$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft File: ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft (raw, json) Hash identifier: EWhFQScjTjVzHDxJktQaQcGVDWUKmbtR+Dudz26L87c= Subject key identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 324F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft Manifest number: 4AC3 Signing time: Mon 11 Aug 2025 08:45:49 +0000 Manifest this update: Mon 11 Aug 2025 08:45:49 +0000 Manifest next update: Tue 26 Aug 2025 08:45:49 +0000 Files and hashes: 1: JLNqIMDP7NK8VDvRfxsurruSk00.roa (hash: +RznV8jGmcr3KqPgdh+tp5DMf0mTETRZLEXIvl4XA18=) 2: UoBsXEoHwN1b9tpkrDrzZBiATHk.roa (hash: Lx/hGflCyzhNfaH/J6OSqsP4V8m0t7wUbAzNkIMERjE=) 3: ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl (hash: rSvPVuwbe3gCUNi62x5/52NkoY+yQZsvHHTGjyaoPYY=) 4: dKFcBSXoOdOtkzauz22Lhe05k8M.roa (hash: T4frtTROvElRFijugcMGz4EXItL+/GdnmhXmMUD+GBg=) 5: dlaJ2v_GV1iKBY5Qg5iesuFQY2s.roa (hash: A3ZE9llmUja14Qq5eE9xjlastwso5s8IvwxTWGGxIB8=) 6: kXC1vk8XN0pEehOLgdMBrUqSSOE.roa (hash: VSSxLhKCiYYgdFNKBWvmgg6pODGvl1cW2RIggtd4c14=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12879 (0x324f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Jul 30 06:37:30 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=47A1FDBD2EA165B9D972F0D16EFCFB5DEF5DC367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:3d:12:7f:f0:73:2a:65:da:f9:b6:9f:0a: 5f:63:dd:61:59:b4:44:2a:2e:d0:3e:2c:fd:86:ee: 35:26:46:f6:3e:49:11:e0:01:87:68:15:5c:ad:ea: ce:69:4f:c8:30:14:c5:78:26:3b:9f:04:3c:37:ec: d0:15:01:9c:21:40:dc:6d:76:68:58:a7:76:c8:74: 0a:b8:65:87:b7:07:ef:27:d3:ed:4f:6e:d5:5d:d4: e0:40:61:80:da:05:ef:10:09:f7:8b:88:8c:f8:e1: de:cc:85:a8:17:3c:bd:ac:ae:67:a7:47:c5:cf:d5: b6:44:44:11:ed:c2:ac:91:8b:32:28:e8:3f:3e:45: 76:4b:4f:40:dd:93:75:c5:a9:5b:44:7f:e3:b3:86: df:56:0e:54:9a:af:cc:06:c3:a0:de:a3:d5:3f:42: 9a:1e:25:6c:9d:5f:68:3d:90:83:6b:55:8d:8d:b7: 94:d3:eb:14:e7:7a:7b:9a:d0:c7:ad:67:69:ba:2d: 62:a3:b4:10:67:6f:4f:1c:de:a7:08:55:cd:d0:82: 16:af:e9:2d:c5:5c:24:58:e8:82:20:8b:6d:6a:bb: 07:6c:1b:79:c2:66:9b:ca:70:fd:4a:98:fa:54:e5: 98:45:75:0b:54:53:9e:5d:9d:7f:bb:1d:f8:08:9b: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:30:5d:bb:86:98:98:6f:4b:88:5a:a8:60:f1:07:a5:6f:6e: 00:61:b3:d9:a0:52:a5:64:5e:a5:19:0b:cd:bc:af:f7:ce:df: bb:d0:45:f7:4a:24:0d:cb:21:f5:66:3f:56:be:e3:33:25:b4: b5:2e:64:b9:09:6d:91:32:fb:1d:fa:cb:9c:07:ae:df:46:fd: 3e:87:ed:0d:80:db:69:c6:53:18:f6:9a:2d:4b:1f:93:ab:aa: 3d:87:08:ed:ce:5c:9d:c2:32:9f:d2:47:63:04:e2:24:0a:83: a8:c8:a2:4c:f2:3a:89:6c:52:71:81:b2:ef:0c:4e:e5:54:a1: a7:7a:ae:67:8b:36:60:25:69:0d:2b:5a:5c:67:8f:7c:45:dd: e3:e8:5d:bf:69:0e:b8:a8:a8:2f:68:75:45:d1:41:ec:64:71: 4b:03:33:58:1d:c2:21:c3:5d:cc:93:28:5b:a1:d9:ae:00:fc: 12:65:27:84:e1:e9:ea:ed:8d:a9:38:a4:dd:de:a1:ce:e6:e9: c5:51:60:1b:1f:85:1a:9d:28:e8:5f:42:80:94:68:7e:61:4c: 1a:d6:31:cf:dc:08:0e:cd:38:d3:c7:db:e9:d3:08:af:e6:a7: a9:75:f0:bf:15:bf:0c:e3:eb:a8:86:d2:3c:97:c6:ad:72:a7: 5f:b2:d5:8f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgICMk8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNTA3MzAw NjM3MzBaFw0yNjA3MzAwNjI5MDhaMDMxMTAvBgNVBAMTKDQ3QTFGREJEMkVBMTY1 QjlEOTcyRjBEMTZFRkNGQjVERUY1REMzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpHD0Sf/BzKmXa+bafCl9j3WFZtEQqLtA+LP2G7jUmRvY+SRHg AYdoFVyt6s5pT8gwFMV4JjufBDw37NAVAZwhQNxtdmhYp3bIdAq4ZYe3B+8n0+1P btVd1OBAYYDaBe8QCfeLiIz44d7MhagXPL2srmenR8XP1bZERBHtwqyRizIo6D8+ RXZLT0Ddk3XFqVtEf+Ozht9WDlSar8wGw6Deo9U/QpoeJWydX2g9kINrVY2Nt5TT 6xTnenua0MetZ2m6LWKjtBBnb08c3qcIVc3Qghav6S3FXCRY6IIgi21quwdsG3nC ZpvKcP1KmPpU5ZhFdQtUU55dnX+7HfgIm+5NAgMBAAGjggI9MIICOTAdBgNVHQ4E FgQUR6H9vS6hZbnZcvDRbvz7Xe9dw2cwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjk5L1pTTGl3LTlOa19FLWRZcUFla0NvNGItYXNUQS5tZnQw RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQAnMF27hpiYb0uIWqhg8Qelb24AYbPZoFKlZF6lGQvNvK/3zt+70EX3SiQN yyH1Zj9WvuMzJbS1LmS5CW2RMvsd+sucB67fRv0+h+0NgNtpxlMY9potSx+Tq6o9 hwjtzlydwjKf0kdjBOIkCoOoyKJM8jqJbFJxgbLvDE7lVKGneq5nizZgJWkNK1pc Z498Rd3j6F2/aQ64qKgvaHVF0UHsZHFLAzNYHcIhw13MkyhbodmuAPwSZSeE4enq 7Y2pOKTd3qHO5unFUWAbH4UanSjoX0KAlGh+YUwa1jHP3AgOzTjTx9vp0wiv5qep dfC/Fb8M4+uohtI8l8atcqdfstWP -----END CERTIFICATE-----Generated at Mon Aug 11 10:43:18 2025 by rpki-client