$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft File: XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft (raw, json) Hash identifier: 6TzWbpCPCpgafJM5faoWc9Ex+9+DccoUkcF0Vxk09Lo= Subject key identifier: 03:86:2E:13:6C:88:23:F7:E3:EA:AE:FB:36:B8:2B:23:D9:90:CD:03 Authority key identifier: 5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4 Certificate issuer: /CN=5C57DDC59248271E71E1325877992B9738E043D4 Certificate serial: 0F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft Manifest number: 0409 Signing time: Sat 26 Apr 2025 15:34:04 +0000 Manifest this update: Sat 26 Apr 2025 15:34:04 +0000 Manifest next update: Sun 11 May 2025 15:34:04 +0000 Files and hashes: 1: 65G9V41mQ90VyzHD99LI3r77Im0.roa (hash: MzfcIWz2tYvMZGqUXN4tvzqVrNcmdevmOYVYpyUBC+A=) 2: MRX767bZn92rg2CUVhgV02o0RxU.roa (hash: R6R/lm/Cp/pL6/egKdYcf2r9ghe7xmuxN0FnBAVogG0=) 3: XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl (hash: l8Zyy6tAJg1nA9SBEPRbm0GuIS1eo2tTkBebjBKm780=) 4: ggvItqld7s5E8svo5Nm5-e-kj1E.roa (hash: jeeBk7XXxYhHZUzV1OoJhiASmSF0DsZUcsaiicsDL/w=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 15:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C57DDC59248271E71E1325877992B9738E043D4 Validity Not Before: Apr 15 01:32:11 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=03862E136C8823F7E3EAAEFB36B82B23D990CD03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:79:a4:d1:e6:3e:c3:8e:3f:4e:bf:cf:fe:b2: 5b:6b:84:f2:87:46:4e:85:f9:bf:d0:15:05:42:ea: f7:e0:1c:b7:88:c5:4e:83:04:3f:a8:5a:18:3c:af: 26:ba:11:c0:aa:fe:3e:9a:3e:a8:3c:8c:1a:6a:56: 49:33:e8:1d:7f:36:84:1b:ac:5e:18:62:b6:28:d2: 9e:7d:0d:e8:c3:a7:5b:91:79:d4:b4:f2:34:7a:43: 83:8a:12:f3:ac:94:bd:df:6a:29:31:01:7a:3d:2c: 41:a8:ee:5f:be:09:ad:6d:e3:7f:9c:d6:f5:a4:42: 5e:7a:b1:27:cc:86:81:ee:5e:ef:fc:bf:12:df:60: e5:b7:c6:8e:47:2a:fa:59:a0:ca:55:62:ad:96:12: 9b:7b:d1:91:d8:ff:1c:aa:73:71:69:03:7d:4c:83: c2:be:75:3a:e7:c7:af:14:4a:6b:5f:75:a7:5a:6e: a6:1f:de:14:6f:45:19:98:ec:fc:ba:fd:9a:f5:bb: c6:58:ab:20:26:0d:9c:d2:ff:d3:a9:85:a0:15:95: 73:20:3b:fc:f2:1b:ba:88:df:55:d1:84:51:88:f3: 08:8c:12:01:de:a8:f2:af:00:11:7a:6e:45:54:ba: 25:e6:76:54:24:3e:40:a4:ab:87:41:46:84:6f:f2: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:86:2E:13:6C:88:23:F7:E3:EA:AE:FB:36:B8:2B:23:D9:90:CD:03 X509v3 Authority Key Identifier: keyid:5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:2f:cb:9e:d4:3b:79:e2:d1:38:94:50:b6:d7:6c:c0:dd:ca: 52:aa:70:53:48:c3:7e:5d:ec:a0:71:05:76:5f:df:9d:98:18: 85:f2:d8:12:c1:f7:0e:8b:ad:d5:ba:34:b7:20:c1:16:e8:1d: 3c:5d:13:a1:9d:6c:61:fb:78:5c:1b:0c:46:01:3d:31:9f:a6: d7:65:f9:81:21:5e:bb:7d:2e:63:29:00:af:ad:ef:e1:95:96: 1b:51:e5:15:73:8b:e5:b8:ac:9c:8e:63:e4:4e:c4:79:d0:b4: 4c:e2:f5:0e:10:72:c4:ff:f4:92:33:9c:53:c5:14:ce:f6:bd: 99:27:8c:e7:31:13:57:fe:04:e1:f3:6c:16:6c:6a:03:b1:30: 11:62:39:4e:b7:bc:ea:00:7b:96:b0:d8:5f:8d:02:fe:2b:5f: 41:3b:da:00:c5:67:a2:d5:b5:45:55:81:1a:95:1a:66:f7:73: b3:da:a9:28:91:b4:99:53:3c:d4:d8:13:bc:4b:b0:0d:0d:63: 9c:ce:f3:fa:19:31:9d:db:62:a1:4f:a4:4d:a1:23:c2:25:b4: bb:32:3e:d5:65:5f:0a:b0:86:61:6d:cc:46:ef:91:5b:d9:ad: 15:a1:c0:7a:a3:b5:25:94:48:5a:05:6d:7e:1d:bf:90:28:0a: d1:06:e9:0a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QzU3 RERDNTkyNDgyNzFFNzFFMTMyNTg3Nzk5MkI5NzM4RTA0M0Q0MB4XDTI1MDQxNTAx MzIxMVoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMDM4NjJFMTM2Qzg4MjNG N0UzRUFBRUZCMzZCODJCMjNEOTkwQ0QwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAO15pNHmPsOOP06/z/6yW2uE8odGToX5v9AVBULq9+Act4jFToME P6haGDyvJroRwKr+Ppo+qDyMGmpWSTPoHX82hBusXhhitijSnn0N6MOnW5F51LTy NHpDg4oS86yUvd9qKTEBej0sQajuX74JrW3jf5zW9aRCXnqxJ8yGge5e7/y/Et9g 5bfGjkcq+lmgylVirZYSm3vRkdj/HKpzcWkDfUyDwr51OufHrxRKa191p1puph/e FG9FGZjs/Lr9mvW7xlirICYNnNL/06mFoBWVcyA7/PIbuojfVdGEUYjzCIwSAd6o 8q8AEXpuRVS6JeZ2VCQ+QKSrh0FGhG/yqLkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQDhi4TbIgj9+Pqrvs2uCsj2ZDNAzAfBgNVHSMEGDAWgBRcV93FkkgnHnHhMlh3 mSuXOOBD1DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAxNTMvWEZmZHhaSklKeDV4NFRKWWQ1a3JsempnUTlRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEZmZHhaSklKeDV4NFRKWWQ1a3Js empnUTlRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMTUzL1hGZmR4WkpJSng1eDRUSllkNWtybHpqZ1E5US5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2L8ue1Dt54tE4lFC212zA3cpSqnBTSMN+XeygcQV2X9+dmBiF8tgS wfcOi63VujS3IMEW6B08XROhnWxh+3hcGwxGAT0xn6bXZfmBIV67fS5jKQCvre/h lZYbUeUVc4vluKycjmPkTsR50LRM4vUOEHLE//SSM5xTxRTO9r2ZJ4znMRNX/gTh 82wWbGoDsTARYjlOt7zqAHuWsNhfjQL+K19BO9oAxWei1bVFVYEalRpm93Oz2qko kbSZUzzU2BO8S7ANDWOczvP6GTGd22KhT6RNoSPCJbS7Mj7VZV8KsIZhbcxG75Fb 2a0VocB6o7UllEhaBW1+Hb+QKArRBukK -----END CERTIFICATE-----Generated at Sat Apr 26 17:33:48 2025 by rpki-client