$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft File: Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft (raw, json) Hash identifier: +C4yBEuMRfa3MRy6o+Oq/HyOIr8prS/93pAEb7ZvSSc= Subject key identifier: 03:F3:32:FA:7C:F9:DA:B4:A7:A4:54:AF:A8:0D:89:34:38:62:84:CD Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3 Certificate issuer: /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3 Certificate serial: 1F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft Manifest number: 0443 Signing time: Sat 26 Apr 2025 11:36:10 +0000 Manifest this update: Sat 26 Apr 2025 11:36:10 +0000 Manifest next update: Sun 11 May 2025 11:36:10 +0000 Files and hashes: 1: 3Z-mHPnN1H2cJ10irIFba1cG37g.roa (hash: 8CoMzjhDwsnUYTFCOyg2HHRpuzMUGexhnlElgh+uXQI=) 2: OQ4iS3X2OGuonOkr4wlZs7Jvhdk.roa (hash: WRO7ngm/WaM6HeSJzc1ZzD6tqkO0b+JjK6goLRGv+PY=) 3: OyR-mZnp1R2dzq4fHS1TbL77rY8.roa (hash: 94n18GnHnq8RpE3noF5b7ePZ9U2GFYoEF+M3nQbjMVw=) 4: Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl (hash: lPgGnmfkltE05IbU6V5lMdYoGlrF3d7ARL8IjO1fTms=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3 Validity Not Before: Apr 15 01:30:17 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=03F332FA7CF9DAB4A7A454AFA80D8934386284CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:39:45:bb:12:dd:2e:62:d5:3a:d3:f5:a5:29: b1:62:81:a5:06:da:80:90:b7:9a:cd:bb:5f:0d:33: 15:f7:3f:22:d3:5d:4e:6f:df:d7:c2:38:d8:e9:2c: a6:0d:0c:1f:37:26:6a:06:66:19:a6:db:38:75:15: 9d:68:5a:0f:70:0c:d9:7b:c4:14:8e:a1:86:b7:5d: 44:18:df:26:ae:79:a2:dc:7f:09:07:f0:01:a4:80: 0c:72:a1:15:83:8c:52:f9:3b:e8:60:b6:73:01:cc: 1b:df:14:b5:99:50:eb:9a:f3:08:20:85:30:8a:c4: f6:61:9d:52:8f:b7:23:29:38:b8:6d:64:3d:bc:08: 0f:db:fb:d5:5d:37:c6:e1:aa:a2:26:3f:e1:98:97: 20:19:4f:a9:e8:6b:ca:09:34:f4:c2:54:e7:ec:d6: 02:79:e7:0c:44:db:63:bb:af:5a:c4:1e:6b:fc:b2: b0:6e:e3:bd:51:ec:01:bd:02:31:dd:2e:a1:bb:31: bc:d0:c9:c6:0c:23:a4:32:df:67:d4:00:6e:64:e6: 0b:d4:50:76:79:08:d0:72:00:e3:87:09:9f:19:35: 06:85:19:0e:1f:6e:10:92:89:11:91:32:05:37:8c: dd:18:cb:53:8a:98:31:a1:28:cb:a5:6d:7d:3e:c6: d5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:32:FA:7C:F9:DA:B4:A7:A4:54:AF:A8:0D:89:34:38:62:84:CD X509v3 Authority Key Identifier: keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:64:6c:71:6c:58:4b:d2:bd:97:cc:a1:fd:f2:e7:e0:d8:45: c7:6b:f0:6c:f8:a1:1c:48:0a:ac:e0:32:37:dc:f3:6f:a4:c0: d1:3b:7e:0b:31:1b:71:a2:09:4b:43:bc:e0:9f:4f:65:cc:f5: ff:c0:7d:f4:4b:61:9e:41:27:8f:b7:f3:37:bc:53:b8:3c:26: 2a:cd:e9:76:f8:2a:24:a7:55:cc:6e:33:38:4b:c1:50:ed:78: 85:b9:f7:01:f1:e4:3a:34:8b:cd:0a:24:6b:d3:fb:ed:64:dc: 3d:48:25:b6:63:e3:cd:c5:9e:a6:9c:86:7f:5c:62:38:6a:db: 0e:ed:37:4c:ba:66:52:10:10:7c:89:2f:b4:4d:d1:b9:f7:cf: 60:f4:c3:dc:76:40:5d:3b:9d:f3:17:e7:d6:24:ba:d1:cf:39: 27:e4:f8:10:19:b2:fe:3a:3c:5b:e6:29:e0:d0:9f:a1:bf:fa: 19:70:e7:ff:75:c8:c8:e4:9b:b8:98:6a:bd:d4:4f:72:d9:a7: 71:a5:4b:36:6d:c3:87:74:a5:2d:3c:69:b3:ff:75:4b:9d:7b: f4:37:77:78:8c:3d:d9:91:b4:cb:6b:dc:fc:45:ce:98:4f:3c: 94:a8:03:a5:9a:11:ac:62:4a:90:b6:c7:35:52:06:ce:df:e6: 39:7a:bd:23 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0Mzk4 MzdBRDkzRDkyNDcxRTIwMjREMDZFQ0ZEQ0FFRThGNjREMUMzMB4XDTI1MDQxNTAx MzAxN1oXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMDNGMzMyRkE3Q0Y5REFC NEE3QTQ1NEFGQTgwRDg5MzQzODYyODRDRDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANw5RbsS3S5i1TrT9aUpsWKBpQbagJC3ms27Xw0zFfc/ItNdTm/f 18I42Okspg0MHzcmagZmGabbOHUVnWhaD3AM2XvEFI6hhrddRBjfJq55otx/CQfw AaSADHKhFYOMUvk76GC2cwHMG98UtZlQ65rzCCCFMIrE9mGdUo+3Iyk4uG1kPbwI D9v71V03xuGqoiY/4ZiXIBlPqehrygk09MJU5+zWAnnnDETbY7uvWsQea/yysG7j vVHsAb0CMd0uobsxvNDJxgwjpDLfZ9QAbmTmC9RQdnkI0HIA44cJnxk1BoUZDh9u EJKJEZEyBTeM3RjLU4qYMaEoy6VtfT7G1ZcCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQD8zL6fPnatKekVK+oDYk0OGKEzTAfBgNVHSMEGDAWgBRDmDetk9kkceICTQbs /cruj2TRwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNzEvUTVnM3JaUFpKSEhpQWswRzdQM0s3bzlrMGNNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUTVnM3JaUFpKSEhpQWswRzdQM0s3 bzlrMGNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzcxL1E1ZzNyWlBaSkhIaUFrMEc3UDNLN285azBjTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ZGxxbFhL0r2XzKH98ufg2EXHa/Bs+KEcSAqs4DI33PNvpMDRO34L MRtxoglLQ7zgn09lzPX/wH30S2GeQSePt/M3vFO4PCYqzel2+Cokp1XMbjM4S8FQ 7XiFufcB8eQ6NIvNCiRr0/vtZNw9SCW2Y+PNxZ6mnIZ/XGI4atsO7TdMumZSEBB8 iS+0TdG5989g9MPcdkBdO53zF+fWJLrRzzkn5PgQGbL+Ojxb5ing0J+hv/oZcOf/ dcjI5Ju4mGq91E9y2adxpUs2bcOHdKUtPGmz/3VLnXv0N3d4jD3ZkbTLa9z8Rc6Y TzyUqAOlmhGsYkqQtsc1UgbO3+Y5er0j -----END CERTIFICATE-----Generated at Sat Apr 26 14:34:05 2025 by rpki-client