$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft File: 8Et48MISgyF-CpFA1GeNl0s85r4.mft (raw, json) Hash identifier: 1McR7KKPyptP7y9d+QAIz5cz6jMluyGzl4biuJS1H4I= Subject key identifier: 62:E2:54:3D:6C:02:73:AA:1D:B1:D7:60:85:26:5B:0D:7E:30:11:5B Authority key identifier: F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE Certificate issuer: /CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE Certificate serial: 2A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft Manifest number: 0474 Signing time: Sat 26 Apr 2025 07:45:24 +0000 Manifest this update: Sat 26 Apr 2025 07:45:24 +0000 Manifest next update: Sun 11 May 2025 07:45:24 +0000 Files and hashes: 1: 8Et48MISgyF-CpFA1GeNl0s85r4.crl (hash: d6uyPpY/vgP8h2CEgseRvRW6MXWCq84srHNlPuC04JU=) 2: B6V6nfL3-Zis68fAMDlHKWzsxcs.roa (hash: L5n4/pqmmTqaceGCWJA2KQtzSwzEehjPzGaj+dV9Wcc=) 3: KmxbKIY6RkJdBfzJFTfiBxHkYPc.roa (hash: Bxgmtvjcw/hW80t5S3Kul18YtlNAP6QclVr41nvYUP8=) 4: ugRaSxvBb4ABf3Kg1JTq7zE65O8.roa (hash: qQoCCDnnQAMqHpvJoIMYfeKP75/6CV6SHR14G16AJUQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE Validity Not Before: Apr 15 01:37:43 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=62E2543D6C0273AA1DB1D76085265B0D7E30115B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:79:c5:5c:a9:bf:ef:df:0a:cf:8f:83:d3: 0f:de:ac:11:23:6a:a1:f6:14:e3:88:7e:10:bc:61: 32:b4:d7:3f:b6:86:77:0a:3c:ab:88:6c:59:f5:2c: 4c:a9:f7:52:39:28:a2:20:72:68:cf:32:ee:1d:0c: 16:80:19:4e:41:95:7b:15:ae:20:4b:96:c7:f2:9d: c6:f9:c9:e8:f8:81:ba:55:c7:52:40:16:4a:f1:c3: 02:47:1c:32:81:61:5e:26:1a:f6:21:9e:6c:47:9b: e5:36:31:39:bd:05:3b:5c:ea:d1:be:84:0d:6c:74: 09:6f:84:5b:ff:31:99:00:c1:e4:0f:3a:e8:33:90: dd:5e:4e:a8:4f:26:73:6e:b7:a1:c2:9e:90:dc:c8: 99:44:74:dc:15:8a:dd:ba:6d:f3:bd:a3:26:7e:3b: 08:c7:1e:b8:bc:20:ec:50:84:16:ca:eb:cc:b3:09: 37:85:8a:05:c8:c4:47:c0:a5:fc:34:8b:db:db:93: 60:25:6e:5a:6e:bf:6f:da:e5:68:75:16:b0:0c:9c: 0d:3b:16:8f:d5:a4:fe:a5:b4:2e:7a:33:bb:dd:5c: 0a:b6:58:39:3e:da:8c:e8:63:38:19:7f:88:ea:90: 70:ca:c0:a5:6f:fe:d1:83:ea:9e:ca:7b:79:9f:99: ac:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E2:54:3D:6C:02:73:AA:1D:B1:D7:60:85:26:5B:0D:7E:30:11:5B X509v3 Authority Key Identifier: keyid:F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c4:6a:bf:cc:6c:50:4a:42:44:b1:62:21:56:37:ab:54:cc: 0c:a0:70:36:1c:6f:19:c6:bc:94:54:5a:1f:6d:ef:b8:2e:cc: f8:95:81:9a:e3:52:7e:9c:1c:63:9f:b7:41:1f:71:1a:37:e1: c2:d8:5f:a0:42:e8:d7:c9:aa:b1:a1:19:8a:08:ad:a9:a7:3c: 83:ce:96:a2:a5:09:ca:b0:86:d8:3d:c9:3c:b3:bb:2a:1a:f7: 78:b1:ec:bf:9e:44:26:c2:cf:0a:01:8c:77:1a:90:a6:c0:42: ac:3e:c1:52:05:8b:33:a4:fd:bf:72:4a:b8:7f:d4:35:84:d6: f3:63:d7:ae:55:85:0f:25:7d:05:52:04:7b:28:17:0a:ae:44: 9e:8c:ae:29:11:c6:70:bb:38:79:be:2b:11:9b:f7:a0:4c:4d: 49:97:50:57:72:20:91:79:38:83:07:26:ba:42:9c:fc:82:c4: 4f:4e:46:70:e9:6d:ce:0b:20:c5:e6:01:1b:35:0a:7a:e8:03: d7:9c:96:68:a6:54:6d:75:12:97:cc:8e:7e:d1:64:ed:14:96: fd:2b:8e:b9:c7:94:52:31:e0:e0:98:91:ce:98:bc:d2:75:99: 81:1e:a5:de:3c:9b:21:62:71:0b:de:2d:c3:8d:1e:9a:d3:87: 72:72:f7:d2 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGMDRC NzhGMEMyMTI4MzIxN0UwQTkxNDBENDY3OEQ5NzRCM0NFNkJFMB4XDTI1MDQxNTAx Mzc0M1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoNjJFMjU0M0Q2QzAyNzNB QTFEQjFENzYwODUyNjVCMEQ3RTMwMTE1QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMOiecVcqb/v3wrPj4PTD96sESNqofYU44h+ELxhMrTXP7aGdwo8 q4hsWfUsTKn3UjkooiByaM8y7h0MFoAZTkGVexWuIEuWx/KdxvnJ6PiBulXHUkAW SvHDAkccMoFhXiYa9iGebEeb5TYxOb0FO1zq0b6EDWx0CW+EW/8xmQDB5A866DOQ 3V5OqE8mc263ocKekNzImUR03BWK3bpt872jJn47CMceuLwg7FCEFsrrzLMJN4WK BcjER8Cl/DSL29uTYCVuWm6/b9rlaHUWsAycDTsWj9Wk/qW0Lnozu91cCrZYOT7a jOhjOBl/iOqQcMrApW/+0YPqnsp7eZ+ZrKUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRi4lQ9bAJzqh2x12CFJlsNfjARWzAfBgNVHSMEGDAWgBTwS3jwwhKDIX4KkUDU Z42XSzzmvjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMDAvOEV0NDhNSVNneUYtQ3BGQTFHZU5sMHM4NXI0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvOEV0NDhNSVNneUYtQ3BGQTFHZU5s MHM4NXI0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTAwLzhFdDQ4TUlTZ3lGLUNwRkExR2VObDBzODVyNC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzxGq/zGxQSkJEsWIhVjerVMwMoHA2HG8ZxryUVFofbe+4Lsz4lYGa 41J+nBxjn7dBH3EaN+HC2F+gQujXyaqxoRmKCK2ppzyDzpaipQnKsIbYPck8s7sq Gvd4sey/nkQmws8KAYx3GpCmwEKsPsFSBYszpP2/ckq4f9Q1hNbzY9euVYUPJX0F UgR7KBcKrkSejK4pEcZwuzh5visRm/egTE1Jl1BXciCReTiDBya6Qpz8gsRPTkZw 6W3OCyDF5gEbNQp66APXnJZoplRtdRKXzI5+0WTtFJb9K465x5RSMeDgmJHOmLzS dZmBHqXePJshYnEL3i3DjR6a04dycvfS -----END CERTIFICATE-----Generated at Sat Apr 26 12:39:48 2025 by rpki-client