$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft File: guWyiiD0xqYqRhL2xd-3o9ZNneo.mft (raw, json) Hash identifier: tBXm5nGD8BCC3UfrEzaorjh4+UK5KCP6AY+e6PUIuxk= Subject key identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA Certificate issuer: /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Certificate serial: 48 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft Manifest number: 0726 Signing time: Mon 11 Aug 2025 07:40:11 +0000 Manifest this update: Mon 11 Aug 2025 07:40:11 +0000 Manifest next update: Tue 26 Aug 2025 07:40:11 +0000 Files and hashes: 1: DAes_GN9zpnYk4EeBzt2cj-26vE.roa (hash: KOjwr2Nfckx8EGupbQlAX6sJDMj/o4/KxieIld2RaBI=) 2: dmL_MHiDKs33DcKXfr1ef_QwcTQ.roa (hash: nDCDcLQSOrDP/w+ldAssVjQS9VYjt3V+31+IHT+5wQY=) 3: guWyiiD0xqYqRhL2xd-3o9ZNneo.crl (hash: dsWn/miLxMfr5fajLRRuj525z6VQUAOHHrhmuWXAF/k=) 4: jFScQ9VRgF1uAtp-BEXwr3_FKO4.roa (hash: q4xY2bL+ahLjo1eN4/GUIWtRweDxWhb8lzO3KNMI/U4=) 5: ohdXgKctXmgQY3ELVi0RChYeEls.roa (hash: GcISsiUMvwue3VHD0Ob+RkSW04dUAEFQz5FNVF2XLQk=) 6: udYM7a7I-gRxHF5vnPYcVzMotjw.roa (hash: 1ZkXFw86F9LMEHQ7yMH989MOLMJvKUWhsgSwySsUQfE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Validity Not Before: Jul 30 06:34:57 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=386B8CA4A5FDB1EE07A124DDEC82A3B3007FF350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:58:3a:1c:75:36:98:50:2e:a7:58:ad:9d: 64:60:e1:10:97:ed:fc:94:b1:4d:69:ba:67:0e:8a: 56:e6:38:64:76:b1:43:84:bd:3d:e5:bf:12:59:a1: 68:b1:11:92:cc:82:9d:b9:fd:76:f9:5c:15:39:a5: c1:42:5e:03:25:66:6f:bd:91:3a:34:4c:46:e5:77: 5f:6d:d1:97:74:5a:50:1b:2c:db:74:1f:e0:f7:76: 15:68:a7:b8:a6:46:bd:e5:91:0c:0f:70:38:53:fc: f7:09:4a:37:98:d7:e4:f6:79:42:02:b7:4f:d7:16: 28:f3:f0:ee:43:fd:81:4b:05:6b:5a:82:91:02:42: 01:25:ea:a6:ad:a7:df:19:10:9e:6a:ed:f8:5d:77: 72:f2:17:20:56:45:4d:d2:5c:eb:cd:7a:ed:22:eb: 4d:dc:4f:d4:98:b1:bc:61:b9:91:86:6c:47:58:6c: aa:f1:ce:bf:66:c1:5b:fd:79:06:8e:a6:07:d9:71: 2c:e7:c5:b6:ec:d6:72:fd:d5:87:c7:2b:da:3c:3c: 97:43:1c:00:52:bb:e2:16:6b:ea:9f:4c:46:6a:4f: bf:26:f9:33:25:b4:85:05:77:51:a0:d2:df:83:5b: d9:8b:58:d6:c7:b2:9a:23:15:75:19:a1:bd:bb:85: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 X509v3 Authority Key Identifier: keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:84:1a:d9:52:d2:01:4c:39:47:bb:a0:48:40:c1:a1:c6:a8: e4:2e:4d:1f:3a:02:9f:40:07:28:cf:f8:9e:84:68:4f:4e:88: 22:57:a3:d7:2a:3d:40:30:8d:8c:49:8d:30:bf:8b:53:fa:24: 8d:04:13:9a:b7:db:43:37:11:91:b9:a9:10:e7:5a:59:13:7f: ef:51:bd:7d:78:a8:e9:31:e0:22:06:9d:bc:4a:75:57:b9:f2: 54:0d:2a:04:55:27:62:3e:40:f8:f8:b3:87:be:a7:d3:63:40: 63:63:b5:86:53:7f:92:c7:a6:84:70:a6:7c:1c:3a:d3:a9:e4: 68:e7:8c:97:0d:94:60:bf:b7:42:ab:b5:98:19:1d:ec:fd:18: 5d:b2:de:c3:ef:71:c5:5c:a8:ea:38:8e:c2:39:4d:0e:ee:30: 28:d7:50:0e:86:08:c3:97:d8:23:ec:8d:cf:98:9b:44:5c:25: 80:18:34:9c:fd:19:26:16:c7:91:a1:57:7d:0c:08:1b:d3:d9: 62:1c:88:e1:cb:49:4f:fa:87:24:ec:ed:d2:2a:e0:aa:e2:d7: 47:04:f4:66:5b:7e:25:68:4c:5a:b2:8d:2a:60:09:c9:57:a6: 9e:30:2f:32:a3:62:27:80:66:ad:66:78:ac:f2:33:c4:a1:8f: 7d:47:31:3e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBSDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1 QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MDczMDA2 MzQ1N1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMzg2QjhDQTRBNUZEQjFF RTA3QTEyNERERUM4MkEzQjMwMDdGRjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL27WDocdTaYUC6nWK2dZGDhEJft/JSxTWm6Zw6KVuY4ZHaxQ4S9 PeW/ElmhaLERksyCnbn9dvlcFTmlwUJeAyVmb72ROjRMRuV3X23Rl3RaUBss23Qf 4Pd2FWinuKZGveWRDA9wOFP89wlKN5jX5PZ5QgK3T9cWKPPw7kP9gUsFa1qCkQJC ASXqpq2n3xkQnmrt+F13cvIXIFZFTdJc68167SLrTdxP1JixvGG5kYZsR1hsqvHO v2bBW/15Bo6mB9lxLOfFtuzWcv3Vh8cr2jw8l0McAFK74hZr6p9MRmpPvyb5MyW0 hQV3UaDS34Nb2YtY1seymiMVdRmhvbuFlOkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQ4a4ykpf2x7gehJN3sgqOzAH/zUDAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF 37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzY3L2d1V3lpaUQweHFZcVJoTDJ4ZC0zbzlaTm5lby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOhBrZUtIBTDlHu6BIQMGhxqjkLk0fOgKfQAcoz/iehGhPTogiV6PX Kj1AMI2MSY0wv4tT+iSNBBOat9tDNxGRuakQ51pZE3/vUb19eKjpMeAiBp28SnVX ufJUDSoEVSdiPkD4+LOHvqfTY0BjY7WGU3+Sx6aEcKZ8HDrTqeRo54yXDZRgv7dC q7WYGR3s/Rhdst7D73HFXKjqOI7COU0O7jAo11AOhgjDl9gj7I3PmJtEXCWAGDSc /RkmFseRoVd9DAgb09liHIjhy0lP+ock7O3SKuCq4tdHBPRmW34laExaso0qYAnJ V6aeMC8yo2IngGatZnis8jPEoY99RzE+ -----END CERTIFICATE-----Generated at Mon Aug 11 11:54:58 2025 by rpki-client