$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft File: 7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json) Hash identifier: fe0m/oDOBZ+uBpglPZPwjWFACjY7Jv09EGmN4ZCrAi0= Subject key identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Certificate serial: 43 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft Manifest number: 05BC Signing time: Sat 21 Jun 2025 23:35:19 +0000 Manifest this update: Sat 21 Jun 2025 23:35:19 +0000 Manifest next update: Sun 06 Jul 2025 23:35:19 +0000 Files and hashes: 1: 1SJbYUd8p8oMen6RPa00IOWV9mE.roa (hash: UDpcHQ+0Abc5mWmR8ULJBoE8aKN+3NO2e+ukT6tgxHE=) 2: 2tfCUV_uz9A4cuYQPukBhWSb95s.roa (hash: rLb9OLvnUAWM0boRqUkiI5TRFDZgMEpErnM1W8cSidY=) 3: 7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa (hash: 3LyiamrnzDGpP8Svs8FK2CISDqoO7UiQPpQOYaoqlPA=) 4: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: I6GIn6d8MR89+g6UHDouYu75IiuWzu4Qxob3g7KMUTo=) 5: 85Nf2Qq391Vv7HxJ-kHXZY1pjc0.roa (hash: 9QoDjSKM9fHDfVtU1sq5tzZVzvHN7kh4uN+rudSmHfg=) 6: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=) 7: HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (hash: 3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=) 8: PlXujQnIvaBVcgfdZUzMCXjJkDo.roa (hash: aCxl5jvQ7JXLWmmFHmSbXTq8loJZ9FyWSuvvPH4W5oM=) 9: pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa (hash: iFw35uTbq7FkqOf44/VRS8oi7idiiwS4oRODoDjRvoU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 21:03:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Validity Not Before: Jun 15 01:40:58 2025 GMT Not After : Jun 15 01:30:02 2026 GMT Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e: 85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf: b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7: 45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9: fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff: f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed: fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89: af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe: 13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f: 56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac: 80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef: 2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22: eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85: a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3: c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9: 38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d: f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 X509v3 Authority Key Identifier: keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:5e:c6:40:de:75:5d:0b:e8:c5:62:35:15:48:71:20:44:04: 08:28:f8:20:31:1d:34:b6:e1:ee:69:1b:50:18:fb:e0:08:6d: 19:ce:a9:d4:01:37:79:e4:a4:b1:2f:76:e8:d4:5f:3f:29:30: 66:74:fe:38:28:8a:61:5e:0a:5b:8e:43:95:3f:18:7e:e6:25: fe:38:4a:ea:9b:c8:2c:24:15:df:ce:1f:bb:cf:23:81:96:0f: e8:ee:7a:9d:5c:3a:c2:6e:9d:2b:ff:ed:cf:b8:f0:42:fa:fe: f1:b4:a7:47:67:d6:cb:25:26:ef:60:73:2a:9e:ad:fb:c6:12: ec:bc:b0:4f:77:60:c1:9c:21:89:93:b9:be:b0:07:7f:18:11: 58:39:41:26:f4:06:38:a5:5b:4a:bf:a7:0c:be:9e:46:62:5d: a3:75:b0:58:6a:45:86:8f:a0:2e:34:0c:a1:c2:5f:12:1f:69: f6:55:6e:94:53:91:da:97:9c:2a:3f:19:f1:83:97:1b:00:1c: 59:e5:f7:82:80:62:2e:68:6c:f0:c2:ee:95:64:0e:dd:92:79: e9:a9:f7:31:1d:57:16:2e:11:71:a9:ed:79:f5:a2:fc:a6:78: 52:b0:2e:7c:71:f9:23:62:c0:6e:20:72:6c:f1:a3:66:54:6e: 5c:86:2e:15 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI1MDYxNTAx NDA1OFoXDTI2MDYxNTAxMzAwMlowMzExMC8GA1UEAxMoQTE1NzJFNjA1OUFBNTkw NjBFODFBNzk1ODUwREEyRjAwN0MxM0FBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK4pO/SM1wQlR+0NRGU+hVRImg63TDxaLjt7Laq/uCQBFn57dfqa Nm1eR4TXRaLiYBQgGiwLp3cDCLO5/DIDJiMu3ePo7fnP8J//8n3Q6Fe6vAMF1Hyv wTLt+7LPAfE5WKuqbd9NVnmJr3o3RLR8eB4wZnXTznP+Ey+wOg/iKKoU+JdmeMwv VolrWPgVJMfxL98RN6OsgEgduKRN+//MJzQfxLLvLOVjtO0wXqwLijjJyKwi67JD pBh9pc+WN+SzV1SFo5jnBKQTaXSLJClL+inzwB+YbAeWzJDUNRSq8vHZOAfTH05X shpGyK0+roiN+TaIhRyrxg49f/b074dPOK0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBShVy5gWapZBg6Bp5WFDaLwB8E6pDAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0 AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MjQvN2hPc3ozNTNzQ2txNFhzRk5BSVJ5UGx4ZGdzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJVexkDedV0L6MViNRVIcSBEBAgo+CAxHTS24e5pG1AY++AIbRnOqdQBN3nk pLEvdujUXz8pMGZ0/jgoimFeCluOQ5U/GH7mJf44SuqbyCwkFd/OH7vPI4GWD+ju ep1cOsJunSv/7c+48EL6/vG0p0dn1sslJu9gcyqerfvGEuy8sE93YMGcIYmTub6w B38YEVg5QSb0BjilW0q/pwy+nkZiXaN1sFhqRYaPoC40DKHCXxIfafZVbpRTkdqX nCo/GfGDlxsAHFnl94KAYi5obPDC7pVkDt2Seemp9zEdVxYuEXGp7Xn1ovymeFKw Lnxx+SNiwG4gcmzxo2ZUblyGLhU= -----END CERTIFICATE-----Generated at Sun Jun 22 03:23:31 2025 by rpki-client