$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft File: if8a6GSr-fEmFOMHZAT1VtVv-oI.mft (raw, json) Hash identifier: u9MeE+L45BXf/sqXAHAOyWhsh3TMfnIwfBTPT+LsSuc= Subject key identifier: F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17 Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82 Certificate issuer: /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82 Certificate serial: 12 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft Manifest number: 0685 Signing time: Mon 11 Aug 2025 05:51:12 +0000 Manifest this update: Mon 11 Aug 2025 05:51:12 +0000 Manifest next update: Tue 26 Aug 2025 05:51:12 +0000 Files and hashes: 1: L81cz7y0oxWNHbQl8rUmzHWBNyE.roa (hash: GPSOFB4tYhpekULTWP99E6iKTUsR4vN9JPL9sV2pNTo=) 2: if8a6GSr-fEmFOMHZAT1VtVv-oI.crl (hash: 3ZhJAHOcSM4TIjB1jmYhaP0FCkmfUUmUSqOQuVsivGA=) 3: lc34sKmnuTaf1zwMLkP85-29nLo.roa (hash: /WIhfZI0ncbjU2jZLBVHY+eMeD/i+XMv5UxJY0iSQYY=) 4: n8eQBYjvsUifgiHUdBIk3JHJA2E.roa (hash: lgdTeUR2d4aveju6dE0o2ntWyi20B2bFNgnTeqmPTpM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82 Validity Not Before: Jul 30 06:47:16 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=F1909AA87C867B21FDB4D114F22D6DF0B32EF517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:23:e0:34:8b:f8:f6:49:bf:f9:7e:b7:2b:fe: d8:d9:31:2c:93:47:7c:cb:15:ad:10:b8:16:94:05: 3d:fb:39:81:24:32:db:9f:20:5d:e4:b1:1d:77:47: 45:05:61:00:dc:b9:8d:b0:63:64:7f:a9:d6:22:c4: 93:cd:e5:8d:e7:c2:3c:d2:32:e1:4f:a4:50:36:42: c9:f7:09:e2:1e:bb:f1:52:7e:c1:ca:4b:c4:29:6f: 40:9c:05:45:de:be:8f:cb:81:f0:6c:dd:f0:79:6f: 8a:f7:8a:03:a9:ec:c6:f9:8e:be:e9:ba:c6:3e:7e: 80:ff:cc:c3:39:76:72:ff:12:2e:f3:46:6e:2a:04: ca:43:d7:8b:18:22:91:b0:77:3f:45:87:1b:f3:b7: e1:94:31:1b:4f:40:6a:7b:1f:f4:10:24:e0:7b:df: bc:ad:ef:52:63:d3:15:e6:50:c2:02:08:35:85:67: 64:0e:c6:db:61:9a:25:d4:c8:ff:ab:0b:b5:f1:9f: 43:20:95:aa:7e:d1:72:6a:77:10:fa:4b:8f:bc:3d: 03:eb:84:32:3a:e8:ca:6f:83:c3:b4:28:ac:b2:68: 89:2a:98:af:78:2e:bd:80:45:06:3c:54:ae:dd:36: 35:06:7f:a9:fa:98:3b:3d:87:fc:aa:55:2b:e0:15: 34:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:90:9A:A8:7C:86:7B:21:FD:B4:D1:14:F2:2D:6D:F0:B3:2E:F5:17 X509v3 Authority Key Identifier: keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:04:48:4d:1a:3d:07:a7:7d:78:86:20:f3:36:6e:a3:69:d0: f9:4a:9d:10:91:f7:f2:14:de:a6:7f:8e:a4:21:b5:18:55:fa: 79:c5:55:de:d1:1d:06:74:dc:54:e4:cf:1c:c1:a7:80:87:b1: 92:46:6a:7e:3d:65:4f:73:c0:7d:04:3e:4c:16:a1:a6:b0:ca: b3:d3:dd:f0:70:ef:55:ba:f3:04:3d:a5:f2:43:78:62:ac:55: c1:6d:3a:f4:98:de:fe:6f:7c:8c:88:66:d5:5e:42:9a:2f:8f: 1b:2c:84:66:4f:c7:9c:2a:b7:6d:ba:0c:73:70:82:38:9c:87: 55:3b:54:77:48:83:b7:b3:e2:d9:6a:be:0e:ff:ba:34:d5:90: 85:ea:47:b4:17:42:09:a7:8f:26:61:46:59:3f:68:32:e4:48: b4:01:f6:51:75:7b:04:78:69:31:9a:b6:1d:18:2c:73:e1:6b: 36:9f:4d:6a:fb:13:ab:73:e8:ce:ea:3e:aa:1d:84:db:cd:c7: 4c:74:d7:52:72:14:e6:45:8b:93:b9:64:72:e9:5e:cc:4e:cc: 86:12:ad:13:98:f6:03:18:08:5f:c7:80:0c:b3:e2:30:c2:74: 11:d0:56:83:cf:f5:37:a6:c1:a8:67:67:e5:39:89:32:35:8e: 15:0d:cb:64 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUZG MUFFODY0QUJGOUYxMjYxNEUzMDc2NDA0RjU1NkQ1NkZGQTgyMB4XDTI1MDczMDA2 NDcxNloXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoRjE5MDlBQTg3Qzg2N0Iy MUZEQjREMTE0RjIyRDZERjBCMzJFRjUxNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMIj4DSL+PZJv/l+tyv+2NkxLJNHfMsVrRC4FpQFPfs5gSQy258g XeSxHXdHRQVhANy5jbBjZH+p1iLEk83ljefCPNIy4U+kUDZCyfcJ4h678VJ+wcpL xClvQJwFRd6+j8uB8Gzd8HlviveKA6nsxvmOvum6xj5+gP/Mwzl2cv8SLvNGbioE ykPXixgikbB3P0WHG/O34ZQxG09Aansf9BAk4HvfvK3vUmPTFeZQwgIINYVnZA7G 22GaJdTI/6sLtfGfQyCVqn7Rcmp3EPpLj7w9A+uEMjroym+Dw7QorLJoiSqYr3gu vYBFBjxUrt02NQZ/qfqYOz2H/KpVK+AVNFMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTxkJqofIZ7If200RTyLW3wsy71FzAfBgNVHSMEGDAWgBSJ/xroZKv58SYU4wdk BPVW1W/6gjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNTAvaWY4YTZHU3ItZkVtRk9NSFpBVDFWdFZ2LW9JLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaWY4YTZHU3ItZkVtRk9NSFpBVDFW dFZ2LW9JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjUwL2lmOGE2R1NyLWZFbUZPTUhaQVQxVnRWdi1vSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6BEhNGj0Hp314hiDzNm6jadD5Sp0QkffyFN6mf46kIbUYVfp5xVXe 0R0GdNxU5M8cwaeAh7GSRmp+PWVPc8B9BD5MFqGmsMqz093wcO9VuvMEPaXyQ3hi rFXBbTr0mN7+b3yMiGbVXkKaL48bLIRmT8ecKrdtugxzcII4nIdVO1R3SIO3s+LZ ar4O/7o01ZCF6ke0F0IJp48mYUZZP2gy5Ei0AfZRdXsEeGkxmrYdGCxz4Ws2n01q +xOrc+jO6j6qHYTbzcdMdNdSchTmRYuTuWRy6V7MTsyGEq0TmPYDGAhfx4AMs+Iw wnQR0FaDz/U3psGoZ2flOYkyNY4VDctk -----END CERTIFICATE-----Generated at Mon Aug 11 10:44:47 2025 by rpki-client