$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft File: XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft (raw, json) Hash identifier: PhGfu/yPoand3CW/4/uyfleH9i/BhaIuSpt+JlrOZcQ= Subject key identifier: FF:87:17:C7:46:98:A8:61:F8:59:91:5F:B6:3B:63:2D:63:FC:AD:C4 Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 Certificate issuer: /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Certificate serial: 21 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft Manifest number: 0441 Signing time: Sat 26 Apr 2025 11:36:12 +0000 Manifest this update: Sat 26 Apr 2025 11:36:12 +0000 Manifest next update: Sun 11 May 2025 11:36:12 +0000 Files and hashes: 1: 8c4MaMo_qlPF6Fhm6Wcias1i58k.roa (hash: I2ooGXX4AylXUFARgI73GNQtA5QZ4QpECJpq7FERBJc=) 2: Je-iLZYvXy03qmZXuK8mIokvqRg.roa (hash: zyEEV8x9Gijys8ZG4ePAg8o7Y3lMox3jLi43GFMQRLk=) 3: LG-Nf37VmFxoLd-7An4qrmue15k.roa (hash: uIZYviYs0Ev8Jl99IfGD4f5sMkahihUjHNq9wQ3iHi0=) 4: XDVetXWIaCd4KM3WMgq6MdEkixk.roa (hash: pkglUYCNYaALcOmY/AQ9WJYPXuRsaWxYhRIbDNk+0ak=) 5: XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl (hash: KIAXBdANIyyHbdHhTlVvzlfSDUcgMMJf6yY29Z6s2Vw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418 Validity Not Before: Apr 15 01:30:22 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=FF8717C74698A861F859915FB63B632D63FCADC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:01:05:41:13:21:a3:88:d0:a1:16:86:7a:00: fe:a4:bd:0c:1e:fb:72:18:a0:f2:92:d5:99:9b:59: 7f:c7:dc:b1:58:1d:54:1c:ec:42:14:c1:2d:71:d5: 59:2d:fa:ff:a9:eb:03:1b:b7:09:95:74:59:c1:8b: 71:c4:dc:f8:d8:9f:26:b4:6c:c2:28:9d:4f:85:c1: 3c:23:fe:ed:0d:61:69:68:3b:bc:3e:6e:3f:11:73: ec:06:0e:4e:2f:fe:9b:be:5e:2d:4c:59:af:be:a5: 0f:06:15:66:c5:38:4f:88:92:b2:19:78:8c:98:87: ac:8e:c8:c3:94:8b:3f:f2:41:94:02:1d:8b:89:47: 6f:63:46:9e:d8:41:56:1d:7a:b7:a3:f9:e3:a9:a4: fb:43:45:dc:bd:f5:a2:0b:68:eb:e3:f2:63:7a:ce: 34:c2:39:71:53:6c:0d:ce:dc:f8:43:cb:0f:03:83: e7:1c:50:ce:6f:e3:1e:5e:aa:e4:0d:d8:48:b9:27: 46:5f:44:3b:41:b0:4e:0d:cb:9a:8b:58:a7:17:1e: 8e:ce:28:2e:e1:e7:f6:69:dd:d2:05:b3:8a:0b:cb: 1b:fb:25:6b:08:3e:ed:7b:c3:ac:41:0a:c0:69:de: 15:ae:0f:b4:a7:fd:3c:0b:56:38:a9:e4:59:3b:36: 0b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:87:17:C7:46:98:A8:61:F8:59:91:5F:B6:3B:63:2D:63:FC:AD:C4 X509v3 Authority Key Identifier: keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:d8:5f:de:1a:15:27:48:60:c4:86:58:ab:47:e3:b4:f9:45: 92:86:35:9c:d1:20:7e:52:b8:6f:39:9f:dc:28:92:76:72:c2: 26:eb:51:e4:12:b9:87:a9:d2:3c:17:e9:f1:29:86:1e:52:4a: 7d:e8:bb:54:14:fd:20:28:0c:a7:c7:2b:27:a0:e1:d0:d2:25: 33:0a:68:95:21:ea:b7:bd:95:11:49:bb:dd:67:c1:48:94:65: 71:6f:22:c3:5d:c1:44:78:14:80:ad:7b:a7:bc:8f:ad:08:84: 11:93:1d:bb:79:ec:76:40:79:9e:a2:88:e0:7f:e1:4b:76:99: 46:74:e7:4e:3d:90:32:9a:63:cb:ff:b4:93:c7:8a:f5:a4:e0: b5:c9:6b:36:0b:d6:d2:33:fb:d7:d2:87:5b:dd:0b:e1:8e:3c: 9c:ec:16:86:2b:41:31:84:5b:e5:84:3c:e7:54:80:19:8f:4a: a7:f7:c5:9e:60:5f:65:0f:8d:5b:5d:4d:41:ca:99:34:ba:2b: 5b:2d:75:e8:02:6f:aa:8c:f4:ec:c1:dc:90:d6:cf:11:a2:61: e4:a4:ff:77:66:09:9d:25:5d:47:31:f3:cc:98:a2:7f:03:29: 10:2f:f1:b8:ef:d4:f6:cc:bd:f5:3c:72:73:f8:19:f2:bb:69: 5c:d9:18:52 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDhG NDhGOTlDNUIwNzQ1Qjc3RjhCQ0E3NTRFNjM4ODVDQURDNDE4MB4XDTI1MDQxNTAx MzAyMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoRkY4NzE3Qzc0Njk4QTg2 MUY4NTk5MTVGQjYzQjYzMkQ2M0ZDQURDNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMYBBUETIaOI0KEWhnoA/qS9DB77chig8pLVmZtZf8fcsVgdVBzs QhTBLXHVWS36/6nrAxu3CZV0WcGLccTc+NifJrRswiidT4XBPCP+7Q1haWg7vD5u PxFz7AYOTi/+m75eLUxZr76lDwYVZsU4T4iSshl4jJiHrI7Iw5SLP/JBlAIdi4lH b2NGnthBVh16t6P546mk+0NF3L31ogto6+PyY3rONMI5cVNsDc7c+EPLDwOD5xxQ zm/jHl6q5A3YSLknRl9EO0GwTg3LmotYpxcejs4oLuHn9mnd0gWzigvLG/slawg+ 7XvDrEEKwGneFa4PtKf9PAtWOKnkWTs2CxECAwEAAaOCAjswggI3MB0GA1UdDgQW BBT/hxfHRpioYfhZkV+2O2MtY/ytxDAfBgNVHSMEGDAWgBRdj0j5nFsHRbd/i8p1 TmOIXK3EGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTQvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0eEJnLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWFk5SS1aeGJCMFczZjR2S2RVNWppRnl0 eEJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzU0L1hZOUktWnhiQjBXM2Y0dktkVTVqaUZ5dHhCZy5tZnQwRgYI KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw L2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQBd2F/eGhUnSGDEhlirR+O0+UWShjWc0SB+UrhvOZ/cKJJ2csIm61HkErmHqdI8 F+nxKYYeUkp96LtUFP0gKAynxysnoOHQ0iUzCmiVIeq3vZURSbvdZ8FIlGVxbyLD XcFEeBSArXunvI+tCIQRkx27eex2QHmeoojgf+FLdplGdOdOPZAymmPL/7STx4r1 pOC1yWs2C9bSM/vX0odb3Qvhjjyc7BaGK0ExhFvlhDznVIAZj0qn98WeYF9lD41b XU1Bypk0uitbLXXoAm+qjPTswdyQ1s8RomHkpP93ZgmdJV1HMfPMmKJ/AykQL/G4 79T2zL31PHJz+Bnyu2lc2RhS -----END CERTIFICATE-----Generated at Sat Apr 26 17:26:14 2025 by rpki-client