$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft File: aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft (raw, json) Hash identifier: OjaEXQQfTZQHxQta+j0eWEhyaqBhaPBWyZZtrVwFGpk= Subject key identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB Authority key identifier: 68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86 Certificate issuer: /CN=68EF440AA360C0D21035A81AD2C23339D2233F86 Certificate serial: 04 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft Manifest number: 0177 Signing time: Mon 11 Aug 2025 09:25:19 +0000 Manifest this update: Mon 11 Aug 2025 09:25:19 +0000 Manifest next update: Tue 26 Aug 2025 09:25:19 +0000 Files and hashes: 1: aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl (hash: 8B0ChT74Mezea6ALgHy2f2sWqQQxYCgs+u2DQtQkPWQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68EF440AA360C0D21035A81AD2C23339D2233F86 Validity Not Before: Jul 30 06:42:12 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=18B32BE5026519B2A4C25B34D0B7D89ED91881AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a3:00:31:ed:57:d5:b7:27:a5:af:c9:43:42: df:b4:e6:be:4f:08:0b:f6:10:ee:7f:3a:e9:fe:6b: a7:84:b0:a9:bf:a5:50:0d:ad:7e:53:f3:05:96:3c: 27:e9:03:d9:a6:49:fd:56:ff:65:d4:bc:4d:0e:f1: 5c:c7:b9:7f:9d:9b:c7:27:da:ed:c1:af:31:b1:9f: 56:67:3b:f3:91:7d:dd:42:44:a6:56:e0:c3:66:31: b5:0f:89:4c:03:eb:c4:9d:45:f7:35:88:f6:b1:cf: 6f:00:68:c7:00:01:d9:b1:1b:67:6e:a1:bb:70:43: d5:70:48:00:4e:34:67:64:f3:af:72:8a:97:6d:ab: 54:f3:09:4c:09:6d:8e:22:b9:f5:21:02:2c:03:e2: 06:bd:be:7b:8b:f9:81:4d:0e:9b:3c:65:88:b9:9d: a2:d6:7a:9a:78:18:02:78:97:c7:d1:9d:f0:f6:07: 16:6c:66:02:29:77:64:5f:0e:53:97:d6:f2:b2:3f: b2:1b:81:ca:a0:8d:36:18:53:3b:db:d7:47:d9:95: fa:a5:2c:6a:7d:10:91:65:ef:ee:5c:cb:51:a7:e5: 60:f2:a0:81:f6:e0:ba:ea:71:c2:2b:cc:ab:fc:fe: 7b:b5:50:01:02:12:3f:51:33:e5:b7:29:29:f3:ec: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B3:2B:E5:02:65:19:B2:A4:C2:5B:34:D0:B7:D8:9E:D9:18:81:AB X509v3 Authority Key Identifier: keyid:68:EF:44:0A:A3:60:C0:D2:10:35:A8:1A:D2:C2:33:39:D2:23:3F:86 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aO9ECqNgwNIQNaga0sIzOdIjP4Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20239/aO9ECqNgwNIQNaga0sIzOdIjP4Y.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:a7:2d:6a:30:74:87:d5:ec:ff:ed:2c:42:d0:d8:32:6c:d3: 21:09:1d:7c:5c:d4:d5:b7:49:7b:33:a8:d6:9f:cf:21:d8:97: 7f:72:f3:e3:87:6b:ea:c5:bf:9e:cf:05:18:73:65:8b:96:34: 39:56:c1:27:59:c0:8d:3b:fb:67:83:b9:1b:46:ef:e9:6f:19: 12:e9:51:25:05:97:49:c3:dd:c8:8e:fd:36:4d:5f:aa:bd:e5: 74:28:3c:ee:cd:75:b8:ed:8a:d7:0f:65:2a:12:6b:e5:b8:bb: fe:74:36:9a:47:a2:17:bb:0c:e4:30:ac:e6:f8:bf:25:26:ae: b7:fe:ed:1a:b9:dd:94:e0:bf:d3:28:26:fa:d4:74:1c:db:2d: 9f:4c:d2:e5:02:0d:9b:2d:4b:d1:ac:e2:d4:39:cf:90:73:b2: e3:5b:e1:9a:ed:a3:f3:22:67:c4:07:1f:4e:04:68:ac:6c:cf: c0:0b:b4:5a:a9:7f:96:9b:1c:d1:5b:77:44:a8:85:65:c8:c0: a9:12:fd:ee:fb:7b:30:4f:11:50:f1:e3:86:48:8a:68:55:43: 3f:5f:78:33:7a:39:95:b7:a0:cb:57:34:a7:39:28:34:9c:51: 88:f5:f9:ce:6c:89:ad:bd:f5:e1:c4:09:98:d7:d2:23:10:0a: 57:d5:1b:e3 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2OEVG NDQwQUEzNjBDMEQyMTAzNUE4MUFEMkMyMzMzOUQyMjMzRjg2MB4XDTI1MDczMDA2 NDIxMloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMThCMzJCRTUwMjY1MTlC MkE0QzI1QjM0RDBCN0Q4OUVEOTE4ODFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOKjADHtV9W3J6WvyUNC37Tmvk8IC/YQ7n866f5rp4Swqb+lUA2t flPzBZY8J+kD2aZJ/Vb/ZdS8TQ7xXMe5f52bxyfa7cGvMbGfVmc785F93UJEplbg w2YxtQ+JTAPrxJ1F9zWI9rHPbwBoxwAB2bEbZ26hu3BD1XBIAE40Z2Tzr3KKl22r VPMJTAltjiK59SECLAPiBr2+e4v5gU0OmzxliLmdotZ6mngYAniXx9Gd8PYHFmxm Ail3ZF8OU5fW8rI/shuByqCNNhhTO9vXR9mV+qUsan0QkWXv7lzLUaflYPKggfbg uupxwivMq/z+e7VQAQISP1Ez5bcpKfPsWXcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQYsyvlAmUZsqTCWzTQt9ie2RiBqzAfBgNVHSMEGDAWgBRo70QKo2DA0hA1qBrS wjM50iM/hjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMzkvYU85RUNxTmd3TklRTmFnYTBzSXpPZElqUDRZLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYU85RUNxTmd3TklRTmFnYTBzSXpP ZElqUDRZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjM5L2FPOUVDcU5nd05JUU5hZ2Ewc0l6T2RJalA0WS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmpy1qMHSH1ez/7SxC0NgybNMhCR18XNTVt0l7M6jWn88h2Jd/cvPj h2vqxb+ezwUYc2WLljQ5VsEnWcCNO/tng7kbRu/pbxkS6VElBZdJw93Ijv02TV+q veV0KDzuzXW47YrXD2UqEmvluLv+dDaaR6IXuwzkMKzm+L8lJq63/u0aud2U4L/T KCb61HQc2y2fTNLlAg2bLUvRrOLUOc+Qc7LjW+Ga7aPzImfEBx9OBGisbM/AC7Ra qX+WmxzRW3dEqIVlyMCpEv3u+3swTxFQ8eOGSIpoVUM/X3gzejmVt6DLVzSnOSg0 nFGI9fnObImtvfXhxAmY19IjEApX1Rvj -----END CERTIFICATE-----Generated at Mon Aug 11 10:48:50 2025 by rpki-client