$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft File: pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft (raw, json) Hash identifier: g462DVBydsshEbGHxk0hy+4b7lCAIhHIPfLvJ7UipOc= Subject key identifier: D9:52:CF:47:52:11:A0:31:6C:63:18:41:92:AE:A3:7E:88:D1:CC:7C Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C Certificate issuer: /CN=A642E787390B6CE6CEE685B443F93AB3639F116C Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft Manifest number: 0406 Signing time: Sat 26 Apr 2025 07:33:58 +0000 Manifest this update: Sat 26 Apr 2025 07:33:58 +0000 Manifest next update: Sun 11 May 2025 07:33:58 +0000 Files and hashes: 1: Djlreg8OC8sK34Is8OeKLClE0jo.roa (hash: 3dWuK3qsCQrEFdU4cCMFkO4dOk5XFxJn5Tpx5QWiRRw=) 2: McjNynOcVTA1NC_L_mUjK8PEwqE.roa (hash: DJ+1YEGNZf6ZsRZuQMqRhfg9BxXcca9ZBFnuiJMEr/A=) 3: YobCZrPe7--5rynek5XP7fdqlCs.roa (hash: +/C9L5gVnJsgnj7O4qvh1ElTbnEcxItGslbUXr5jmw4=) 4: g3vspw65wxv0pmb4LRaBV7bJSnU.roa (hash: +LiBgbLP+KwISphauyEf5bH1CUymX+rHJtSltk/07qA=) 5: iXsEixLGrXJTqCRFKy66vQLfB0E.roa (hash: kVxMkTC+ItA3J+fmFVHAcMhEekqzplU+vwCOlMfYMpM=) 6: jbGexkvaWLDUAqhT5Pl8RgvqrBY.roa (hash: mVTiJv62eboPv9PMpZ23I3fxbK3HpIGJoW5k7m4L7nw=) 7: l8xxXSWk_eufHKdrIqQJevexJBU.roa (hash: PB43HmTTlzzeiJJ43tvgh0IGnCziuoyP3oIwe0YfvjQ=) 8: n0N_HRT6shrs1MJN0LWnvyWfCUo.roa (hash: /oZIvbmsKBhOulYoVyQSKF15f9gpTbqlVcEyHmVLeBM=) 9: pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl (hash: a9r3jRcl7KHqjx5GX3CglMwNwdqSED8N57V25BZkCP8=) 10: tixRbk2mpxrCHEb6ABNqnAJMoYc.roa (hash: 1yh030SIs1I6t5d6hvQkcNe5Lzb577K3N0WsatdIYao=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C Validity Not Before: Apr 15 01:32:16 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=D952CF475211A0316C63184192AEA37E88D1CC7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:a8:f9:58:6b:78:b0:96:6d:a3:36:3e:8b: 58:03:9a:ee:ff:6f:2a:7a:c7:f9:15:04:98:6c:55: 37:b5:d0:27:a8:76:ad:0f:ab:fb:7c:bd:76:a5:ff: a8:37:8a:64:f2:27:40:1c:52:cb:fb:5e:b1:9c:4a: 28:82:2e:80:0b:77:bc:38:dd:69:73:9b:c2:34:98: 69:ff:3e:a9:c0:37:78:4f:e3:63:01:1e:a3:83:b4: dd:d9:c7:c6:c4:f1:e8:24:47:27:00:b8:96:d6:19: b2:02:26:02:56:de:e9:62:ab:99:f2:42:dd:6b:64: 86:e1:e3:ef:c3:b3:71:f9:9d:ab:98:29:15:21:c6: 01:0c:28:d0:f5:69:4c:6c:dc:10:07:5e:eb:0c:9a: 3e:09:09:f8:8a:2f:81:93:50:97:68:39:54:f0:d6: ac:63:c1:96:b8:81:3f:73:d0:10:f3:63:cb:52:e7: ec:e8:ef:6e:fd:0c:b1:07:c6:e7:20:86:72:0b:0a: 0f:65:9f:80:39:7a:da:31:50:d7:25:61:3e:88:08: 21:8d:c1:61:a3:d9:3b:50:1d:c4:4b:f6:aa:0f:8a: 53:0f:77:35:47:ec:2c:6c:99:41:76:14:e9:b3:32: cf:b1:d4:69:03:df:54:cd:da:31:98:e3:a2:34:98: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:52:CF:47:52:11:A0:31:6C:63:18:41:92:AE:A3:7E:88:D1:CC:7C X509v3 Authority Key Identifier: keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:85:16:80:38:4d:99:b9:a4:e9:11:89:13:42:9b:3d:a9:91: 5b:14:8f:94:c8:1a:b7:77:42:2f:5c:f7:b0:e6:83:93:07:f9: 61:ed:e5:0e:89:36:72:36:44:cd:4d:6d:c7:77:e6:6a:8e:d7: e2:59:e7:af:d6:0e:7a:84:c4:26:ce:31:60:e7:fc:42:34:3d: 1a:72:62:b3:ef:1d:bf:d6:ea:73:1a:86:b5:9e:d1:42:c6:d8: 79:50:b0:fe:41:78:55:a9:c4:e9:99:ae:b4:66:25:c9:ad:f0: 4f:66:c4:dc:a4:8e:65:e7:af:0d:a0:b4:5c:6b:11:b9:81:47: ae:8b:2b:6c:d5:10:5c:90:50:f6:12:bf:8e:fa:c2:47:da:f0: 6c:fe:8e:c7:18:25:a3:2d:d7:62:4e:0c:54:a3:5a:8f:4d:10: 12:43:5c:1f:fe:17:c3:c9:8a:60:d2:90:70:42:59:b1:77:c7: b6:27:7d:36:21:dd:74:6a:f0:ff:f7:fb:af:51:4d:3e:42:89: 1b:bb:e6:43:8c:87:74:65:48:e8:f9:c5:50:a2:06:1e:d0:b7: 3f:0b:4f:9f:5c:c7:8b:7b:4f:a0:f4:6d:f5:b3:31:17:65:3c: 11:07:79:3f:63:b4:14:27:1b:18:6b:47:db:33:fd:33:b9:f8: 0c:7d:eb:6b -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI1MDQxNTAx MzIxNloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRDk1MkNGNDc1MjExQTAz MTZDNjMxODQxOTJBRUEzN0U4OEQxQ0M3QzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMbQqPlYa3iwlm2jNj6LWAOa7v9vKnrH+RUEmGxVN7XQJ6h2rQ+r +3y9dqX/qDeKZPInQBxSy/tesZxKKIIugAt3vDjdaXObwjSYaf8+qcA3eE/jYwEe o4O03dnHxsTx6CRHJwC4ltYZsgImAlbe6WKrmfJC3WtkhuHj78Ozcfmdq5gpFSHG AQwo0PVpTGzcEAde6wyaPgkJ+IovgZNQl2g5VPDWrGPBlriBP3PQEPNjy1Ln7Ojv bv0MsQfG5yCGcgsKD2WfgDl62jFQ1yVhPogIIY3BYaPZO1AdxEv2qg+KUw93NUfs LGyZQXYU6bMyz7HUaQPfVM3aMZjjojSYvzMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTZUs9HUhGgMWxjGEGSrqN+iNHMfDAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD +TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zMTEvcGtMbmh6a0xiT2JPNW9XMFFfazZzMk9mRVd3Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAEyFFoA4TZm5pOkRiRNCmz2pkVsUj5TIGrd3Qi9c97Dmg5MH+WHt5Q6JNnI2 RM1Nbcd35mqO1+JZ56/WDnqExCbOMWDn/EI0PRpyYrPvHb/W6nMahrWe0ULG2HlQ sP5BeFWpxOmZrrRmJcmt8E9mxNykjmXnrw2gtFxrEbmBR66LK2zVEFyQUPYSv476 wkfa8Gz+jscYJaMt12JODFSjWo9NEBJDXB/+F8PJimDSkHBCWbF3x7YnfTYh3XRq 8P/3+69RTT5CiRu75kOMh3RlSOj5xVCiBh7Qtz8LT59cx4t7T6D0bfWzMRdlPBEH eT9jtBQnGxhrR9sz/TO5+Ax962s= -----END CERTIFICATE-----Generated at Sat Apr 26 12:44:18 2025 by rpki-client