$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft File: 37zT-LypGRXEUzosCmnD01suaI0.mft (raw, json) Hash identifier: MwRqQtnL1GCvmzpn/kTgEUe338cuNliCRoC6yGsJaH0= Subject key identifier: 7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2 Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D Certificate issuer: /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Certificate serial: 4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft Manifest number: 08E5 Signing time: Wed 05 Nov 2025 18:43:14 +0000 Manifest this update: Wed 05 Nov 2025 18:43:14 +0000 Manifest next update: Thu 20 Nov 2025 18:43:14 +0000 Files and hashes: 1: 37zT-LypGRXEUzosCmnD01suaI0.crl (hash: 9KSVlVt5ABqGkapKsxXnSqkq6+CaOe8AeWnEI34QLMo=) 2: 6r-x7ZYs-ig2wnGm9Qq-ubGaZQo.roa (hash: BjmZT2lb/riXC+h5i1urqn46QnR1Xtdbxhy1DuKUEIw=) 3: 7A-zPi4JSi2YH8nDIHY5zUAQARE.roa (hash: nDxyaDJT/t9BJzwOcA+l/1FDYTMTvudOGfhPFjBDIhI=) 4: 8Mq80qRnEbRl2VkJdsCOZKemiTg.roa (hash: WKnthHKDLSdjrHaCvr/ZfOs7B/Kvv7XHrMYNWUbMpGY=) 5: DiRSBVwDKngIdQFrhrNwjRc6-Z4.roa (hash: BF3E3GM4kGdxTYt7ws3S3xEMo5DJ6QszekHfRvGcRU0=) 6: IDoNXt4ftRR1nGiZr7Q_3SbVv5M.roa (hash: qK7Hg/vASw41iVrhP0rRTWdrFRxf+CTq5Fg2B/RSjyE=) 7: M6IcLAO4sXD31g87BuS8KT2P2N8.roa (hash: XChDYBif49x1OoRNolkwUgPrXpC9bUCAL0sRbBZk5xs=) 8: YshT9_F4zxKhDZfg8d-D51dNGjg.roa (hash: OZR0xVucQSuSXglV2CE7SP/ck1J/MHo0TEtmP5xfjv0=) 9: mBfjVw34fIt9Wa2z0hq1ZJp_2Zw.roa (hash: qaCcuJeVY/tLWJCxNmST22fs2K0jYaUnpfi0ilmOQMo=) 10: nufsSH2JBiHyBtP2pk8sFt2KfdU.roa (hash: Gl3NsjSbbw80Ln/4CatqdRh5GB5X+Rxu23U/v3gPz3o=) 11: tvlUxUoN8FQX5b9wcKnF4hzwY60.roa (hash: Y1iFLcrNcQm3tM2jTXFJkumxgEgJfYoTO4XdVBiZUnc=) 12: vlsn6v6O-wxpVFihCmiM9irOvNE.roa (hash: kgYurlTYMvlZGQwmrnwythRVUFKmlGeMR1yZub43mdQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D Validity Not Before: Oct 15 01:37:31 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=7BE2E21D1CEE6637B7532027D10736DC92958DD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:d8:f6:56:01:c7:a9:1a:57:d7:a4:c8:f1: d8:d4:ee:ab:ce:4d:48:cb:e6:16:f1:7b:c2:8d:ac: 1d:2c:3c:53:f8:d4:12:ef:78:8f:f8:6f:a9:51:5e: f7:39:58:46:3d:5f:f5:c0:2d:69:f7:04:30:1a:86: d2:09:60:89:16:8c:15:6c:48:47:6a:96:18:70:02: e5:9d:07:17:ee:40:fe:1d:38:fb:b9:7c:a4:60:7c: 90:61:a8:b8:4c:af:b2:b8:9d:05:1d:11:51:a0:de: 9f:fa:d7:5a:1a:30:b5:01:a1:37:0e:cc:bf:21:76: 0f:e4:7e:18:02:4d:04:ec:f1:e6:a4:70:e4:ae:da: 92:56:bc:c8:2c:da:de:1d:cf:91:f3:06:9d:03:dc: a6:7e:6e:da:c2:7c:90:a8:51:ac:a4:64:83:24:ee: 5f:57:bf:c7:87:eb:75:8c:d1:92:39:f1:0a:0a:f4: 6d:e1:82:e4:83:06:fb:a1:6c:43:e7:cf:46:10:f0: 02:96:dc:99:14:3e:f5:23:43:92:5f:46:80:ac:19: 6e:88:1f:61:ea:c6:68:c4:af:1f:e7:98:b4:49:10: 93:7d:19:fe:4a:f3:f4:16:51:a1:31:f9:55:3f:e4: c7:ad:04:09:8b:02:c5:c4:39:54:21:af:10:15:90: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E2:E2:1D:1C:EE:66:37:B7:53:20:27:D1:07:36:DC:92:95:8D:D2 X509v3 Authority Key Identifier: keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:49:b6:6b:f4:05:cf:17:7a:04:6e:ee:52:54:d3:cd:59:21: 9d:ee:f3:1f:61:df:2e:9a:4a:84:ca:ec:ce:8b:18:88:47:de: d0:13:ad:42:ad:cd:15:56:f5:8e:a4:30:cc:60:ab:3d:ee:9d: e9:53:9f:51:80:50:c5:32:d0:e5:e2:0c:27:84:4e:46:63:32: 98:d2:c6:02:0e:76:9f:00:44:dc:d0:43:74:93:14:12:be:00: 2f:f4:6f:92:43:ed:22:22:d2:7c:31:db:26:29:e4:a7:54:30: 0b:a5:4c:e0:a2:b2:7a:96:ec:e0:e9:6a:f9:01:5d:5f:5a:d8: 73:8c:61:2f:92:21:8d:22:04:18:71:39:ed:c9:dd:74:70:6f: 0d:76:01:77:0f:90:66:df:2c:8b:eb:5f:9c:3f:c6:43:79:0f: aa:57:82:f2:41:22:4b:5d:8b:a6:0a:22:73:dc:dd:05:53:e1: e1:eb:64:c5:a6:95:ca:1f:33:08:d8:79:90:49:e0:73:78:37: 47:ce:c1:65:8f:0e:3d:c3:c1:b6:4f:ff:0b:6a:3e:80:cd:4e: e9:b4:01:d1:19:da:75:71:e9:54:ee:8b:9e:95:38:cb:eb:a1: ec:e2:be:cb:42:e5:42:c7:bf:49:31:30:c3:dc:d0:ab:a1:d8: c2:12:c6:54 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI1MTAxNTAx MzczMVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoN0JFMkUyMUQxQ0VFNjYz N0I3NTMyMDI3RDEwNzM2REM5Mjk1OEREMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANiI2PZWAcepGlfXpMjx2NTuq85NSMvmFvF7wo2sHSw8U/jUEu94 j/hvqVFe9zlYRj1f9cAtafcEMBqG0glgiRaMFWxIR2qWGHAC5Z0HF+5A/h04+7l8 pGB8kGGouEyvsridBR0RUaDen/rXWhowtQGhNw7MvyF2D+R+GAJNBOzx5qRw5K7a kla8yCza3h3PkfMGnQPcpn5u2sJ8kKhRrKRkgyTuX1e/x4frdYzRkjnxCgr0beGC 5IMG+6FsQ+fPRhDwApbcmRQ+9SNDkl9GgKwZbogfYerGaMSvH+eYtEkQk30Z/krz 9BZRoTH5VT/kx60ECYsCxcQ5VCGvEBWQFTcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBR74uIdHO5mN7dTICfRBzbckpWN0jAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMTc1LzM3elQtTHlwR1JYRVV6b3NDbW5EMDFzdWFJMC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxSbZr9AXPF3oEbu5SVNPNWSGd7vMfYd8umkqEyuzOixiIR97QE61C rc0VVvWOpDDMYKs97p3pU59RgFDFMtDl4gwnhE5GYzKY0sYCDnafAETc0EN0kxQS vgAv9G+SQ+0iItJ8MdsmKeSnVDALpUzgorJ6luzg6Wr5AV1fWthzjGEvkiGNIgQY cTntyd10cG8NdgF3D5Bm3yyL61+cP8ZDeQ+qV4LyQSJLXYumCiJz3N0FU+Hh62TF ppXKHzMI2HmQSeBzeDdHzsFljw49w8G2T/8Laj6AzU7ptAHRGdp1celU7ouelTjL 66Hs4r7LQuVCx79JMTDD3NCrodjCEsZU -----END CERTIFICATE-----Generated at Wed Nov 5 21:02:17 2025 by rpki-client