$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft File: qUFf6Td_P0uOqDjGYsS82Nz88bo.mft (raw, json) Hash identifier: gk6Oy5E6KCTuDaSCrlgPWB0NjwzlwGeYuDs30Y72psg= Subject key identifier: E0:A6:6C:D2:66:98:19:CE:AF:2C:C7:63:B0:4C:4F:06:75:38:72:84 Authority key identifier: A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA Certificate issuer: /CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA Certificate serial: 46 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft Manifest number: 0749 Signing time: Wed 13 Aug 2025 21:20:50 +0000 Manifest this update: Wed 13 Aug 2025 21:20:50 +0000 Manifest next update: Thu 28 Aug 2025 21:20:50 +0000 Files and hashes: 1: dD78RU1AZNeHp91d3gtECGbOrzM.roa (hash: fjdb3b9S+QpHF5ptw3ngZqtYKRwqLy6hqF6A/BNcV2s=) 2: lKxx0rG_dfMPNj-5vy_CoanxBxQ.roa (hash: HKOpUFL8jx6eext6CFYFkzVnfoKemAfJrcMIpVGiGm4=) 3: qUFf6Td_P0uOqDjGYsS82Nz88bo.crl (hash: 0ZJRUZjzXa5mAMpg4e3AioWgFgGG62OWLcdY1mUc3KE=) 4: saPfsiOBUPChqmhd5PRm7tap50o.roa (hash: rRPxQg5o4EZ9K7h6VzZwFBUqCcqT/ZKlwhdt2+kOsfE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9415FE9377F3F4B8EA838C662C4BCD8DCFCF1BA Validity Not Before: Jul 30 06:34:40 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=E0A66CD2669819CEAF2CC763B04C4F0675387284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:a0:8e:e2:b3:61:c1:28:fc:a8:32:95:ca: de:a6:5b:de:2a:76:44:d1:1b:d4:a1:bd:0f:be:dc: 91:a3:75:da:45:30:78:4e:a1:d7:8d:fd:46:8b:08: 2f:56:d9:17:8e:49:ba:58:a4:b3:c8:aa:b1:e7:66: 4d:ba:c3:5e:f1:48:4e:41:ec:d2:4f:0d:39:3c:70: 91:a1:79:1c:39:68:61:3c:3b:d1:6f:e5:c4:a4:d9: 15:a1:83:c9:14:79:34:0f:41:32:bb:c8:d5:bb:65: da:86:f7:0e:09:1e:43:9b:ea:cf:52:0c:59:f5:97: 77:f1:d7:85:03:b3:46:e0:cb:c2:95:7d:e7:27:4f: 68:af:b8:89:b1:c6:ef:f8:12:9e:ef:33:38:dd:eb: ad:ee:2f:d5:10:2d:4d:46:a5:80:d4:20:b4:b3:93: 40:75:0a:69:27:6f:dd:99:7d:99:0d:ea:b6:9b:e7: 36:94:1b:c0:40:58:57:a9:81:37:cc:5a:85:87:ec: e9:ac:1c:06:4e:f2:0e:46:7a:e8:40:b7:3e:06:36: d6:70:37:e1:d7:8e:ab:e9:4d:04:b5:b5:b4:dd:1a: 3f:f7:0b:84:8b:1e:57:1b:f6:fc:d3:96:80:8f:38: 95:40:24:54:e9:f6:09:aa:5f:3c:26:c4:63:bc:59: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:6C:D2:66:98:19:CE:AF:2C:C7:63:B0:4C:4F:06:75:38:72:84 X509v3 Authority Key Identifier: keyid:A9:41:5F:E9:37:7F:3F:4B:8E:A8:38:C6:62:C4:BC:D8:DC:FC:F1:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qUFf6Td_P0uOqDjGYsS82Nz88bo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/qUFf6Td_P0uOqDjGYsS82Nz88bo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:65:89:dd:48:1b:94:b3:80:d5:23:b1:b4:4d:33:b8:40:f4: 09:bb:32:70:a9:f0:b9:4c:35:cb:99:9d:10:45:db:3f:bc:14: 55:a9:e2:74:d7:a4:cd:c9:20:46:93:57:00:49:6f:c9:bb:51: 95:f4:25:48:c2:57:56:e6:2e:18:25:cb:5e:d0:4f:12:41:ea: 6b:7b:52:6a:b9:3e:72:45:ee:6d:20:bb:39:a0:83:04:56:c4: bd:da:d5:78:30:77:82:48:04:b6:ab:91:85:a7:0b:0f:9f:a5: 02:b5:34:30:ba:f9:a3:00:b5:75:87:bf:e6:b3:ae:68:96:98: 3e:bc:7a:09:ff:cd:f2:8f:fe:20:b8:79:5e:8c:d5:cb:51:0f: ed:c9:06:62:51:f8:eb:23:7c:55:c9:a9:13:ef:46:ae:25:ed: 01:e2:6f:36:f7:62:42:27:69:6d:a9:1a:d7:a1:46:bc:a3:41: a5:d9:0a:54:23:8d:fc:da:d5:82:0e:06:05:5c:76:59:ec:9c: 21:82:f4:a9:ad:91:5b:a4:ce:e3:0a:c9:74:4f:a9:3e:85:e6: a3:51:11:6c:be:33:b4:45:55:2c:1c:d4:2c:e6:94:1a:a2:dc: 5b:1f:23:05:e5:12:70:e5:53:54:87:12:30:14:94:22:56:67: f8:f8:f4:a3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTQx NUZFOTM3N0YzRjRCOEVBODM4QzY2MkM0QkNEOERDRkNGMUJBMB4XDTI1MDczMDA2 MzQ0MFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRTBBNjZDRDI2Njk4MTlD RUFGMkNDNzYzQjA0QzRGMDY3NTM4NzI4NDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANoQoI7is2HBKPyoMpXK3qZb3ip2RNEb1KG9D77ckaN12kUweE6h 1439RosIL1bZF45Juliks8iqsedmTbrDXvFITkHs0k8NOTxwkaF5HDloYTw70W/l xKTZFaGDyRR5NA9BMrvI1btl2ob3DgkeQ5vqz1IMWfWXd/HXhQOzRuDLwpV95ydP aK+4ibHG7/gSnu8zON3rre4v1RAtTUalgNQgtLOTQHUKaSdv3Zl9mQ3qtpvnNpQb wEBYV6mBN8xahYfs6awcBk7yDkZ66EC3PgY21nA34deOq+lNBLW1tN0aP/cLhIse Vxv2/NOWgI84lUAkVOn2CapfPCbEY7xZOfkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTgpmzSZpgZzq8sx2OwTE8GdThyhDAfBgNVHSMEGDAWgBSpQV/pN38/S46oOMZi xLzY3PzxujAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwODMvcVVGZjZUZF9QMHVPcURqR1lzUzgyTno4OGJvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcVVGZjZUZF9QMHVPcURqR1lzUzgy Tno4OGJvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDgzL3FVRmY2VGRfUDB1T3FEakdZc1M4Mk56ODhiby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTZYndSBuUs4DVI7G0TTO4QPQJuzJwqfC5TDXLmZ0QRds/vBRVqeJ0 16TNySBGk1cASW/Ju1GV9CVIwldW5i4YJcte0E8SQepre1JquT5yRe5tILs5oIME VsS92tV4MHeCSAS2q5GFpwsPn6UCtTQwuvmjALV1h7/ms65olpg+vHoJ/83yj/4g uHlejNXLUQ/tyQZiUfjrI3xVyakT70auJe0B4m8292JCJ2ltqRrXoUa8o0Gl2QpU I4382tWCDgYFXHZZ7JwhgvSprZFbpM7jCsl0T6k+heajURFsvjO0RVUsHNQs5pQa otxbHyMF5RJw5VNUhxIwFJQiVmf4+PSj -----END CERTIFICATE-----Generated at Wed Aug 13 22:06:33 2025 by rpki-client