$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft File: lMLwvhgAiadZPZ7TfQToUu1aJZo.mft (raw, json) Hash identifier: VPvZ6z5sbG2JtvP3pvUleDJtN0lW8mkeBt3A/ts6IhA= Subject key identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE Authority key identifier: 94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A Certificate issuer: /CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Certificate serial: 14 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft Manifest number: 06DA Signing time: Wed 05 Nov 2025 05:59:42 +0000 Manifest this update: Wed 05 Nov 2025 05:59:42 +0000 Manifest next update: Thu 20 Nov 2025 05:59:42 +0000 Files and hashes: 1: 8xJpBtOOkh5hRQG2vQ9llzBm7M0.roa (hash: eiGvYxvhOEIe0iMPRHFbAvqkQ255a/PFuW4IkyFfJHM=) 2: JdFSL2yw2DOGZtLzvIiu3JJqQ1s.roa (hash: TwwjEsfC9xaO3foZCHM/bfklCy5s+OGJTBOGEvgBTNo=) 3: SRYpotz2RoBeAUwOUBG1vWsb3Io.roa (hash: QZivSbgtAIr6gMj7ICdN/7zGxY9ZsvF6eQziJFvIxUg=) 4: lMLwvhgAiadZPZ7TfQToUu1aJZo.crl (hash: bQ8rSXcUl768n3/+Y0UgZ4/g7JmqlIZdF2f4r7ROQhQ=) 5: r11895MVlJGIUtB6fIeoBpJ0jJU.roa (hash: oBN6xOg8huVoSkcun7ZuxmXYrFcL4ObiDTxI4YwsPvo=) 6: re1T1gWRqXqvmt4z7Eaq_m5S-Cc.roa (hash: Hj9sHsHxQhDpfCbi24l4bqoM++fO+wHCrJL0m0eR328=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94C2F0BE180089A7593D9ED37D04E852ED5A259A Validity Not Before: Oct 15 01:32:55 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=FB3EF1E1239D35C989C737983D97AE74695333EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:ee:a6:91:a4:bc:95:20:f3:44:49:82:58: d3:2b:a2:3c:84:de:a2:34:f4:8f:30:d3:55:ae:1f: 41:86:ab:d2:55:cb:ea:08:cd:e2:2c:8b:ab:72:29: 13:d0:b3:b8:3f:b3:50:93:b7:6e:d6:db:19:68:f7: 2e:be:88:dc:c7:89:5d:07:df:3f:6d:9b:0b:c0:1a: ce:85:04:0a:f8:83:4c:41:70:a9:75:4f:ab:f3:75: 47:e3:f8:57:ea:ff:25:12:04:75:c6:f3:86:fd:f3: 08:17:2e:38:21:9f:f3:e4:aa:81:e5:d7:51:3d:42: 85:31:17:b8:ad:0e:36:b7:d4:06:fb:95:2e:ec:84: 48:87:5e:1b:56:f3:9f:34:f1:5f:dd:e2:c6:39:3c: dc:9c:3d:1f:07:cb:67:b1:71:1b:43:f4:fc:45:f9: de:d1:e4:97:82:42:d5:a4:4f:d0:a6:af:61:a9:a8: 93:29:63:d0:a7:bd:e5:d5:2d:ce:e0:b1:68:5d:46: 17:eb:31:ed:b8:bc:cf:cd:ea:02:8b:74:45:65:50: 0b:45:1e:57:60:c0:40:47:c5:96:7e:e9:27:7d:11: 61:d7:a2:87:51:21:7f:86:e1:54:8f:1d:9f:dc:be: 28:2f:40:97:6e:28:21:73:c0:50:5d:0c:70:27:a1: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3E:F1:E1:23:9D:35:C9:89:C7:37:98:3D:97:AE:74:69:53:33:EE X509v3 Authority Key Identifier: keyid:94:C2:F0:BE:18:00:89:A7:59:3D:9E:D3:7D:04:E8:52:ED:5A:25:9A X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lMLwvhgAiadZPZ7TfQToUu1aJZo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/903/lMLwvhgAiadZPZ7TfQToUu1aJZo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:20:85:c2:18:d3:54:a6:48:d6:85:8c:6e:5b:f6:12:c0:c1: ff:2e:91:9e:3f:eb:7a:70:37:2b:5e:12:c8:50:48:de:36:6c: 77:f6:b5:f4:64:cd:37:8c:3c:0b:66:b4:39:76:d3:31:f2:c7: 96:65:23:99:78:b7:ba:c8:10:8d:92:33:94:fe:60:d5:b8:0a: d2:1a:06:85:7c:3e:b6:a1:24:0e:12:2a:d8:c4:e9:e7:95:45: 15:a3:a9:50:d1:41:f5:de:2d:17:23:21:d8:00:2f:d2:85:bf: 4a:52:b4:3c:18:1a:03:17:cf:d0:a9:93:c7:0c:87:39:15:32: e2:d0:85:34:6b:78:0f:ed:8b:96:f7:ae:bf:3e:5d:75:2d:29: 45:3d:71:a7:d7:20:1d:c1:16:15:34:f1:28:ff:8f:0a:e4:d2: 2d:f6:56:b3:ee:b0:cd:45:19:e2:2e:37:e2:cc:db:8f:37:a3: ce:61:e9:f5:67:8d:f8:1a:94:6c:d6:92:48:63:e5:0d:8c:ff: c9:bf:d6:36:20:8f:e2:e8:3c:68:5a:e9:32:be:de:95:41:c6: 68:60:f4:04:e5:a6:c0:06:22:6c:e0:40:7e:38:2d:79:ed:be: 4a:fe:d7:1c:8c:e0:c8:b2:e3:ca:e7:a5:76:c3:37:31:94:c9: c4:93:c9:f4 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NEMy RjBCRTE4MDA4OUE3NTkzRDlFRDM3RDA0RTg1MkVENUEyNTlBMB4XDTI1MTAxNTAx MzI1NVoXDTI2MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRkIzRUYxRTEyMzlEMzVD OTg5QzczNzk4M0Q5N0FFNzQ2OTUzMzNFRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ9E7qaRpLyVIPNESYJY0yuiPITeojT0jzDTVa4fQYar0lXL6gjN 4iyLq3IpE9CzuD+zUJO3btbbGWj3Lr6I3MeJXQffP22bC8AazoUECviDTEFwqXVP q/N1R+P4V+r/JRIEdcbzhv3zCBcuOCGf8+SqgeXXUT1ChTEXuK0ONrfUBvuVLuyE SIdeG1bznzTxX93ixjk83Jw9HwfLZ7FxG0P0/EX53tHkl4JC1aRP0KavYamokylj 0Ke95dUtzuCxaF1GF+sx7bi8z83qAot0RWVQC0UeV2DAQEfFln7pJ30RYdeih1Eh f4bhVI8dn9y+KC9Al24oIXPAUF0McCehS1UCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBT7PvHhI501yYnHN5g9l650aVMz7jAfBgNVHSMEGDAWgBSUwvC+GACJp1k9ntN9 BOhS7VolmjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTAzL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUxYUpaby5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2xNTHd2aGdBaWFkWlBaN1RmUVRvVXUx YUpaby5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MDMvbE1Md3ZoZ0FpYWRaUFo3VGZRVG9VdTFhSlpvLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAgghcIY01SmSNaFjG5b9hLAwf8ukZ4/63pwNyteEshQSN42bHf2tfRkzTeM PAtmtDl20zHyx5ZlI5l4t7rIEI2SM5T+YNW4CtIaBoV8PrahJA4SKtjE6eeVRRWj qVDRQfXeLRcjIdgAL9KFv0pStDwYGgMXz9Cpk8cMhzkVMuLQhTRreA/ti5b3rr8+ XXUtKUU9cafXIB3BFhU08Sj/jwrk0i32VrPusM1FGeIuN+LM2483o85h6fVnjfga lGzWkkhj5Q2M/8m/1jYgj+LoPGha6TK+3pVBxmhg9ATlpsAGImzgQH44LXntvkr+ 1xyM4Miy48rnpXbDNzGUycSTyfQ= -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:49 2025 by rpki-client