:bd:cb:64:8c:3d:7e:ec:f2:da:4f:9e:71:8f: 08:b6:9a:36:51:d1:c0:7d:05:aa:bf:08:3d:c5:7c:8c:a6:eb: ac:f2:98:58:24:a6:1f:d5:66:af:2c:71:ea:d9:41:95:60:2d: 42:9e:18:0d:22:33:e1:ab:a6:f1:b5:65:33:8c:b8:78:6c:7b: 0b:e8:a6:f3:99:33:bd:96:56:55:0b:bd:3b:f9:c8:fd:f0:67: 70:9b:0d:37:c8:7c:6f:1f:21:2b:2e:42:45:54:e9:ff:04:26: 04:e5:92:d1:96:ef:55:d7:b7:0f:24:dc:38:ab:5f:57:7b:14: 3a:0c:eb:87:46:11:35:0d:1f:fb:7b:c5:4f:62:11:41:e8:8c: a9:41:30:83:38:1f:15:26:49:d8:e9:04:b4:a0:e3:2f:79:25: 47:8c:94:2e:32:7a:14:00:1b:59:e7:6a:90:62:6a:19:ba:70: 9b:cc:90:74:cc:79:a3:00:00:06:e1:3c:e1:3a:63:28:8f:4c: 9d:0f:70:2d -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMEQ3 QzMzMUZCQzM1RDA4NTU0RDQxQkUyRTlDM0JGMDRCMDc1RkM5MB4XDTI1MDQxNTAx MzgwNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNDIyNTBCQ0RBMzg0M0ZD NzA1OTMzNDZDQTdGRTgzQUI3ODU3MjMyODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL6RcanGq1g6T0ZMjAceZs4H9cJ5WhZa993KW+FWcz7f+LQjk2+2 Nr4m5wUC9UJaw3KSMZ14l29e/VkKZrJZy/59OQniej8DRWpEH66ISBaInVjsmI+p 4brAIHmg9WWEJ6SV9q7elRo64bhx8R1hzdPwQQ5fgB3pdhv8DkpwkZIxM9wtJbtl iDLDGu+T2v+zGKpCo39pLdMxST0qPRGxDMsbflcBw9zUvXPVu6G56Apc19a85Efq MkaN5eOz8+7H0YETi0wO6Z1gD1nzp48LL59E1x2ltA49S/WxeCn6N7cRuW3URYUx HXHkh+fugbDSjBCsZSNNkcEDsyV6FsBa+jcCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRCJQvNo4Q/xwWTNGyn/oOreFcjKDAfBgNVHSMEGDAWgBQg18Mx+8NdCFVNQb4u nDvwSwdfyTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTQ1NS9JTmZETWZ2RFhRaFZUVUctTHB3NzhFc0hYOGsuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9JTmZETWZ2RFhRaFZUVUctTHB3NzhF c0hYOGsuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTQ1NS9JTmZETWZ2RFhRaFZUVUctTHB3NzhFc0hYOGsubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAWL+2ybZbtuq3eFCy6BwLNIVFU7CQ0QB5daK+0UZfKnOjSR2yy2guE0F4 SShMuXLm+z9nooI/aM3Ap4+9y2SMPX7s8tpPnnGPCLaaNlHRwH0Fqr8IPcV8jKbr rPKYWCSmH9Vmryxx6tlBlWAtQp4YDSIz4aum8bVlM4y4eGx7C+im85kzvZZWVQu9 O/nI/fBncJsNN8h8bx8hKy5CRVTp/wQmBOWS0ZbvVde3DyTcOKtfV3sUOgzrh0YR NQ0f+3vFT2IRQeiMqUEwgzgfFSZJ2OkEtKDjL3klR4yULjJ6FAAbWedqkGJqGbpw m8yQdMx5owAABuE84TpjKI9MnQ9wLQ== -----END CERTIFICATE-----Generated at Sun May 4 12:09:36 2025 by rpki-client