$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft File: D-3U0xDJUGjIfi3mvwcZutmsCkM.mft (raw, json) Hash identifier: 439li7ykEPw5wjJ2xIsRocdC987iAaBbXRj0CxUgs30= Subject key identifier: EC:FA:67:E1:E7:D8:FE:85:6D:00:89:B8:52:49:8C:B9:28:6E:37:55 Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43 Certificate issuer: /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43 Certificate serial: 5C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft Manifest number: 09B0 Signing time: Wed 05 Nov 2025 14:12:35 +0000 Manifest this update: Wed 05 Nov 2025 14:12:35 +0000 Manifest next update: Thu 20 Nov 2025 14:12:35 +0000 Files and hashes: 1: D-3U0xDJUGjIfi3mvwcZutmsCkM.crl (hash: q/wRKJOWki6eJ5gaVg5LzPeIjYRPx885xgTdmsjxhPE=) 2: OU-F77FW_ZlCp2oD4Omv4EJZUjo.roa (hash: ouKzaQjodoGzm2dYsB3pPID1BskNOP3G9Yg6VLKBA58=) 3: QohMhLaE2-mg6JEiV4w2LjYxNcg.roa (hash: 1D2yh4v2MQNZfeaorA1c5T2wIqW2BIMi2SK3i4sMrS0=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 14:50:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43 Validity Not Before: Oct 15 01:34:38 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=ECFA67E1E7D8FE856D0089B852498CB9286E3755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:35:6d:94:c4:ae:00:ae:d1:b9:12:0a:96: 21:58:dd:27:90:19:d6:a4:d1:48:55:8e:df:b4:95: cf:78:35:e3:53:13:10:63:ee:64:34:2a:c3:77:aa: a8:82:96:94:ac:fb:d2:60:b6:e2:b4:67:ca:e0:7a: 68:5d:98:a4:6e:1f:ab:56:5a:82:83:5d:cc:08:d2: f3:6b:49:83:38:3b:52:7b:a2:44:b6:eb:a3:7c:35: 8f:f2:71:61:b7:8c:22:e6:ae:bd:63:b1:96:95:a4: 5a:04:0b:58:91:e2:04:94:fe:c9:b8:cf:14:f5:00: 9c:2f:e5:f8:af:68:8a:ae:4e:1d:cb:32:6b:52:45: 18:70:7e:1e:a3:b0:21:ff:02:c2:48:13:36:1b:8d: 38:a2:1f:21:5e:0d:49:00:18:e2:05:82:60:b9:0e: 1c:17:aa:d0:b6:74:aa:af:07:27:6a:ac:6a:27:3b: 64:00:9a:a1:94:72:1a:f9:73:63:ae:35:63:18:32: 9a:cd:90:d0:19:74:db:5c:73:98:e5:d5:fd:d5:de: df:e7:e6:ee:2a:55:29:ef:23:cc:9b:f6:7c:0c:a1: 57:12:cb:06:84:ab:74:e6:84:1f:aa:49:28:59:b9: f8:87:3d:64:93:39:cf:e5:0f:0c:e6:23:82:60:dc: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FA:67:E1:E7:D8:FE:85:6D:00:89:B8:52:49:8C:B9:28:6E:37:55 X509v3 Authority Key Identifier: keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:36:f8:25:0e:08:b9:6e:54:34:4d:31:78:b2:fb:4a:3b:b3: 4e:34:50:d0:98:16:8c:f1:0b:08:a7:78:87:a9:d8:4c:a1:32: a9:12:06:5c:5e:97:1c:f6:f5:fd:99:23:42:57:eb:5e:01:c0: b6:23:e0:72:49:92:52:22:fc:8d:0a:fa:fc:af:e6:5b:a5:24: b9:0f:f3:58:ed:49:f0:4c:6a:13:64:5f:c5:13:fa:de:87:0a: 2a:93:4c:2f:7c:bb:ff:18:cf:02:83:c5:25:22:35:04:c8:a5: 89:5a:8e:27:c4:fd:28:c6:29:f4:1b:ca:b1:da:5e:aa:af:22: cd:5d:4b:d4:27:1b:29:22:eb:97:7c:d3:e9:50:72:e2:0f:91: 5c:90:14:89:a9:2f:43:88:ee:c2:44:ac:14:8d:46:a6:9d:e4: 1f:2c:a7:48:da:44:3d:e0:df:cd:75:5b:05:30:30:c3:0a:4c: 4c:b1:63:e5:af:35:72:c2:ae:77:d0:da:1c:8b:c1:bf:ed:fb: 7a:08:4d:ef:c6:7c:d3:78:d4:20:41:da:f5:af:b9:36:90:a7: b4:c7:b7:26:4d:90:ef:f1:29:92:4e:a3:d8:ee:ea:1c:30:e3: 54:0c:f1:9e:44:37:b7:df:3c:4a:2b:40:63:d1:8d:ea:09:9a: 58:f2:89:f1 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBXDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwRkVE RDREMzEwQzk1MDY4Qzg3RTJERTZCRjA3MTlCQUQ5QUMwQTQzMB4XDTI1MTAxNTAx MzQzOFoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRUNGQTY3RTFFN0Q4RkU4 NTZEMDA4OUI4NTI0OThDQjkyODZFMzc1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALVANW2UxK4ArtG5EgqWIVjdJ5AZ1qTRSFWO37SVz3g141MTEGPu ZDQqw3eqqIKWlKz70mC24rRnyuB6aF2YpG4fq1ZagoNdzAjS82tJgzg7UnuiRLbr o3w1j/JxYbeMIuauvWOxlpWkWgQLWJHiBJT+ybjPFPUAnC/l+K9oiq5OHcsya1JF GHB+HqOwIf8CwkgTNhuNOKIfIV4NSQAY4gWCYLkOHBeq0LZ0qq8HJ2qsaic7ZACa oZRyGvlzY641Yxgyms2Q0Bl021xzmOXV/dXe3+fm7ipVKe8jzJv2fAyhVxLLBoSr dOaEH6pJKFm5+Ic9ZJM5z+UPDOYjgmDc1ZMCAwEAAaOCAjswggI3MB0GA1UdDgQW BBTs+mfh59j+hW0AibhSSYy5KG43VTAfBgNVHSMEGDAWgBQP7dTTEMlQaMh+Lea/ Bxm62awKQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNDMvRC0zVTB4REpVR2pJZmkzbXZ3Y1p1dG1zQ2tNLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRC0zVTB4REpVR2pJZmkzbXZ3Y1p1dG1z Q2tNLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzQzL0QtM1UweERKVUdqSWZpM212d2NadXRtc0NrTS5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQADNvglDgi5blQ0TTF4svtKO7NONFDQmBaM8QsIp3iHqdhMoTKpEgZcXpcc9vX9 mSNCV+teAcC2I+BySZJSIvyNCvr8r+ZbpSS5D/NY7UnwTGoTZF/FE/rehwoqk0wv fLv/GM8Cg8UlIjUEyKWJWo4nxP0oxin0G8qx2l6qryLNXUvUJxspIuuXfNPpUHLi D5FckBSJqS9DiO7CRKwUjUamneQfLKdI2kQ94N/NdVsFMDDDCkxMsWPlrzVywq53 0Noci8G/7ft6CE3vxnzTeNQgQdr1r7k2kKe0x7cmTZDv8SmSTqPY7uocMONUDPGe RDe33zxKK0Bj0Y3qCZpY8onx -----END CERTIFICATE-----Generated at Wed Nov 5 19:17:07 2025 by rpki-client