$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft File: 7UPj94BvsDpkkHb7adM3UuxJFSI.mft (raw, json) Hash identifier: mS8c4Ep2ufzMEiGzJH7AsZgb3rFueDcqrB4KlsVntEM= Subject key identifier: 19:0C:CF:ED:67:98:4B:90:D1:E9:E8:0A:54:D3:08:34:70:E7:1E:7B Authority key identifier: ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22 Certificate issuer: /CN=ED43E3F7806FB03A649076FB69D33752EC491522 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft Manifest number: C9 Signing time: Sat 26 Apr 2025 11:21:58 +0000 Manifest this update: Sat 26 Apr 2025 11:21:58 +0000 Manifest next update: Sun 11 May 2025 11:21:58 +0000 Files and hashes: 1: 3DXFxCDhA7ZpML14V2xkZp_1bM0.roa (hash: njWfIXU9WnUjlIkE7u/GKMsXCDgX7AyHhcbi3b0iRMo=) 2: 7UPj94BvsDpkkHb7adM3UuxJFSI.crl (hash: eVIXG0RJtbCqPkiydxE1GtOawmweeL/QKsTrzeTrvVs=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:09:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED43E3F7806FB03A649076FB69D33752EC491522 Validity Not Before: Apr 15 01:38:16 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=190CCFED67984B90D1E9E80A54D3083470E71E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:1e:5a:f6:b1:d5:b2:34:51:32:b4:4c:0a: b3:e5:cf:70:e8:d2:8e:44:6c:13:39:1f:6a:28:b8: 59:1e:0b:9c:86:a6:f5:8a:26:c7:f8:96:3d:7f:93: 48:e7:85:58:2a:11:bf:aa:2a:7b:6a:cd:3a:e6:c6: 8c:95:48:e5:51:61:68:f8:93:8b:ce:40:65:72:a9: 68:0b:a4:80:3e:b5:d8:88:13:f8:52:5d:d2:74:4e: 6f:32:6e:b0:4d:9d:b3:04:42:40:4f:d4:c6:23:43: f0:67:40:7f:72:07:30:ed:fe:d1:88:0f:73:42:ff: 11:54:d5:16:b0:a4:bc:4e:2f:98:2a:52:d2:24:4b: 90:e2:63:c4:2b:48:30:c5:21:e0:c5:75:67:21:80: c5:76:d1:fc:09:c7:22:b3:d5:ed:b5:83:cc:d5:a0: d0:04:b8:54:fe:6a:7c:55:8a:af:49:ab:de:fd:77: 2c:d4:31:66:8e:09:c7:c4:dd:67:df:ec:25:8a:bd: 1d:be:c4:00:c1:43:96:ce:2a:7e:cb:ef:71:24:55: e5:cd:9e:af:2a:a1:04:6f:2c:12:ad:ca:4f:b4:74: c6:9c:13:a3:62:09:1a:4f:9b:2f:38:6f:02:3a:5c: 2b:13:f7:f6:c3:c7:75:60:38:3a:73:53:0b:99:29: 69:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:CF:ED:67:98:4B:90:D1:E9:E8:0A:54:D3:08:34:70:E7:1E:7B X509v3 Authority Key Identifier: keyid:ED:43:E3:F7:80:6F:B0:3A:64:90:76:FB:69:D3:37:52:EC:49:15:22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7UPj94BvsDpkkHb7adM3UuxJFSI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20231/7UPj94BvsDpkkHb7adM3UuxJFSI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a5:ae:ac:c8:ac:f0:96:0b:ce:db:a3:d8:95:be:37:ba:d4: b8:4b:63:ec:1a:38:56:7f:93:f1:24:30:ac:00:62:69:76:57: 5c:3b:3f:58:27:6d:4e:0d:0c:d9:5c:65:d1:ae:68:f5:fc:af: 4a:d0:15:0e:12:8b:9e:47:c0:84:7a:8d:91:bc:37:75:48:5f: be:01:9f:63:f3:a7:52:1e:be:c2:0e:7b:8b:fb:3e:6c:50:49: 57:82:e2:57:78:22:6a:7d:2b:20:c3:bd:7f:3c:ba:25:72:17: 5e:03:04:07:77:6b:9e:c0:b6:bf:a1:76:f0:1f:78:2b:dd:c1: 3c:78:53:5e:b2:68:17:08:bc:93:b9:4d:f0:46:db:bf:df:e9: 2d:65:d9:4e:9f:0e:b4:c7:d3:4b:d5:6d:b1:9a:3b:b0:2b:74: 75:7f:eb:5b:06:0b:63:34:09:0d:44:da:42:54:50:cc:fe:fc: dd:50:18:51:82:9d:75:b4:bd:23:7d:9d:a6:92:e8:51:9b:ab: db:08:91:de:66:6d:e9:aa:b1:f0:58:9c:d4:77:45:c9:79:14: 1a:9d:53:43:6a:d0:13:ce:57:7b:12:da:91:24:fc:3b:14:0c: 21:50:a5:35:7f:ba:f3:d1:c2:b4:a2:6c:3d:17:6e:17:ef:46: cd:63:77:b7 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRDQz RTNGNzgwNkZCMDNBNjQ5MDc2RkI2OUQzMzc1MkVDNDkxNTIyMB4XDTI1MDQxNTAx MzgxNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMTkwQ0NGRUQ2Nzk4NEI5 MEQxRTlFODBBNTREMzA4MzQ3MEU3MUU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL2yHlr2sdWyNFEytEwKs+XPcOjSjkRsEzkfaii4WR4LnIam9Yom x/iWPX+TSOeFWCoRv6oqe2rNOubGjJVI5VFhaPiTi85AZXKpaAukgD612IgT+FJd 0nRObzJusE2dswRCQE/UxiND8GdAf3IHMO3+0YgPc0L/EVTVFrCkvE4vmCpS0iRL kOJjxCtIMMUh4MV1ZyGAxXbR/AnHIrPV7bWDzNWg0AS4VP5qfFWKr0mr3v13LNQx Zo4Jx8TdZ9/sJYq9Hb7EAMFDls4qfsvvcSRV5c2eryqhBG8sEq3KT7R0xpwTo2IJ Gk+bLzhvAjpcKxP39sPHdWA4OnNTC5kpac0CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQZDM/tZ5hLkNHp6ApU0wg0cOceezAfBgNVHSMEGDAWgBTtQ+P3gG+wOmSQdvtp 0zdS7EkVIjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMzEvN1VQajk0QnZzRHBra0hiN2FkTTNVdXhKRlNJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvN1VQajk0QnZzRHBra0hiN2FkTTNV dXhKRlNJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjMxLzdVUGo5NEJ2c0Rwa2tIYjdhZE0zVXV4SkZTSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUpa6syKzwlgvO26PYlb43utS4S2PsGjhWf5PxJDCsAGJpdldcOz9Y J21ODQzZXGXRrmj1/K9K0BUOEoueR8CEeo2RvDd1SF++AZ9j86dSHr7CDnuL+z5s UElXguJXeCJqfSsgw71/PLolchdeAwQHd2uewLa/oXbwH3gr3cE8eFNesmgXCLyT uU3wRtu/3+ktZdlOnw60x9NL1W2xmjuwK3R1f+tbBgtjNAkNRNpCVFDM/vzdUBhR gp11tL0jfZ2mkuhRm6vbCJHeZm3pqrHwWJzUd0XJeRQanVNDatATzld7EtqRJPw7 FAwhUKU1f7rz0cK0omw9F24X70bNY3e3 -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:52 2025 by rpki-client