$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft File: ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft (raw, json) Hash identifier: 5ILTqV/lP9SnQSrKYDiRWxYXUfMP2vsyJ6EFUCsFB5o= Subject key identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 Certificate issuer: /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Certificate serial: 3249 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft Manifest number: 4842 Signing time: Sat 26 Apr 2025 10:18:26 +0000 Manifest this update: Sat 26 Apr 2025 10:18:26 +0000 Manifest next update: Sun 11 May 2025 10:18:26 +0000 Files and hashes: 1: JLNqIMDP7NK8VDvRfxsurruSk00.roa (hash: +RznV8jGmcr3KqPgdh+tp5DMf0mTETRZLEXIvl4XA18=) 2: UoBsXEoHwN1b9tpkrDrzZBiATHk.roa (hash: Lx/hGflCyzhNfaH/J6OSqsP4V8m0t7wUbAzNkIMERjE=) 3: ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl (hash: Ga0q5H1WAuW+6nMjRY3IFrQXHbSXd+XcWEUpki7Zruw=) 4: dKFcBSXoOdOtkzauz22Lhe05k8M.roa (hash: T4frtTROvElRFijugcMGz4EXItL+/GdnmhXmMUD+GBg=) 5: dlaJ2v_GV1iKBY5Qg5iesuFQY2s.roa (hash: A3ZE9llmUja14Qq5eE9xjlastwso5s8IvwxTWGGxIB8=) 6: kXC1vk8XN0pEehOLgdMBrUqSSOE.roa (hash: VSSxLhKCiYYgdFNKBWvmgg6pODGvl1cW2RIggtd4c14=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12873 (0x3249) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130 Validity Not Before: Apr 15 01:34:06 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=47A1FDBD2EA165B9D972F0D16EFCFB5DEF5DC367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:3d:12:7f:f0:73:2a:65:da:f9:b6:9f:0a: 5f:63:dd:61:59:b4:44:2a:2e:d0:3e:2c:fd:86:ee: 35:26:46:f6:3e:49:11:e0:01:87:68:15:5c:ad:ea: ce:69:4f:c8:30:14:c5:78:26:3b:9f:04:3c:37:ec: d0:15:01:9c:21:40:dc:6d:76:68:58:a7:76:c8:74: 0a:b8:65:87:b7:07:ef:27:d3:ed:4f:6e:d5:5d:d4: e0:40:61:80:da:05:ef:10:09:f7:8b:88:8c:f8:e1: de:cc:85:a8:17:3c:bd:ac:ae:67:a7:47:c5:cf:d5: b6:44:44:11:ed:c2:ac:91:8b:32:28:e8:3f:3e:45: 76:4b:4f:40:dd:93:75:c5:a9:5b:44:7f:e3:b3:86: df:56:0e:54:9a:af:cc:06:c3:a0:de:a3:d5:3f:42: 9a:1e:25:6c:9d:5f:68:3d:90:83:6b:55:8d:8d:b7: 94:d3:eb:14:e7:7a:7b:9a:d0:c7:ad:67:69:ba:2d: 62:a3:b4:10:67:6f:4f:1c:de:a7:08:55:cd:d0:82: 16:af:e9:2d:c5:5c:24:58:e8:82:20:8b:6d:6a:bb: 07:6c:1b:79:c2:66:9b:ca:70:fd:4a:98:fa:54:e5: 98:45:75:0b:54:53:9e:5d:9d:7f:bb:1d:f8:08:9b: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A1:FD:BD:2E:A1:65:B9:D9:72:F0:D1:6E:FC:FB:5D:EF:5D:C3:67 X509v3 Authority Key Identifier: keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:98:c5:60:97:d4:40:50:07:f5:8a:fb:5f:21:90:5e:db:87: 7d:3c:e7:c6:2c:cf:0b:a5:c4:74:86:30:a2:90:c4:1a:1d:5f: 25:7c:36:0d:df:70:2b:d4:17:43:56:ee:1f:93:28:cd:37:30: 58:54:b8:74:6b:2e:6e:31:6e:40:2d:35:8b:ff:cb:a6:2f:dc: d0:04:c2:bc:c7:8e:75:e2:98:8e:20:99:3a:3d:a1:30:32:a2: 29:9e:a5:67:cf:d6:9d:b6:81:15:08:61:02:45:0e:dc:cd:16: 6d:c1:f4:fd:d7:38:26:e6:5e:ce:91:ad:44:6b:49:3c:a6:e2: 30:90:df:3b:df:64:e7:56:ce:46:b8:fd:c7:4e:c1:5f:ce:43: f7:48:9f:3c:3f:e1:b1:97:8c:0f:34:85:8f:ab:d0:12:8f:6b: f3:76:9b:88:ce:a9:07:25:32:a5:36:8f:d9:2b:f7:7e:b0:d2: 24:88:e6:00:20:4e:4b:07:d6:ba:3b:10:83:b4:fa:5b:17:de: 8e:91:be:6b:67:99:31:81:39:cc:03:1e:e4:d3:d3:3e:bb:00: 06:ad:5b:61:dd:01:83:64:89:04:c4:d9:50:17:2e:87:16:b3: 5c:7a:fc:0c:60:9f:c6:a4:51:33:55:eb:5b:cf:ed:58:90:9c: f6:88:8f:2f -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgICMkkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNTA0MTUw MTM0MDZaFw0yNjA0MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ3QTFGREJEMkVBMTY1 QjlEOTcyRjBEMTZFRkNGQjVERUY1REMzNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCpHD0Sf/BzKmXa+bafCl9j3WFZtEQqLtA+LP2G7jUmRvY+SRHg AYdoFVyt6s5pT8gwFMV4JjufBDw37NAVAZwhQNxtdmhYp3bIdAq4ZYe3B+8n0+1P btVd1OBAYYDaBe8QCfeLiIz44d7MhagXPL2srmenR8XP1bZERBHtwqyRizIo6D8+ RXZLT0Ddk3XFqVtEf+Ozht9WDlSar8wGw6Deo9U/QpoeJWydX2g9kINrVY2Nt5TT 6xTnenua0MetZ2m6LWKjtBBnb08c3qcIVc3Qghav6S3FXCRY6IIgi21quwdsG3nC ZpvKcP1KmPpU5ZhFdQtUU55dnX+7HfgIm+5NAgMBAAGjggI9MIICOTAdBgNVHQ4E FgQUR6H9vS6hZbnZcvDRbvz7Xe9dw2cwHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvNjk5L1pTTGl3LTlOa19FLWRZcUFla0NvNGItYXNUQS5tZnQw RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAh BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQBEmMVgl9RAUAf1ivtfIZBe24d9POfGLM8LpcR0hjCikMQaHV8lfDYN33Ar 1BdDVu4fkyjNNzBYVLh0ay5uMW5ALTWL/8umL9zQBMK8x4514piOIJk6PaEwMqIp nqVnz9adtoEVCGECRQ7czRZtwfT91zgm5l7Oka1Ea0k8puIwkN8732TnVs5GuP3H TsFfzkP3SJ88P+Gxl4wPNIWPq9ASj2vzdpuIzqkHJTKlNo/ZK/d+sNIkiOYAIE5L B9a6OxCDtPpbF96Okb5rZ5kxgTnMAx7k09M+uwAGrVth3QGDZIkExNlQFy6HFrNc evwMYJ/GpFEzVetbz+1YkJz2iI8v -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:30 2025 by rpki-client