$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft File: nlAE1ErymtEgmrhalfFg6D0k5Yg.mft (raw, json) Hash identifier: f964fs2gw4nZEQFkLzlMp/7QzAZdVvGxF/7IIvUWAFQ= Subject key identifier: B7:8E:B8:35:59:97:42:5E:8F:AA:76:C7:C4:EC:55:C5:47:51:F6:C5 Authority key identifier: 9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 Certificate issuer: /CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Certificate serial: 31 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft Manifest number: 0481 Signing time: Sat 26 Apr 2025 11:49:24 +0000 Manifest this update: Sat 26 Apr 2025 11:49:24 +0000 Manifest next update: Sun 11 May 2025 11:49:24 +0000 Files and hashes: 1: NPbv5Y53Y9q4ZrWaVWAiTuot0-g.roa (hash: jWUGi5sBEqS5eJDPVinJlCfBAxK6+KZlIUyKOyEND5k=) 2: WjaTHnzQMBw5VXL9vfH24X92Bo0.roa (hash: 2Rs3zjaU4GUbqiHpXeQPI+BY3AuzYXVjMNVJtfWRI8k=) 3: nlAE1ErymtEgmrhalfFg6D0k5Yg.crl (hash: R8CGeRXzmHBLryuut9H7WWPVGIn67a7am+SyWevyECM=) 4: p29xJ-f1R7shyyPghOZLIpVFzpg.roa (hash: 9fY6Urik21Nu6aRiOWt7PVjFUIhWHebj0eFVG1IMVAM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9E5004D44AF29AD1209AB85A95F160E83D24E588 Validity Not Before: Apr 15 01:37:30 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=B78EB8355997425E8FAA76C7C4EC55C54751F6C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:23:89:53:fa:6f:2e:e7:71:4d:87:a2:40: 5c:7a:8a:1b:1a:fd:56:45:74:84:e6:62:ae:bd:f8: 69:73:c8:02:16:9f:b5:b9:b1:ff:75:92:95:7e:f4: a0:17:b6:49:1c:76:b1:e2:2e:4b:7c:54:a3:26:9b: 27:d5:62:ac:fb:c6:33:35:d1:cd:db:79:37:00:a6: 7e:76:0e:c2:9b:0f:7e:b7:cf:03:4f:5b:b9:c8:be: ec:8a:b2:88:a5:34:a1:56:a2:7b:e9:eb:39:eb:87: 46:23:f5:c6:9a:06:54:37:e1:cb:6b:93:36:14:3a: d5:f1:81:1b:7c:ee:dd:0d:cb:53:de:e8:0a:1d:53: 5e:0c:7e:86:5c:cc:c7:05:33:a3:e7:b3:d4:3a:84: 96:da:53:b0:ca:61:64:af:5b:d0:9a:e3:f6:7c:fc: f8:44:61:6d:26:1e:ce:57:47:4d:f4:ec:a8:95:62: 99:6d:76:3b:8a:65:fb:56:1a:ac:d9:f4:a1:15:31: 9e:9c:f5:93:e5:c1:20:26:7d:58:0f:a6:04:e2:7c: a2:2b:59:26:82:e1:9a:6c:37:21:29:d8:81:1d:eb: e6:58:71:11:91:d6:d9:a1:a1:a7:b3:26:cb:4f:6d: d3:17:d0:e7:f5:de:9c:0f:b9:c6:a3:25:7f:1e:d7: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8E:B8:35:59:97:42:5E:8F:AA:76:C7:C4:EC:55:C5:47:51:F6:C5 X509v3 Authority Key Identifier: keyid:9E:50:04:D4:4A:F2:9A:D1:20:9A:B8:5A:95:F1:60:E8:3D:24:E5:88 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nlAE1ErymtEgmrhalfFg6D0k5Yg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20074/nlAE1ErymtEgmrhalfFg6D0k5Yg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e2:f6:62:5c:bb:89:03:04:ae:2f:d2:f8:a8:c4:00:e2:d5: 00:7d:ea:f3:15:21:b7:e2:e1:d5:51:70:15:70:08:98:c1:de: 9c:a5:4b:d0:8c:05:01:31:08:0c:ed:86:f1:6d:f4:15:d0:e4: 5b:47:c6:25:74:f2:24:5c:74:0d:aa:0a:18:b1:7b:8e:4d:63: 4b:c8:33:37:c9:2b:4b:3c:31:3e:2a:a2:b3:62:5c:bc:62:e2: 26:99:58:ef:7a:a3:31:f2:eb:cb:bf:a6:83:f6:45:d8:9b:9b: 98:6b:d7:bb:73:55:b9:2f:a7:e5:b4:51:2b:d3:6e:33:c4:14: c7:8e:bc:83:6d:90:db:1f:df:40:9f:d1:1b:95:8e:34:e3:c1: 5d:7b:40:ab:0d:b5:18:bb:df:f9:ee:07:11:b0:4e:b8:a1:1d: 93:8d:56:dc:a2:f4:d0:1a:2d:40:94:1f:06:cf:f3:c9:7b:f3: 1f:d8:26:06:0c:c2:53:64:62:58:6e:a4:a1:be:cc:9d:8b:fc: ac:a1:15:60:ad:8c:0c:ca:8e:94:4a:e4:49:2b:37:bd:95:da: 42:5d:35:3d:13:87:08:d8:85:94:ed:32:47:b5:3a:57:e7:b4: 15:c8:6a:f0:34:09:35:d2:ee:81:e1:c7:bd:47:64:60:af:8d: 90:2e:20:d5 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RTUw MDRENDRBRjI5QUQxMjA5QUI4NUE5NUYxNjBFODNEMjRFNTg4MB4XDTI1MDQxNTAx MzczMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoQjc4RUI4MzU1OTk3NDI1 RThGQUE3NkM3QzRFQzU1QzU0NzUxRjZDNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAM1CI4lT+m8u53FNh6JAXHqKGxr9VkV0hOZirr34aXPIAhaftbmx /3WSlX70oBe2SRx2seIuS3xUoyabJ9VirPvGMzXRzdt5NwCmfnYOwpsPfrfPA09b uci+7IqyiKU0oVaie+nrOeuHRiP1xpoGVDfhy2uTNhQ61fGBG3zu3Q3LU97oCh1T Xgx+hlzMxwUzo+ez1DqEltpTsMphZK9b0Jrj9nz8+ERhbSYezldHTfTsqJVimW12 O4pl+1YarNn0oRUxnpz1k+XBICZ9WA+mBOJ8oitZJoLhmmw3ISnYgR3r5lhxEZHW 2aGhp7Mmy09t0xfQ5/XenA+5xqMlfx7XOocCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBS3jrg1WZdCXo+qdsfE7FXFR1H2xTAfBgNVHSMEGDAWgBSeUATUSvKa0SCauFqV 8WDoPSTliDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNzQvbmxBRTFFcnltdEVnbXJoYWxmRmc2RDBrNVlnLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbmxBRTFFcnltdEVnbXJoYWxmRmc2 RDBrNVlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDc0L25sQUUxRXJ5bXRFZ21yaGFsZkZnNkQwazVZZy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN4vZiXLuJAwSuL9L4qMQA4tUAferzFSG34uHVUXAVcAiYwd6cpUvQ jAUBMQgM7YbxbfQV0ORbR8YldPIkXHQNqgoYsXuOTWNLyDM3yStLPDE+KqKzYly8 YuImmVjveqMx8uvLv6aD9kXYm5uYa9e7c1W5L6fltFEr024zxBTHjryDbZDbH99A n9EblY4048Fde0CrDbUYu9/57gcRsE64oR2TjVbcovTQGi1AlB8Gz/PJe/Mf2CYG DMJTZGJYbqShvsydi/ysoRVgrYwMyo6USuRJKze9ldpCXTU9E4cI2IWU7TJHtTpX 57QVyGrwNAk10u6B4ce9R2Rgr42QLiDV -----END CERTIFICATE-----Generated at Sat Apr 26 15:11:11 2025 by rpki-client