$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft File: 4qAcFfKuEP_hot-5OfujIiLIHos.mft (raw, json) Hash identifier: YWkUGOAbzMjtOmzjjeOVCexjQWMBP4OLJtkrufgt7Cw= Subject key identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B Certificate issuer: /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Certificate serial: 1E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft Manifest number: 089D Signing time: Wed 05 Nov 2025 14:27:55 +0000 Manifest this update: Wed 05 Nov 2025 14:27:55 +0000 Manifest next update: Thu 20 Nov 2025 14:27:55 +0000 Files and hashes: 1: 4qAcFfKuEP_hot-5OfujIiLIHos.crl (hash: 3TAT+nEyrgFcQo1CEIIh1Oqq/Fa1ANg64ULWBLHgiNc=) 2: GBW_VD7DOK2r1RAwqUE501IE0hw.roa (hash: b8qF1fCMRyn1zHloCjm2VRm+d5A9XnfJA4ozLK4JvKI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:07:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B Validity Not Before: Oct 15 01:32:29 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=C6CB7946F6B7FEB93EDC5DC4133E657403EFA99B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4a:e7:4a:64:d4:83:bc:9a:e7:1a:43:9c:fb: 2c:b7:2c:34:a2:17:09:61:30:55:8f:07:cd:e0:b2: 7f:44:cc:2f:57:a1:f2:9e:fa:7b:96:f8:4a:df:fb: 19:d6:44:07:47:68:54:48:49:8b:0d:cc:61:77:78: b3:11:e7:06:f0:2a:90:66:35:6e:d5:bb:96:51:ce: e6:5e:62:5c:65:6f:85:18:b3:4f:f3:d1:2a:87:5b: 3d:3a:b4:25:49:eb:7c:b8:67:3e:d8:d3:86:f4:26: d7:ce:c5:29:6a:bc:dd:50:71:18:97:7a:75:8a:a3: b5:eb:d3:87:3b:98:e5:a2:a7:06:e7:c5:a9:f6:5d: 27:5f:19:da:94:62:34:0e:a5:f1:c5:71:35:07:82: 17:fb:ac:f8:7b:63:8c:0e:c5:93:b0:ab:84:ec:22: a1:4c:6e:23:1a:3c:bb:f8:14:eb:3d:21:97:9e:da: dd:3a:92:69:98:03:40:2e:eb:9a:69:bb:d5:ea:b9: 4d:92:3b:82:d7:36:34:48:62:3f:d2:65:e7:83:f6: e5:27:7a:e4:47:3d:37:0b:13:ac:c1:24:8a:45:fa: 87:8d:20:10:d2:4b:45:b4:f1:13:28:06:8f:98:c6: 75:ee:8a:83:5a:37:d1:29:3f:25:5c:f0:31:03:38: b6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CB:79:46:F6:B7:FE:B9:3E:DC:5D:C4:13:3E:65:74:03:EF:A9:9B X509v3 Authority Key Identifier: keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:1e:c3:f6:58:b9:a5:3d:d4:34:b6:16:0e:71:29:47:82: 2e:fe:e9:59:0b:ce:ef:40:1d:5b:09:55:e8:56:13:81:e0:cd: 64:ff:8c:15:4b:4b:f5:33:58:0e:45:df:42:a1:e9:4d:b0:9a: 87:bf:57:7d:f5:52:79:ea:51:b6:2b:4e:d1:f0:42:0f:df:65: 02:39:19:c9:25:18:54:2c:f2:3e:c4:26:ae:d2:8d:68:d9:2f: 33:a0:b4:57:0e:99:7a:16:d6:9f:a3:fa:76:8f:61:ba:51:01: 02:5e:7a:d3:e9:60:2e:7e:d6:27:5c:cf:a6:85:b9:4e:71:ab: 8a:c2:11:4b:78:db:62:42:e7:bb:4a:c4:97:46:01:12:db:6d: 79:73:50:75:05:30:f2:15:20:d7:50:47:b4:fe:89:89:13:91: aa:2f:ab:71:01:35:42:10:c1:d4:c7:b0:c8:ea:88:cb:5b:a7: 87:fe:5d:6b:fb:4f:20:53:ef:90:76:17:6e:ef:27:99:ad:96: 42:31:d5:07:1e:44:18:07:3d:1d:60:56:ce:7c:e6:d0:c0:7f: a0:f2:17:ce:04:b7:86:5a:6a:22:85:ff:ce:3a:c0:74:8b:9c: db:08:5b:34:d3:55:93:d3:cc:a0:67:ce:66:ec:3d:15:b1:e7: d3:60:8f:4e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw MUMxNUYyQUUxMEZGRTFBMkRGQjkzOUZCQTMyMjIyQzgxRThCMB4XDTI1MTAxNTAx MzIyOVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQzZDQjc5NDZGNkI3RkVC OTNFREM1REM0MTMzRTY1NzQwM0VGQTk5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANhK50pk1IO8mucaQ5z7LLcsNKIXCWEwVY8HzeCyf0TML1eh8p76 e5b4St/7GdZEB0doVEhJiw3MYXd4sxHnBvAqkGY1btW7llHO5l5iXGVvhRizT/PR KodbPTq0JUnrfLhnPtjThvQm187FKWq83VBxGJd6dYqjtevThzuY5aKnBufFqfZd J18Z2pRiNA6l8cVxNQeCF/us+HtjjA7Fk7CrhOwioUxuIxo8u/gU6z0hl57a3TqS aZgDQC7rmmm71eq5TZI7gtc2NEhiP9Jl54P25Sd65Ec9NwsTrMEkikX6h40gENJL RbTxEygGj5jGde6Kg1o30Sk/JVzwMQM4tssCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTGy3lG9rf+uT7cXcQTPmV0A++pmzAfBgNVHSMEGDAWgBTioBwV8q4Q/+Gi37k5 +6MiIsgeizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxMTIvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJaUxJSG9zLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFBY0ZmS3VFUF9ob3QtNU9mdWpJ aUxJSG9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTEyLzRxQWNGZkt1RVBfaG90LTVPZnVqSWlMSUhvcy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAa8h7D9li5pT3UNLYWDnEpR4Iu/ulZC87vQB1bCVXoVhOB4M1k/4wV S0v1M1gORd9CoelNsJqHv1d99VJ56lG2K07R8EIP32UCORnJJRhULPI+xCau0o1o 2S8zoLRXDpl6Ftafo/p2j2G6UQECXnrT6WAuftYnXM+mhblOcauKwhFLeNtiQue7 SsSXRgES2215c1B1BTDyFSDXUEe0/omJE5GqL6txATVCEMHUx7DI6ojLW6eH/l1r +08gU++Qdhdu7yeZrZZCMdUHHkQYBz0dYFbOfObQwH+g8hfOBLeGWmoihf/OOsB0 i5zbCFs001WT08ygZ85m7D0VsefTYI9O -----END CERTIFICATE-----Generated at Wed Nov 5 15:49:23 2025 by rpki-client