$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft File: heXxjZYxwlh7CU54zdThuGUPTLk.mft (raw, json) Hash identifier: BqgHF58sGZTxDodWwN6yfYbcm59JibaNpgq9ds7Z4l4= Subject key identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30 Authority key identifier: 85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 Certificate issuer: /CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Certificate serial: 0E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft Manifest number: 02A2 Signing time: Mon 11 Aug 2025 09:07:19 +0000 Manifest this update: Mon 11 Aug 2025 09:07:19 +0000 Manifest next update: Tue 26 Aug 2025 09:07:19 +0000 Files and hashes: 1: AdMaPSay0Od6CcGQlsjG4EWxjjE.roa (hash: 1xmO3h8be8qkvMR/p7ooCKnp8YWzdbU6YzCVP5Wn9PU=) 2: Cgr4vrEXLst_PC27lRgEE70gIf8.roa (hash: 2dBNXR/uqgzbtVj22EcWAf66T634oTntixsOJOO/Q68=) 3: QMzgb68WkMO5sso7QFJH-HR4KZc.roa (hash: SbHkB9DsLhF5GZQRXJaTixDO3UC8Tx/yGn+BoY93eEc=) 4: Qhu-g4bhbS7g2KE8qMH-n_iKn_s.roa (hash: Lvfbo+DDTDxLuvFSKmLk9/dyFX6mGFcoQd6m9Dr00FA=) 5: heXxjZYxwlh7CU54zdThuGUPTLk.crl (hash: dzwetqtGDTM8lyK87p2UccEuWWmhe4Hkwio0cSqO/90=) 6: jPunJw3-EXwnD4HV8XvCVsJGLDs.roa (hash: wRy0qJsUy2sPVetIywT0v4LFP3t24hyicVNpMv9CuBc=) 7: yBe6Q0a1e8U2u5vDAidXhvuJxNQ.roa (hash: xbPHknJgKfhnqgPRFUhrwURUsCXzKvDNaiWfOj6teD8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E5F18D9631C2587B094E78CDD4E1B8650F4CB9 Validity Not Before: Jul 30 06:41:53 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=35FCD8FE7F838794A664EFFC4C2FEA9A70653930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:29:00:53:b7:7c:96:33:98:60:fd:8d:86: 55:c7:c4:2e:07:bb:be:b4:3a:dd:85:89:bf:8e:b3: 49:51:9a:4b:98:1f:84:22:42:26:1c:1a:8e:1d:ba: 34:8b:9e:04:ad:8f:b3:cc:48:eb:48:1d:0a:c1:e6: 9a:be:8c:5c:66:b1:e9:99:78:50:2e:f4:c2:85:fa: a0:ea:25:87:0c:fc:f3:7f:6c:5b:93:95:0d:f7:88: a5:44:8f:35:c3:17:2d:b7:26:9c:d3:fd:0f:9a:20: 05:67:22:41:67:f4:2b:27:6b:9a:e8:fa:1d:29:9d: 7a:25:f5:cf:3c:25:ad:b8:c1:d0:bf:f9:ea:9b:4c: 59:1c:70:10:f4:83:64:18:62:27:4a:91:51:a6:8a: 4e:c6:f0:af:34:23:de:05:a4:d0:c0:9d:65:22:b1: bb:7a:06:70:ba:f4:ec:d2:0a:e8:69:ae:96:7e:1e: 5e:e9:b5:28:7e:3f:57:88:fc:96:e3:aa:9e:e2:37: ba:6b:52:53:ef:b2:78:4b:b1:bf:2f:57:71:14:80: 3b:cb:36:02:e1:b3:59:fc:cb:85:ff:03:49:d1:d9: e1:65:87:c7:a4:78:4f:52:ed:93:20:ed:6a:a9:07: df:bf:83:0e:b9:84:21:76:e4:c7:bb:4c:f2:07:53: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FC:D8:FE:7F:83:87:94:A6:64:EF:FC:4C:2F:EA:9A:70:65:39:30 X509v3 Authority Key Identifier: keyid:85:E5:F1:8D:96:31:C2:58:7B:09:4E:78:CD:D4:E1:B8:65:0F:4C:B9 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/heXxjZYxwlh7CU54zdThuGUPTLk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/677/heXxjZYxwlh7CU54zdThuGUPTLk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:47:38:f7:dc:05:df:25:0a:32:c4:a9:7e:b6:a8:10:39:d7: 2c:12:24:03:87:9d:a0:00:47:71:7a:6b:e0:8a:a3:c5:69:b1: d1:a9:ad:19:61:6d:5f:96:d8:7b:bc:84:d4:fd:f2:a6:97:e0: a6:24:16:76:7e:2e:43:ab:23:61:fe:e8:1a:b7:f8:12:85:92: 76:bc:00:28:84:3b:46:be:98:59:d1:99:88:f9:53:67:50:6c: f2:f3:16:dd:14:1e:36:14:7e:f6:cb:b6:32:70:c4:64:7e:14: da:31:2f:8a:92:50:10:bc:8a:85:16:18:1f:70:54:48:7a:f8: 86:b8:63:49:27:e2:e2:98:d9:1d:ae:91:82:7c:6e:f2:04:1d: 19:8e:50:ef:78:25:a1:ad:1e:fe:f4:89:9e:bc:be:3c:2c:c6: ff:74:eb:63:8a:bc:70:e1:b3:f3:6e:8b:e1:fe:0a:46:df:48: 2c:8e:f0:47:77:a3:e4:da:28:7f:03:14:2d:94:5d:3a:44:e8: 60:1b:25:4f:00:b0:17:46:95:51:c3:c9:80:d0:d5:25:d2:fe: 2c:4e:67:07:c2:03:83:27:f1:f4:c9:aa:91:41:8f:7d:9a:ab: 39:09:ca:86:58:2b:f4:3e:43:f4:1f:88:3b:2c:5a:98:d6:e9: 67:11:a1:35 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUU1 RjE4RDk2MzFDMjU4N0IwOTRFNzhDREQ0RTFCODY1MEY0Q0I5MB4XDTI1MDczMDA2 NDE1M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoMzVGQ0Q4RkU3RjgzODc5 NEE2NjRFRkZDNEMyRkVBOUE3MDY1MzkzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALoGKQBTt3yWM5hg/Y2GVcfELge7vrQ63YWJv46zSVGaS5gfhCJC Jhwajh26NIueBK2Ps8xI60gdCsHmmr6MXGax6Zl4UC70woX6oOolhwz8839sW5OV DfeIpUSPNcMXLbcmnNP9D5ogBWciQWf0Kydrmuj6HSmdeiX1zzwlrbjB0L/56ptM WRxwEPSDZBhiJ0qRUaaKTsbwrzQj3gWk0MCdZSKxu3oGcLr07NIK6Gmuln4eXum1 KH4/V4j8luOqnuI3umtSU++yeEuxvy9XcRSAO8s2AuGzWfzLhf8DSdHZ4WWHx6R4 T1LtkyDtaqkH37+DDrmEIXbkx7tM8gdT9x8CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQ1/Nj+f4OHlKZk7/xML+qacGU5MDAfBgNVHSMEGDAWgBSF5fGNljHCWHsJTnjN 1OG4ZQ9MuTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNjc3L2hlWHhqWll4d2xoN0NVNTR6ZFRodUdVUFRMay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hlWHhqWll4d2xoN0NVNTR6ZFRodUdV UFRMay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC82NzcvaGVYeGpaWXh3bGg3Q1U1NHpkVGh1R1VQVExrLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAB9HOPfcBd8lCjLEqX62qBA51ywSJAOHnaAAR3F6a+CKo8VpsdGprRlhbV+W 2Hu8hNT98qaX4KYkFnZ+LkOrI2H+6Bq3+BKFkna8ACiEO0a+mFnRmYj5U2dQbPLz Ft0UHjYUfvbLtjJwxGR+FNoxL4qSUBC8ioUWGB9wVEh6+Ia4Y0kn4uKY2R2ukYJ8 bvIEHRmOUO94JaGtHv70iZ68vjwsxv9062OKvHDhs/Nui+H+CkbfSCyO8Ed3o+Ta KH8DFC2UXTpE6GAbJU8AsBdGlVHDyYDQ1SXS/ixOZwfCA4Mn8fTJqpFBj32aqzkJ yoZYK/Q+Q/QfiDssWpjW6WcRoTU= -----END CERTIFICATE-----Generated at Mon Aug 11 10:40:11 2025 by rpki-client