$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft File: HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft (raw, json) Hash identifier: 2HTPNW+dtEzTK+quTimsIa+Z+MYVUa7EXXwu10W2cOQ= Subject key identifier: 6C:AD:96:DC:D0:75:CD:5A:F9:6A:4F:C8:4B:0B:AE:0E:2B:D6:10:70 Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Certificate serial: 30 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft Manifest number: 06C0 Signing time: Mon 11 Aug 2025 03:48:34 +0000 Manifest this update: Mon 11 Aug 2025 03:48:34 +0000 Manifest next update: Tue 26 Aug 2025 03:48:34 +0000 Files and hashes: 1: 3CJYWmE_6Q8aHaYPkyVoial1Ilw.roa (hash: aPaR7Ck8WLT8HEPQeWkKhXDMxP0/omdHDZUhVz4BDdo=) 2: 4W9lf-wM2k3x5c2XQlLyerU9qEk.roa (hash: ch6fNeFpzyI4pxVZNyQXZqcTb+7gyMrQMnlSifOcoPQ=) 3: GE0meQRJLmOO_c5f13Ms6HdXNdQ.roa (hash: vv0rNyucCA/o0J0JXnvPS3K++WEDxkLh5pdw+XUvHUY=) 4: GSB61T4LaF8TEfuCu6rmOXGnoFw.roa (hash: 5zDTf/i90wT6aj2j+y41WqEjTLyc0bUyF1AtalDSof0=) 5: HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl (hash: /CV27BqYC4vGSNGcZpNS8sFF4pZoF8pfqc1oph+PWwc=) 6: PYsmhfnDLAm0fvFpvC9v8vBqEfo.roa (hash: MXKmPBGTejsyCq91YnsAMgO5ROtpw1+QT6ZWE66VAPw=) 7: bKF-H9TXIpugKjGd00XviQjPhVk.roa (hash: iYbvi/rPAEPlSdGiWEl313DptgiaKiWf3AjrLTTH5EI=) 8: tVQHM3_tvlE7l8ycGZ2JOeBtu7E.roa (hash: N4KG3gTOGo7Zd83+VCkS921nAuZGli8Qz7MLBCCr5Qw=) 9: z1Wa2Ebe0z6vp7XPpYuY7Tpt7A0.roa (hash: GSSF5QzeJk2DRTRQj+iFqBjfiesN2N012msnN4UywWI=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B Validity Not Before: Jul 30 06:40:43 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=6CAD96DCD075CD5AF96A4FC84B0BAE0E2BD61070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:89:f0:69:7a:1f:58:dd:27:ee:25:a6:1d: 5d:f5:b8:26:03:1c:09:4a:d2:4b:96:83:70:09:df: c2:c8:01:78:cd:95:e4:1e:60:68:f0:be:a6:91:27: 2c:6e:8a:35:82:b1:8a:61:a9:7b:f0:7c:1b:0c:fd: f8:f1:6b:79:02:c6:51:74:d1:b7:b0:3e:12:0b:c4: a1:2e:56:3c:56:56:74:d1:26:62:aa:41:53:f9:c2: b7:49:4e:fc:28:f6:0a:95:30:3b:d8:d1:36:eb:1f: 0e:ed:0f:95:7f:3c:c8:06:47:4d:09:7d:23:a9:c6: 4b:d7:be:95:96:8f:32:88:f4:d2:67:eb:de:5f:dc: 7e:1f:c1:bc:a7:1a:96:6c:99:d7:1c:8b:45:1e:b3: e2:47:b2:7f:b1:6f:99:25:a9:3c:ab:30:2f:e5:45: 84:ed:4a:11:1c:81:45:b5:73:8a:42:b0:80:0c:a4: ff:26:27:67:c3:7e:4f:cf:39:90:ef:eb:e8:a4:55: 2f:c8:20:9d:5d:0c:3a:3c:40:1c:5c:a4:03:fd:f4: 61:75:f6:8a:23:c7:1a:88:80:73:cc:87:ff:6a:0e: 24:18:d0:14:96:37:3e:8a:eb:5f:d4:75:e3:8e:ce: 6c:eb:cf:75:a9:22:3b:03:8e:9d:51:f2:bf:d3:6a: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:AD:96:DC:D0:75:CD:5A:F9:6A:4F:C8:4B:0B:AE:0E:2B:D6:10:70 X509v3 Authority Key Identifier: keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:24:02:9d:50:ae:d4:a9:a0:89:cf:0e:00:c8:c9:f4:61:36: 9c:08:7a:b0:a5:84:b5:6b:d3:c5:4c:d9:b1:54:c2:19:f6:2a: 4e:fe:fe:d4:8f:f3:ac:60:78:2b:a2:a5:85:3b:06:7f:a4:50: 6f:6f:93:83:cf:15:bb:a0:8f:80:0f:53:1f:c4:04:cd:9b:d6: d7:d7:a0:e9:a7:71:08:5c:ff:73:07:f8:c9:d8:9a:14:27:74: da:85:aa:1a:d2:c5:27:d9:df:f7:47:b4:aa:ea:97:f2:07:d4: 26:f0:25:92:c4:fc:52:74:cb:e2:bb:56:1b:7c:2c:92:61:55: db:70:e5:b8:29:53:a3:60:f0:13:27:cc:cb:b5:2c:f8:22:6d: 9b:95:fe:bd:a0:31:c5:70:eb:9e:e0:bb:14:14:1a:f3:b9:c3: 2b:9f:2a:4e:fc:ba:00:39:7d:d0:b8:5d:f1:af:80:71:50:e5: ae:59:9c:17:06:82:8c:55:84:06:59:26:3a:f0:d2:26:d5:fd: 1b:b3:ae:ca:53:a9:ef:40:e1:31:c7:31:34:ef:3b:7e:1f:e2: 80:6d:81:f1:00:df:8f:34:7c:19:32:46:b5:1e:6e:cd:88:dc: b7:85:2f:98:03:e1:9d:76:15:fb:4f:ab:4b:ca:7c:04:67:15: d9:a9:c9:99 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4 OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI1MDczMDA2 NDA0M1oXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNkNBRDk2RENEMDc1Q0Q1 QUY5NkE0RkM4NEIwQkFFMEUyQkQ2MTA3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMh9ifBpeh9Y3SfuJaYdXfW4JgMcCUrSS5aDcAnfwsgBeM2V5B5g aPC+ppEnLG6KNYKximGpe/B8Gwz9+PFreQLGUXTRt7A+EgvEoS5WPFZWdNEmYqpB U/nCt0lO/Cj2CpUwO9jRNusfDu0PlX88yAZHTQl9I6nGS9e+lZaPMoj00mfr3l/c fh/BvKcalmyZ1xyLRR6z4keyf7FvmSWpPKswL+VFhO1KERyBRbVzikKwgAyk/yYn Z8N+T885kO/r6KRVL8ggnV0MOjxAHFykA/30YXX2iiPHGoiAc8yH/2oOJBjQFJY3 PorrX9R1447ObOvPdakiOwOOnVHyv9NqMEMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBRsrZbc0HXNWvlqT8hLC64OK9YQcDAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC83MTMvSHlpS0lvVUNUaFNLSi1SZjVheVEwb3N3UFVzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAH8kAp1QrtSpoInPDgDIyfRhNpwIerClhLVr08VM2bFUwhn2Kk7+/tSP86xg eCuipYU7Bn+kUG9vk4PPFbugj4APUx/EBM2b1tfXoOmncQhc/3MH+MnYmhQndNqF qhrSxSfZ3/dHtKrql/IH1CbwJZLE/FJ0y+K7Vht8LJJhVdtw5bgpU6Ng8BMnzMu1 LPgibZuV/r2gMcVw657guxQUGvO5wyufKk78ugA5fdC4XfGvgHFQ5a5ZnBcGgoxV hAZZJjrw0ibV/RuzrspTqe9A4THHMTTvO34f4oBtgfEA3480fBkyRrUebs2I3LeF L5gD4Z12FftPq0vKfARnFdmpyZk= -----END CERTIFICATE-----Generated at Mon Aug 11 07:32:40 2025 by rpki-client