$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft File: 1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft (raw, json) Hash identifier: ECOAN7JvepyhD29KpHWTJ0+B0gHWB6tOF0ztgA5bWOc= Subject key identifier: 02:33:C9:15:3E:63:D4:1E:C5:CF:8A:3C:E2:98:1C:94:E6:BE:2C:AA Authority key identifier: D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51 Certificate issuer: /CN=D6B98D9AE608D1E060709B960EEF133AF2B81351 Certificate serial: 51 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft Manifest number: 0A12 Signing time: Sun 22 Jun 2025 06:38:55 +0000 Manifest this update: Sun 22 Jun 2025 06:38:55 +0000 Manifest next update: Mon 07 Jul 2025 06:38:55 +0000 Files and hashes: 1: 1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl (hash: NzY2eMpGvZiW831AdAmUrrwSSCJB30pa09AgRwFblsY=) 2: P5UZIjrF1UC1RAsFdpoQoMcvcRg.roa (hash: 3U4/yQ8JX6JuJHTZoDcXqShiZP2C8t5GO3JUbTIp4hk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6B98D9AE608D1E060709B960EEF133AF2B81351 Validity Not Before: Jun 15 01:33:06 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=0233C9153E63D41EC5CF8A3CE2981C94E6BE2CAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:3d:19:da:52:ff:ce:96:ca:fe:d1:c6:7f: 61:d8:43:3b:20:6c:43:e7:63:35:1e:6f:f7:ef:84: d9:63:63:1f:cd:0a:14:8b:a7:88:6c:ce:9b:40:e4: ad:40:ec:26:95:c5:27:ec:2f:07:50:81:37:9d:3e: cf:21:ae:53:08:56:0f:fc:02:11:64:73:2d:25:1f: 1a:56:7b:a1:01:76:33:af:81:d8:d8:04:fb:79:ec: 4c:02:05:60:67:fc:0e:cc:cb:b8:46:b1:3a:20:76: 1c:71:2c:98:a4:8f:7c:c5:78:ba:d1:fc:84:cf:b0: 5f:44:a9:4f:0d:97:7f:58:a4:7f:6f:c2:49:54:1c: 2c:c4:4b:9e:38:b7:b5:73:4a:4f:a0:ab:6d:1f:0c: 8a:32:cb:1c:83:f2:ba:3b:c3:fe:db:b7:a2:6a:43: fe:c0:2e:54:42:df:4e:8d:c2:45:52:a5:c1:19:2c: e9:36:3d:f9:e5:27:b9:70:75:7a:3f:f0:31:75:4e: 02:51:6a:5a:b4:9d:8f:38:a5:f5:d6:15:61:39:e9: 8b:ff:f3:09:9d:c9:5e:31:c1:ee:4d:bf:4c:95:b3: 4a:4c:88:af:88:82:07:c0:75:c7:e0:15:36:e8:c5: 1a:17:4e:b4:0c:45:85:d4:ab:ae:41:e1:43:39:3b: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:33:C9:15:3E:63:D4:1E:C5:CF:8A:3C:E2:98:1C:94:E6:BE:2C:AA X509v3 Authority Key Identifier: keyid:D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:d3:a6:ff:b2:42:6e:9f:1a:3e:3a:94:b5:9f:69:bd:6f:1e: 0a:b2:50:3a:c3:9b:5c:b6:55:68:5f:94:e6:1d:65:ee:2a:d0: 8f:07:ce:1a:06:a1:78:e3:bd:5b:d9:f2:a2:90:09:83:09:f0: 64:67:aa:0c:46:ce:82:5b:f8:9e:90:86:9f:a7:12:40:05:1a: 07:4e:65:29:f8:0d:2e:2e:64:7e:de:a3:42:e3:ce:46:9e:0e: b9:1b:a0:59:12:df:96:90:16:54:26:24:ca:82:84:ca:69:3e: 5a:6b:e6:44:8c:d3:3a:cf:e7:48:7a:81:e1:00:8f:85:9c:2c: 15:7f:40:45:65:b2:cd:bc:4f:c7:04:b2:28:5d:bf:43:4f:78: 94:39:b8:44:f4:99:7f:17:6c:e1:a9:d0:93:87:88:b8:bd:d8: de:af:5c:ba:3e:1b:71:14:bb:f0:c9:e4:58:29:14:54:ac:72: a8:01:3b:7f:da:1e:0f:59:50:b2:07:1d:b2:62:c2:71:e8:70: 42:11:f8:f9:58:73:60:f8:08:32:be:63:38:71:1d:57:00:5e: fd:e7:93:1e:3a:64:97:fe:cb:b6:41:68:54:d4:ad:40:7a:4b: 0b:a5:59:75:39:72:6d:66:e6:a9:0a:24:ea:75:37:e8:0f:f6: 2c:a3:39:00 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENkI5 OEQ5QUU2MDhEMUUwNjA3MDlCOTYwRUVGMTMzQUYyQjgxMzUxMB4XDTI1MDYxNTAx MzMwNloXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoMDIzM0M5MTUzRTYzRDQx RUM1Q0Y4QTNDRTI5ODFDOTRFNkJFMkNBQTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL38PRnaUv/Olsr+0cZ/YdhDOyBsQ+djNR5v9++E2WNjH80KFIun iGzOm0DkrUDsJpXFJ+wvB1CBN50+zyGuUwhWD/wCEWRzLSUfGlZ7oQF2M6+B2NgE +3nsTAIFYGf8DszLuEaxOiB2HHEsmKSPfMV4utH8hM+wX0SpTw2Xf1ikf2/CSVQc LMRLnji3tXNKT6CrbR8MijLLHIPyujvD/tu3ompD/sAuVELfTo3CRVKlwRks6TY9 +eUnuXB1ej/wMXVOAlFqWrSdjzil9dYVYTnpi//zCZ3JXjHB7k2/TJWzSkyIr4iC B8B1x+AVNujFGhdOtAxFhdSrrkHhQzk7CSkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQCM8kVPmPUHsXPijzimByU5r4sqjAfBgNVHSMEGDAWgBTWuY2a5gjR4GBwm5YO 7xM68rgTUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwOTkvMXJtTm11WUkwZUJnY0p1V0R1OFRPdks0RTFFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMXJtTm11WUkwZUJnY0p1V0R1OFRP dks0RTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDk5LzFybU5tdVlJMGVCZ2NKdVdEdThUT3ZLNEUxRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCD06b/skJunxo+OpS1n2m9bx4KslA6w5tctlVoX5TmHWXuKtCPB84a BqF4471b2fKikAmDCfBkZ6oMRs6CW/iekIafpxJABRoHTmUp+A0uLmR+3qNC485G ng65G6BZEt+WkBZUJiTKgoTKaT5aa+ZEjNM6z+dIeoHhAI+FnCwVf0BFZbLNvE/H BLIoXb9DT3iUObhE9Jl/F2zhqdCTh4i4vdjer1y6PhtxFLvwyeRYKRRUrHKoATt/ 2h4PWVCyBx2yYsJx6HBCEfj5WHNg+AgyvmM4cR1XAF7955MeOmSX/su2QWhU1K1A eksLpVl1OXJtZuapCiTqdTfoD/YsozkA -----END CERTIFICATE-----Generated at Sun Jun 22 11:19:10 2025 by rpki-client