$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft File: O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft (raw, json) Hash identifier: KvyQa/Q5ga86u60reM/lD8iY24jKsp+8UZgUnmBeskA= Subject key identifier: F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92 Authority key identifier: 3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56 Certificate issuer: /CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756 Certificate serial: 3F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft Manifest number: 04DD Signing time: Sat 26 Apr 2025 11:57:09 +0000 Manifest this update: Sat 26 Apr 2025 11:57:09 +0000 Manifest next update: Sun 11 May 2025 11:57:09 +0000 Files and hashes: 1: O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl (hash: VSPiMh8pAUep6Qr2ADx5Z7Li0vfU5LDfmQxF3djGv4Y=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3BD306ECE6043901E52A8E8B6614AAA456ABA756 Validity Not Before: Apr 15 01:36:00 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=F06E8776EA62B8CDC8ACBF65C489B34409454092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:82:42:ba:96:33:b0:9b:38:82:fb:3b:e2: 7e:27:a4:65:5a:0a:63:af:f2:4b:54:e0:53:ac:20: 5c:af:a0:49:c7:41:fb:59:70:13:f3:9c:59:e6:f6: fe:2a:1b:28:c6:2c:20:61:09:3b:9d:80:6b:f7:50: 91:83:55:0a:22:bc:54:49:13:c5:b3:ef:36:7b:5f: 57:6c:41:71:ad:6b:b3:92:a9:87:99:16:a7:a2:4e: b7:42:64:5b:e5:9f:bb:94:f9:39:89:d4:df:b9:e1: fd:eb:79:6f:e6:8d:86:f4:ad:d9:81:c7:9a:ef:e7: 45:6b:96:e3:ad:77:f7:59:3d:56:54:28:e0:72:b5: 9e:b2:4c:75:16:03:60:1b:99:24:81:e0:69:93:e8: 64:6a:3c:c7:96:fe:19:9c:e1:31:96:c6:62:2e:9d: e7:f2:96:b5:f7:db:4e:c9:7c:43:3f:cc:2a:52:c2: 8c:01:17:a2:a4:b0:3d:f3:15:89:6e:71:3d:11:0c: 7e:7f:8b:5b:71:51:f4:03:55:31:1c:8c:4f:78:c9: 87:6c:3c:ab:8e:83:bf:55:46:56:c1:df:02:11:60: df:c6:17:2d:9a:d1:01:59:7d:ab:e8:0a:2b:fb:bd: 54:ec:1a:3c:1b:30:0f:e3:13:11:a8:56:8c:d5:dd: b7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:6E:87:76:EA:62:B8:CD:C8:AC:BF:65:C4:89:B3:44:09:45:40:92 X509v3 Authority Key Identifier: keyid:3B:D3:06:EC:E6:04:39:01:E5:2A:8E:8B:66:14:AA:A4:56:AB:A7:56 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O9MG7OYEOQHlKo6LZhSqpFarp1Y.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/368/O9MG7OYEOQHlKo6LZhSqpFarp1Y.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:55:e6:ef:d5:4c:94:8b:b3:58:4c:ff:75:94:e0:4a:25:68: da:ec:21:2f:66:dd:c6:a9:9a:1d:9d:9a:f3:f7:f2:5b:88:a5: 51:fd:cc:ac:26:7e:63:10:37:7b:c1:6d:8c:a6:b0:5f:df:5d: 56:bb:90:5e:61:d6:12:c1:e5:51:cd:8d:8e:7d:f1:e2:15:ee: f8:53:91:01:7e:47:c9:fd:80:b4:79:b1:3f:4c:d2:f0:9b:c0: 73:5c:84:d8:bd:3a:0e:66:ad:1c:87:99:dd:f1:26:d7:ca:53: a1:5e:fc:2e:50:ea:cd:7e:0c:58:ee:f4:98:2a:3c:f2:54:71: 7d:fd:b1:48:1a:b4:2a:22:d0:78:b6:e5:ea:82:4c:c6:75:26: 18:b2:c0:fb:b1:3a:23:6c:ad:44:39:c1:bb:12:f5:88:52:b3: 5c:d2:80:41:63:94:31:06:97:86:3e:37:d4:5f:f1:b0:33:cc: 1c:26:e9:9f:80:47:00:d9:7e:f1:7a:c6:31:99:00:eb:c7:41: e3:87:a2:b6:46:3b:5d:e7:82:f4:f0:a1:6c:ea:af:9f:89:af: 62:a9:3f:8a:73:f6:43:e0:64:1f:5a:0d:90:e7:6e:e2:8c:a5: 77:ee:a7:b3:e8:ca:10:31:d7:fc:cd:e2:d7:f0:39:95:69:8d: bd:0f:a9:e5 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQkQz MDZFQ0U2MDQzOTAxRTUyQThFOEI2NjE0QUFBNDU2QUJBNzU2MB4XDTI1MDQxNTAx MzYwMFoXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRjA2RTg3NzZFQTYyQjhD REM4QUNCRjY1QzQ4OUIzNDQwOTQ1NDA5MjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMMGgkK6ljOwmziC+zvifiekZVoKY6/yS1TgU6wgXK+gScdB+1lw E/OcWeb2/iobKMYsIGEJO52Aa/dQkYNVCiK8VEkTxbPvNntfV2xBca1rs5Kph5kW p6JOt0JkW+Wfu5T5OYnU37nh/et5b+aNhvSt2YHHmu/nRWuW461391k9VlQo4HK1 nrJMdRYDYBuZJIHgaZPoZGo8x5b+GZzhMZbGYi6d5/KWtffbTsl8Qz/MKlLCjAEX oqSwPfMViW5xPREMfn+LW3FR9ANVMRyMT3jJh2w8q46Dv1VGVsHfAhFg38YXLZrR AVl9q+gKK/u9VOwaPBswD+MTEahWjNXdtwUCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTwbod26mK4zcisv2XEibNECUVAkjAfBgNVHSMEGDAWgBQ70wbs5gQ5AeUqjotm FKqkVqunVjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzY4L085TUc3T1lFT1FIbEtvNkxaaFNxcEZhcnAxWS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL085TUc3T1lFT1FIbEtvNkxaaFNxcEZh cnAxWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8zNjgvTzlNRzdPWUVPUUhsS282TFpoU3FwRmFycDFZLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAIZV5u/VTJSLs1hM/3WU4EolaNrsIS9m3capmh2dmvP38luIpVH9zKwmfmMQ N3vBbYymsF/fXVa7kF5h1hLB5VHNjY598eIV7vhTkQF+R8n9gLR5sT9M0vCbwHNc hNi9Og5mrRyHmd3xJtfKU6Fe/C5Q6s1+DFju9JgqPPJUcX39sUgatCoi0Hi25eqC TMZ1JhiywPuxOiNsrUQ5wbsS9YhSs1zSgEFjlDEGl4Y+N9Rf8bAzzBwm6Z+ARwDZ fvF6xjGZAOvHQeOHorZGO13ngvTwoWzqr5+Jr2KpP4pz9kPgZB9aDZDnbuKMpXfu p7PoyhAx1/zN4tfwOZVpjb0PqeU= -----END CERTIFICATE-----Generated at Sat Apr 26 17:22:50 2025 by rpki-client