$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft File: 2zuIrk16jERG-aguEsb9kWvoRaw.mft (raw, json) Hash identifier: zvCahXelEvRx+WWgHa39XKoqPH50Mn9/PeJU7m7hH+4= Subject key identifier: CE:11:AD:B7:00:82:51:49:60:B1:4B:A2:52:CB:74:18:D7:A4:D1:FF Authority key identifier: DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC Certificate issuer: /CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC Certificate serial: 05 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft Manifest number: 013D Signing time: Mon 11 Aug 2025 09:25:25 +0000 Manifest this update: Mon 11 Aug 2025 09:25:25 +0000 Manifest next update: Tue 26 Aug 2025 09:25:25 +0000 Files and hashes: 1: 2zuIrk16jERG-aguEsb9kWvoRaw.crl (hash: 2EW2GCtpU8qYja1+ZrIuBOwLES/Kz/wmFGbDPeyn3ws=) 2: w58ZEx12K4igsXALMZytyuSX7bo.roa (hash: m0JRwbsjHHSqVnqw9z0olXm9gs5iH6L30fsEWoguAfM=) 3: wghH3pFHDcdVZB63cJZaX-PKgA8.roa (hash: PkEdWuf5SZj7o5WAo8nE/wDExC5MtekKNPmnzi34WtY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB3B88AE4D7A8C4446F9A82E12C6FD916BE845AC Validity Not Before: Jul 30 06:42:24 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=CE11ADB70082514960B14BA252CB7418D7A4D1FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b9:7e:ed:81:98:b7:88:1b:ea:ba:5b:a0:ea: a6:06:3f:e4:fc:89:e9:1e:2c:d6:cf:52:5a:7b:f8: 61:43:d0:8e:17:91:48:9a:59:26:b6:53:42:b7:b9: cd:f5:5b:e3:41:a1:91:37:b9:d6:25:1d:63:96:62: e4:c1:60:4a:f4:15:34:6b:5a:a9:1b:a8:14:dc:92: b2:64:bd:5c:d6:8c:5b:cb:e7:f2:d1:55:d3:26:ed: c9:24:bf:ad:19:98:40:58:be:22:18:70:25:89:87: 14:72:61:cb:50:1d:f6:27:78:cd:a2:0f:2d:4f:74: 4b:77:b0:54:15:0c:a2:33:06:c0:91:04:9d:d1:ff: 56:ce:14:2e:3a:41:00:e0:c0:5b:b4:f0:cf:4c:97: 38:87:ef:d1:b9:ee:bd:af:2b:b3:dd:73:94:7f:a6: ed:d9:07:7c:7e:7c:d3:f7:7e:13:9b:fd:5a:cd:b0: 38:31:00:4f:5e:49:04:a6:6d:a9:4e:c5:92:f0:92: 88:b4:ec:4d:ca:b6:05:d2:8d:70:2b:d2:9f:a2:79: bf:6b:f9:59:be:87:6b:37:44:b8:2c:0a:ee:f4:7e: b0:26:28:23:d1:26:a4:db:a6:3a:24:d5:d9:56:4f: 4f:ea:b8:b3:c3:ce:5f:70:95:60:af:92:25:08:1a: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:11:AD:B7:00:82:51:49:60:B1:4B:A2:52:CB:74:18:D7:A4:D1:FF X509v3 Authority Key Identifier: keyid:DB:3B:88:AE:4D:7A:8C:44:46:F9:A8:2E:12:C6:FD:91:6B:E8:45:AC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2zuIrk16jERG-aguEsb9kWvoRaw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20098/2zuIrk16jERG-aguEsb9kWvoRaw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:9b:c2:cd:d8:91:d3:7a:5d:54:88:db:e4:8a:de:22:79:29: 4a:74:4c:c1:fa:b9:85:dd:9d:b4:97:3c:fa:2f:6d:c5:e6:4a: 82:5d:4e:72:f6:bf:e2:9d:01:fb:a2:10:2c:85:7e:19:1e:bb: ec:77:2a:3d:26:50:ed:4f:46:a4:41:fc:92:e3:3b:e3:5a:6a: 55:05:ee:82:c6:b5:4c:31:80:25:5d:36:e7:cc:c3:0f:50:41: a8:73:90:53:d4:cd:02:4a:15:22:d8:86:88:91:a8:3a:68:ea: f8:9a:71:0d:33:f2:df:28:eb:2e:d8:d6:f7:80:ea:9b:4a:25: 89:76:78:b0:1b:83:7c:5a:01:24:be:ff:6e:80:bb:91:6e:6d: d6:74:3d:7d:c2:9a:d9:3d:2a:f0:31:f8:0e:d0:8c:88:b9:49: 1e:e4:61:fd:0a:b2:67:55:91:4d:34:f2:ad:07:72:3f:69:6d: 62:5f:72:8c:9d:c6:8d:9e:e1:27:00:c4:fc:c0:98:c8:bf:5f: ea:52:21:7a:e4:22:5e:25:28:fd:22:5f:2b:04:8d:23:ac:af: 49:32:ed:1c:20:e0:c9:25:02:1f:ea:ce:96:f5:53:2d:2b:98: e8:1a:b4:ab:c2:1f:dc:56:14:f7:2b:df:ed:e1:aa:d6:56:06: d1:c4:0f:23 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQjNC ODhBRTREN0E4QzQ0NDZGOUE4MkUxMkM2RkQ5MTZCRTg0NUFDMB4XDTI1MDczMDA2 NDIyNFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoQ0UxMUFEQjcwMDgyNTE0 OTYwQjE0QkEyNTJDQjc0MThEN0E0RDFGRjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANO5fu2BmLeIG+q6W6DqpgY/5PyJ6R4s1s9SWnv4YUPQjheRSJpZ JrZTQre5zfVb40GhkTe51iUdY5Zi5MFgSvQVNGtaqRuoFNySsmS9XNaMW8vn8tFV 0ybtySS/rRmYQFi+IhhwJYmHFHJhy1Ad9id4zaIPLU90S3ewVBUMojMGwJEEndH/ Vs4ULjpBAODAW7Twz0yXOIfv0bnuva8rs91zlH+m7dkHfH580/d+E5v9Ws2wODEA T15JBKZtqU7FkvCSiLTsTcq2BdKNcCvSn6J5v2v5Wb6HazdEuCwK7vR+sCYoI9Em pNumOiTV2VZPT+q4s8POX3CVYK+SJQga+d0CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTOEa23AIJRSWCxS6JSy3QY16TR/zAfBgNVHSMEGDAWgBTbO4iuTXqMREb5qC4S xv2Ra+hFrDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwOTgvMnp1SXJrMTZqRVJHLWFndUVzYjlrV3ZvUmF3LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMnp1SXJrMTZqRVJHLWFndUVzYjlr V3ZvUmF3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDk4LzJ6dUlyazE2akVSRy1hZ3VFc2I5a1d2b1Jhdy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKm8LN2JHTel1UiNvkit4ieSlKdEzB+rmF3Z20lzz6L23F5kqCXU5y 9r/inQH7ohAshX4ZHrvsdyo9JlDtT0akQfyS4zvjWmpVBe6CxrVMMYAlXTbnzMMP UEGoc5BT1M0CShUi2IaIkag6aOr4mnENM/LfKOsu2Nb3gOqbSiWJdniwG4N8WgEk vv9ugLuRbm3WdD19wprZPSrwMfgO0IyIuUke5GH9CrJnVZFNNPKtB3I/aW1iX3KM ncaNnuEnAMT8wJjIv1/qUiF65CJeJSj9Il8rBI0jrK9JMu0cIODJJQIf6s6W9VMt K5joGrSrwh/cVhT3K9/t4arWVgbRxA8j -----END CERTIFICATE-----Generated at Mon Aug 11 13:06:50 2025 by rpki-client