$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft File: 6KpgLnNuGIzK5CRidiw3dvhbeTc.mft (raw, json) Hash identifier: q/arIl/RmGA8Aex6J5wTynpU69ILdK3m6iz6LlgqiZg= Subject key identifier: F9:52:4C:17:28:93:42:D3:AE:86:D7:2D:61:12:09:FA:DE:BA:4E:5A Authority key identifier: E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37 Certificate issuer: /CN=E8AA602E736E188CCAE42462762C3776F85B7937 Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft Manifest number: 041E Signing time: Sat 26 Apr 2025 11:41:38 +0000 Manifest this update: Sat 26 Apr 2025 11:41:38 +0000 Manifest next update: Sun 11 May 2025 11:41:38 +0000 Files and hashes: 1: 6KpgLnNuGIzK5CRidiw3dvhbeTc.crl (hash: 5XbdYNtlIz8VSbAe2obUdMFkep/0Ri3fEF850m9ogDk=) 2: HIwObf-21LxINUe37ksnj5B7mWY.roa (hash: EA4J5esnQmj+l9/4BMwaS/4c7yNIMrwaCgQgMIxx5os=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E8AA602E736E188CCAE42462762C3776F85B7937 Validity Not Before: Apr 15 01:31:20 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F9524C17289342D3AE86D72D611209FADEBA4E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:e5:48:97:82:96:f3:b6:7c:2a:71:bc:0c: d4:3e:92:82:4e:19:4c:49:46:90:d9:55:c3:d6:e0: 4c:d2:d2:05:c6:5b:b8:0d:f8:20:7e:65:8b:d6:9d: 27:66:6e:24:62:47:a5:74:cf:93:5c:80:64:52:ba: f2:6e:10:93:81:01:fe:be:03:e1:bc:1f:65:f2:eb: ee:c7:51:3d:11:e4:75:5e:f4:c1:37:98:54:6c:f1: 31:a9:d2:b7:ea:d8:70:27:95:ee:30:2e:9e:e6:7d: 3d:d3:76:66:ef:be:6d:24:ca:9a:47:6e:6f:f9:9e: 21:cb:6d:22:ef:52:c0:27:ca:6a:df:de:c2:11:98: e4:ce:63:cd:99:41:6c:be:f4:55:c9:64:2e:de:8a: 56:62:3c:8e:2c:0c:42:d1:40:02:a2:1f:44:41:d1: 98:ea:8c:02:68:de:9f:ef:bc:cb:e7:03:c4:22:ee: a7:86:15:3c:7b:0d:a0:3a:46:b1:0e:82:91:3c:68: ed:e0:70:6a:10:84:c1:1c:52:65:10:40:16:2b:30: e4:47:28:30:9e:52:bc:03:c7:91:99:8c:cc:19:48: 1d:76:7a:3d:bb:fe:92:12:d1:08:50:df:cd:16:8e: 22:ec:e3:60:e0:a5:40:30:2c:61:54:85:1d:ea:4e: cc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:52:4C:17:28:93:42:D3:AE:86:D7:2D:61:12:09:FA:DE:BA:4E:5A X509v3 Authority Key Identifier: keyid:E8:AA:60:2E:73:6E:18:8C:CA:E4:24:62:76:2C:37:76:F8:5B:79:37 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6KpgLnNuGIzK5CRidiw3dvhbeTc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30209/6KpgLnNuGIzK5CRidiw3dvhbeTc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:1f:99:63:f7:ef:cc:2b:a7:61:3f:d9:65:fe:e2:19:e2:4f: 8f:d5:f1:ae:80:9c:f1:e7:c9:75:99:37:e7:40:15:eb:6a:21: b7:2a:15:34:e3:44:c4:b9:9d:3d:e4:3f:10:b5:63:87:e3:73: a5:11:a6:1a:6c:eb:50:3b:48:4b:5c:4a:b1:45:6a:f2:1c:72: a0:33:69:26:a4:b0:bb:00:c0:28:0b:b0:8b:99:c2:28:ee:86: 81:2f:d4:ab:ab:45:96:89:24:d8:fa:df:8c:fe:5d:6a:9b:91: d2:05:71:c8:ba:00:e8:60:3c:0a:b6:b8:5f:8e:25:e9:05:50: e4:4a:6b:58:24:4f:f2:d8:bd:9d:73:92:30:36:55:63:53:33: b3:01:f3:45:b9:5c:2f:24:a8:44:d5:6f:0c:89:34:d9:95:6e: a1:3e:e4:90:ce:86:8b:77:68:b0:e5:66:26:86:bd:83:b8:62: 66:4e:1a:39:51:82:50:3c:de:58:35:ff:99:87:b4:ca:50:2c: 3f:e7:fe:f3:6c:39:33:2c:54:d5:4c:ed:c9:28:23:e0:da:4d: 7b:56:5c:2c:f9:1d:e0:f2:a5:ee:ae:e3:14:f0:95:56:e3:1c: 0d:9f:15:fc:fd:32:df:d5:56:1e:3f:a1:d8:4d:ff:6e:01:10: 05:86:5e:66 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFOEFB NjAyRTczNkUxODhDQ0FFNDI0NjI3NjJDMzc3NkY4NUI3OTM3MB4XDTI1MDQxNTAx MzEyMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRjk1MjRDMTcyODkzNDJE M0FFODZENzJENjExMjA5RkFERUJBNEU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMZ75UiXgpbztnwqcbwM1D6Sgk4ZTElGkNlVw9bgTNLSBcZbuA34 IH5li9adJ2ZuJGJHpXTPk1yAZFK68m4Qk4EB/r4D4bwfZfLr7sdRPRHkdV70wTeY VGzxManSt+rYcCeV7jAunuZ9PdN2Zu++bSTKmkdub/meIcttIu9SwCfKat/ewhGY 5M5jzZlBbL70VclkLt6KVmI8jiwMQtFAAqIfREHRmOqMAmjen++8y+cDxCLup4YV PHsNoDpGsQ6CkTxo7eBwahCEwRxSZRBAFisw5EcoMJ5SvAPHkZmMzBlIHXZ6Pbv+ khLRCFDfzRaOIuzjYOClQDAsYVSFHepOzD8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBT5UkwXKJNC066G1y1hEgn63rpOWjAfBgNVHSMEGDAWgBToqmAuc24YjMrkJGJ2 LDd2+Ft5NzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyMDkvNktwZ0xuTnVHSXpLNUNSaWRpdzNkdmhiZVRjLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNktwZ0xuTnVHSXpLNUNSaWRpdzNk dmhiZVRjLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjA5LzZLcGdMbk51R0l6SzVDUmlkaXczZHZoYmVUYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVH5lj9+/MK6dhP9ll/uIZ4k+P1fGugJzx58l1mTfnQBXraiG3KhU0 40TEuZ095D8QtWOH43OlEaYabOtQO0hLXEqxRWryHHKgM2kmpLC7AMAoC7CLmcIo 7oaBL9Srq0WWiSTY+t+M/l1qm5HSBXHIugDoYDwKtrhfjiXpBVDkSmtYJE/y2L2d c5IwNlVjUzOzAfNFuVwvJKhE1W8MiTTZlW6hPuSQzoaLd2iw5WYmhr2DuGJmTho5 UYJQPN5YNf+Zh7TKUCw/5/7zbDkzLFTVTO3JKCPg2k17Vlws+R3g8qXuruMU8JVW 4xwNnxX8/TLf1VYeP6HYTf9uARAFhl5m -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:19 2025 by rpki-client