$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft File: FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft (raw, json) Hash identifier: qecJ86tcw6hi+qk6LU6LpQXbrRCVcpRhTTP+ndtly+I= Subject key identifier: 77:2A:04:1C:C6:30:7E:09:26:95:0B:F0:B2:CD:9B:8D:C9:DE:FC:27 Authority key identifier: 16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0 Certificate issuer: /CN=16851F56697ED9D56929BD0242D43B0278FC16E0 Certificate serial: 6B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft Manifest number: 1701 Signing time: Mon 11 Aug 2025 09:07:40 +0000 Manifest this update: Mon 11 Aug 2025 09:07:40 +0000 Manifest next update: Tue 26 Aug 2025 09:07:40 +0000 Files and hashes: 1: D7xQD9mV537AAHgkklqDGTOclik.roa (hash: FflzxzM1GuK1OUAxnmH+Lrp6CC7Wza+PJKRlskmPp4c=) 2: FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl (hash: Fi/dpeIJD7CLmdEWCbcPp4WFNP4D3tDefkoENTBF0DQ=) 3: VaUrW-_dSKJ9DWKUcvyWoskHTXg.roa (hash: MJpEDD4ICEX+HeBPgnZr8ZcgLOLoJ7RWenXAW6P2QAU=) 4: YB42mj45EecHNuhcQTLAp_3T-O0.roa (hash: WBatyD94tUwFcbH/F/VkjrSjnF1Cn4DezazvGhCmaTw=) 5: c-E5uV943M6gfADaesvDjvMzHcw.roa (hash: OB8flhhFjaANeWjOvcpvhYTpd4bwfpEWpmvejuETKmU=) 6: yCLi4WWs2qy78sHLoqjP-CJboKQ.roa (hash: JteEpBvmafMc5j22vjRDBRETpr6u4f/2IG1HqRuLWKw=) 7: yz1eZDQzu_IoiEe-xaJXKhkzgHo.roa (hash: mSMss7lrAMVrY7SM+fqQDVJaPoYUW7929dRegUbhobM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16851F56697ED9D56929BD0242D43B0278FC16E0 Validity Not Before: Jul 30 06:38:10 2025 GMT Not After : Jul 30 06:29:08 2026 GMT Subject: CN=772A041CC6307E0926950BF0B2CD9B8DC9DEFC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9a:e9:8d:e7:c9:a0:e8:6e:8f:11:5d:14:e0: 95:ae:a6:0f:b6:db:24:26:5d:ce:b1:bb:4d:47:89: 2f:33:9b:ea:3c:c6:fe:95:13:02:e4:53:b0:47:fc: 6a:2a:95:29:40:80:fc:0a:33:21:f1:f8:e6:ff:bd: 21:94:dc:03:01:05:d2:d7:46:64:4e:6e:8d:fb:fb: 6d:4b:ba:d9:43:ee:0e:2f:c0:9c:a3:22:e2:d1:f8: 69:2f:07:6d:06:54:67:ba:65:69:6f:fd:42:00:87: 26:2e:7b:de:03:af:5a:69:c3:fb:9e:e9:54:e0:6f: ad:68:f5:06:ca:a1:11:69:80:dc:2f:0b:d5:33:16: 6c:f6:a9:9f:1f:e3:c8:04:5b:8a:b9:b9:15:4d:75: 45:50:3b:ce:f2:34:b2:c1:2f:b9:02:2a:40:0a:78: a0:11:80:98:e1:da:8a:80:e3:1d:d1:39:b6:ae:cd: 6e:a9:8c:2b:9a:8a:2e:d6:7a:16:34:3d:63:a3:1b: 26:42:d1:d4:ce:e7:ef:65:c3:65:d5:b3:4d:76:6e: e8:84:7e:eb:6c:1a:62:3a:c6:34:eb:5c:24:76:35: cc:f5:1d:05:6a:e0:88:3b:5d:99:11:3b:ee:30:39: 78:f0:b6:54:0b:74:83:5a:81:d9:ba:b9:08:e5:7f: 5a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:2A:04:1C:C6:30:7E:09:26:95:0B:F0:B2:CD:9B:8D:C9:DE:FC:27 X509v3 Authority Key Identifier: keyid:16:85:1F:56:69:7E:D9:D5:69:29:BD:02:42:D4:3B:02:78:FC:16:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FoUfVml-2dVpKb0CQtQ7Anj8FuA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9/FoUfVml-2dVpKb0CQtQ7Anj8FuA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:db:fd:31:67:6f:c4:e3:48:bd:6a:5b:5f:d0:47:0c:e3:27: 47:b4:6f:70:03:05:d0:07:ef:88:36:c9:27:ed:eb:f0:bd:34: d9:80:54:9b:6a:24:25:00:2c:08:a3:d9:c7:c0:4a:31:08:01: 1d:87:56:b7:be:b9:46:ee:5c:77:32:b6:fe:5f:63:7d:0b:df: f8:58:61:c1:9c:d1:5c:07:ac:8e:ff:d0:0c:9f:7f:59:ed:02: ce:fe:00:47:b7:d4:28:fa:0e:96:a4:e7:35:ad:87:dc:e2:8f: f4:6d:a5:f0:9c:f5:1f:85:08:d1:a3:c6:d5:82:f6:f4:2a:19: bf:5c:0d:f0:23:3e:95:34:18:16:7a:e6:94:8b:2f:cd:bd:e5: 58:b9:c3:94:f5:48:b7:95:ab:16:fb:73:ab:43:41:ac:89:67: 3b:73:7c:72:db:47:58:e4:53:63:cf:ca:fb:43:cd:b9:77:cf: ab:78:17:92:f4:57:fc:ef:ec:b3:ae:9a:4a:a7:d7:0b:63:c3: 41:58:6e:53:f8:71:f8:3f:47:dd:7b:55:10:57:ec:21:80:ac: d4:c3:25:c6:ec:5e:3b:21:7a:2d:d4:00:e0:97:14:b7:27:5f: d9:78:fa:32:c3:39:ed:9a:9a:29:36:fd:4f:15:8b:57:f5:a9: 6d:ce:9d:f6 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNjg1 MUY1NjY5N0VEOUQ1NjkyOUJEMDI0MkQ0M0IwMjc4RkMxNkUwMB4XDTI1MDczMDA2 MzgxMFoXDTI2MDczMDA2MjkwOFowMzExMC8GA1UEAxMoNzcyQTA0MUNDNjMwN0Uw OTI2OTUwQkYwQjJDRDlCOERDOURFRkMyNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANea6Y3nyaDobo8RXRTgla6mD7bbJCZdzrG7TUeJLzOb6jzG/pUT AuRTsEf8aiqVKUCA/AozIfH45v+9IZTcAwEF0tdGZE5ujfv7bUu62UPuDi/AnKMi 4tH4aS8HbQZUZ7plaW/9QgCHJi573gOvWmnD+57pVOBvrWj1BsqhEWmA3C8L1TMW bPapnx/jyARbirm5FU11RVA7zvI0ssEvuQIqQAp4oBGAmOHaioDjHdE5tq7NbqmM K5qKLtZ6FjQ9Y6MbJkLR1M7n72XDZdWzTXZu6IR+62waYjrGNOtcJHY1zPUdBWrg iDtdmRE77jA5ePC2VAt0g1qB2bq5COV/WpMCAwEAAaOCAjkwggI1MB0GA1UdDgQW BBR3KgQcxjB+CSaVC/CyzZuNyd78JzAfBgNVHSMEGDAWgBQWhR9WaX7Z1WkpvQJC 1DsCePwW4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGQGA1UdHwRdMFswWaBX oFWGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOS9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhGdUEuY3JsMG0GCCsGAQUF BwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmlj LmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhG dUEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuQYIKwYBBQUHAQsEgawwgakwXwYIKwYB BQUHMAuGU3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB NzM4MTAwMDAvOS9Gb1VmVm1sLTJkVnBLYjBDUXRRN0FuajhGdUEubWZ0MEYGCCsG AQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJkcC9h cC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYIKwYB BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOCAQEA Ttv9MWdvxONIvWpbX9BHDOMnR7RvcAMF0AfviDbJJ+3r8L002YBUm2okJQAsCKPZ x8BKMQgBHYdWt765Ru5cdzK2/l9jfQvf+FhhwZzRXAesjv/QDJ9/We0Czv4AR7fU KPoOlqTnNa2H3OKP9G2l8Jz1H4UI0aPG1YL29CoZv1wN8CM+lTQYFnrmlIsvzb3l WLnDlPVIt5WrFvtzq0NBrIlnO3N8cttHWORTY8/K+0PNuXfPq3gXkvRX/O/ss66a SqfXC2PDQVhuU/hx+D9H3XtVEFfsIYCs1MMlxuxeOyF6LdQA4JcUtydf2Xj6MsM5 7ZqaKTb9TxWLV/Wpbc6d9g== -----END CERTIFICATE-----Generated at Mon Aug 11 14:51:41 2025 by rpki-client