$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft File: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft (raw, json) Hash identifier: BnTbH+A9CaD+bT5XQUPzu3aOIUwONLhkklMDNKfulfY= Subject key identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D Authority key identifier: 03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 Certificate issuer: /CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Certificate serial: 1C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft Manifest number: 0898 Signing time: Wed 05 Nov 2025 18:31:54 +0000 Manifest this update: Wed 05 Nov 2025 18:31:54 +0000 Manifest next update: Thu 20 Nov 2025 18:31:54 +0000 Files and hashes: 1: A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl (hash: Ui9Pccg5/VQxN9fqmWPdMgW8uXB8cU1RRZ9sEkO1/9I=) 2: ZXvDioglJrKZ5klMtW2fHwRLrjY.roa (hash: TuQtJIaftfiZTHzoUCbGhnLWz4+7q2odXkFzDej2anY=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 19:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74 Validity Not Before: Oct 15 01:38:53 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=4353632FADC14AFD9D9E07E8A82596C0A7A55E5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:e5:b8:92:8f:96:ac:c7:e8:e2:61:ef:9a: c3:d8:43:10:3a:af:01:39:7c:5a:d8:49:d4:36:01: 6a:95:17:18:52:d0:e8:57:ed:80:d6:09:40:35:31: b0:6f:c1:84:c3:4f:aa:8e:03:46:d5:cc:2a:88:3c: fe:62:19:a8:62:be:f4:4d:7d:a4:e0:8c:e2:23:4a: b5:19:8c:a9:a7:35:46:27:91:1b:3b:19:d4:e6:7d: a4:a0:e1:cc:2c:12:c0:33:d3:70:a2:42:d9:d1:c7: ee:53:e2:d4:70:2d:f0:11:e1:3b:db:e8:46:b7:7b: ff:8a:53:b6:ee:79:d0:74:d0:36:8f:d4:65:4a:f2: 49:62:c3:61:fd:60:27:dc:5f:d3:39:81:68:77:34: ef:9f:5c:62:40:bf:9c:18:54:7f:d4:06:02:8a:ed: 11:00:14:5c:5f:1e:e1:35:c1:47:03:d5:38:18:c3: ea:c7:24:c5:85:8d:a5:f8:61:6f:34:3e:47:31:98: dd:9b:c4:00:cb:b8:ba:41:84:31:df:af:03:c7:df: ed:b5:15:be:b8:d0:a3:0f:09:5b:8d:a2:94:ad:5f: c5:19:83:b5:3d:8f:cc:9c:eb:d0:0e:5f:bc:b1:b8: 39:0d:5a:31:d7:b0:fe:51:ff:d8:11:d9:80:7d:83: 78:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:63:2F:AD:C1:4A:FD:9D:9E:07:E8:A8:25:96:C0:A7:A5:5E:5D X509v3 Authority Key Identifier: keyid:03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:ac:fc:e4:ca:a4:58:f6:b3:fc:50:47:ce:49:cc:27:72:63: 35:02:1c:ec:13:a6:9f:e2:97:03:d9:f3:3f:8b:74:e9:57:4d: 17:d3:91:1d:b6:5c:6d:7a:cd:62:c7:bc:b5:46:b5:49:7d:e1: ac:91:f7:e5:b5:5a:ab:a4:82:84:de:c2:1c:b6:00:cd:77:17: ca:ec:1d:37:39:9f:64:91:fc:26:e8:10:37:bc:9b:bf:d9:35: 59:db:fd:bb:6e:7d:82:d4:a3:7f:8f:a5:b0:9c:2c:11:89:cf: 60:2c:94:b9:1f:0f:8d:71:ae:ee:e6:0a:3d:a5:90:1b:47:9c: e4:3e:0d:94:dd:38:9c:e6:7b:78:0b:93:8a:0f:5b:47:b7:7d: d2:d8:9c:75:0a:86:58:f4:ff:f3:c2:f1:28:91:ed:fb:43:39: 9e:68:4d:5a:c4:8f:3e:4c:99:c4:76:12:7e:73:11:3e:36:0d: 14:c6:a4:af:80:a7:d2:62:00:3d:e5:87:76:2a:dd:4e:69:5a: 84:f9:fe:f5:34:be:cb:39:fb:4d:50:8a:d5:f3:21:0b:40:34: a8:cc:f3:76:9e:e2:8a:e5:8b:61:57:ab:1c:d3:97:3d:0b:6e: 8c:4f:ef:44:90:83:e3:2d:9c:26:5f:d9:c0:6d:d5:ce:eb:37: 81:66:b8:83 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMzcw NkZBMzlCOEU0NTRFQkExREMzRTczRkVEQzg4QTFFNDBBRjc0MB4XDTI1MTAxNTAx Mzg1M1oXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNDM1MzYzMkZBREMxNEFG RDlEOUUwN0U4QTgyNTk2QzBBN0E1NUU1RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALmR5biSj5asx+jiYe+aw9hDEDqvATl8WthJ1DYBapUXGFLQ6Fft gNYJQDUxsG/BhMNPqo4DRtXMKog8/mIZqGK+9E19pOCM4iNKtRmMqac1RieRGzsZ 1OZ9pKDhzCwSwDPTcKJC2dHH7lPi1HAt8BHhO9voRrd7/4pTtu550HTQNo/UZUry SWLDYf1gJ9xf0zmBaHc0759cYkC/nBhUf9QGAortEQAUXF8e4TXBRwPVOBjD6sck xYWNpfhhbzQ+RzGY3ZvEAMu4ukGEMd+vA8ff7bUVvrjQow8JW42ilK1fxRmDtT2P zJzr0A5fvLG4OQ1aMdew/lH/2BHZgH2DeGECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRDU2MvrcFK/Z2eB+ioJZbAp6VeXTAfBgNVHSMEGDAWgBQDcG+jm45FTrodw+c/ 7ciKHkCvdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyNTUvQTNCdm81dU9SVTY2SGNQblAtM0lpaDVBcjNRLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQTNCdm81dU9SVTY2SGNQblAtM0lp aDVBcjNRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjU1L0EzQnZvNXVPUlU2NkhjUG5QLTNJaWg1QXIzUS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDArPzkyqRY9rP8UEfOScwncmM1AhzsE6af4pcD2fM/i3TpV00X05Ed tlxtes1ix7y1RrVJfeGskffltVqrpIKE3sIctgDNdxfK7B03OZ9kkfwm6BA3vJu/ 2TVZ2/27bn2C1KN/j6WwnCwRic9gLJS5Hw+Nca7u5go9pZAbR5zkPg2U3Tic5nt4 C5OKD1tHt33S2Jx1CoZY9P/zwvEoke37QzmeaE1axI8+TJnEdhJ+cxE+Ng0UxqSv gKfSYgA95Yd2Kt1OaVqE+f71NL7LOftNUIrV8yELQDSozPN2nuKK5YthV6sc05c9 C26MT+9EkIPjLZwmX9nAbdXO6zeBZriD -----END CERTIFICATE-----Generated at Wed Nov 5 21:44:27 2025 by rpki-client