$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft File: mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft (raw, json) Hash identifier: SnmrU/pp7G8cJE/kYfWh6mL56iR8Nhd2v8zTtr0eTvI= Subject key identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 1E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft Manifest number: 0439 Signing time: Sat 26 Apr 2025 11:36:19 +0000 Manifest this update: Sat 26 Apr 2025 11:36:19 +0000 Manifest next update: Sun 11 May 2025 11:36:19 +0000 Files and hashes: 1: 2GlfNZemEu2k0jV-73uoiytXxNs.roa (hash: EpU8NDYPGXDeOveduAY4GQ6T5O7u0+z7HF6PjjVaaos=) 2: Z_gtlGulRhAjU0l0frDIM-3rfds.roa (hash: ci5tfJ1GnbJdXnUKb8rNgK4TTH8m1nMX83yu6hiKa1I=) 3: mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl (hash: tn6k20iu580CAy6o+W4JNRUlCkuvTZls38zdNghIuHY=) 4: udt0lG_tZB8R18vtGykImhucsvs.roa (hash: tyC2IIQtm/GLDnuBpwDIHuOXwTwrNeAvzdHDDhR0PUg=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: Apr 15 01:30:32 2025 GMT Not After : Apr 15 01:30:03 2026 GMT Subject: CN=2557C2B67D5CEC87356BC7AD6F629B95BE8367AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:1e:da:87:2a:57:8d:99:1e:4a:30:7b:f2: 7e:15:f7:e0:68:3f:bf:c0:a7:7e:44:35:bb:7d:d3: da:fc:e9:44:c5:90:ed:49:8a:bb:6f:4d:58:e2:55: 4f:72:86:bf:51:97:af:b1:96:39:07:28:aa:9d:30: 1f:01:fd:98:f7:a1:16:8f:1e:b1:b9:1e:67:2f:7f: 89:a3:48:34:20:bf:7f:69:fb:6f:b5:fe:96:9b:8b: 6d:92:ab:ce:02:48:bf:09:3f:6b:e9:33:26:c8:18: 0c:83:24:70:dd:be:eb:63:7f:ab:b5:b6:1a:2b:ff: cf:6e:bd:bc:68:6f:d6:1d:eb:fe:40:27:77:a1:d6: 1d:2b:a0:17:f8:12:8c:e8:01:c1:c5:5a:61:64:e0: 0e:8e:15:de:ae:a6:ee:16:9d:ed:d1:02:3b:43:19: 9f:12:78:1f:93:1b:3a:80:52:81:a0:3b:78:c6:57: 2a:7f:d9:af:a6:0b:68:9a:5d:d4:f7:4c:d4:98:9e: 16:b9:b3:4d:56:91:a4:d9:00:4f:cb:17:b3:ec:9d: 10:f1:ab:b2:88:fc:74:d9:47:22:98:57:ec:5b:f6: 81:a6:b9:96:39:25:aa:8d:3c:1e:20:54:be:38:b5: 58:bb:7e:ce:b6:0e:85:74:56:32:15:47:ad:f0:03: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:f7:f0:b6:88:1d:a6:40:54:c1:1b:d6:4e:2a:f3:32:8b:3e: 59:a6:3e:e1:62:a5:2c:97:e3:f8:62:27:70:48:24:8f:73:8e: 40:65:a6:82:d0:c4:e5:c9:9e:90:f1:69:8a:2a:00:41:e8:d2: b2:14:71:84:5d:29:2f:03:c6:a3:62:30:ca:78:54:56:89:2c: 73:e1:21:27:92:fb:a2:2d:c5:f8:df:98:dc:d1:66:aa:a2:44: 3d:45:a6:73:4d:6e:1b:c5:1e:36:be:05:19:8e:7a:ea:75:26: d8:fb:1a:72:3c:42:f4:3a:90:cd:0e:1e:43:4a:1f:00:31:88: c9:86:04:0d:07:a3:b0:b4:71:44:58:7f:0b:d5:33:b1:bb:51: 55:00:26:d5:1d:59:da:ab:43:20:a7:5b:72:6c:8b:cf:85:c1: cd:b6:1b:d1:17:ca:1f:33:8f:f0:a0:70:38:e2:4f:62:24:24: fd:ff:2a:6a:a3:97:c3:7c:34:0a:2f:f4:a0:56:8a:8b:1e:e6: 9e:85:70:7b:29:d4:c8:9f:1e:2e:e8:79:15:9f:93:d1:82:3c: 22:84:b9:e1:95:0f:66:62:b7:d4:46:f8:8d:33:e9:9c:74:19: 2e:53:e5:f6:a1:04:13:66:c7:d0:a8:9f:f9:1a:81:92:93:ec: 66:55:d9:25 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI1MDQxNTAx MzAzMloXDTI2MDQxNTAxMzAwM1owMzExMC8GA1UEAxMoMjU1N0MyQjY3RDVDRUM4 NzM1NkJDN0FENkY2MjlCOTVCRTgzNjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMKzHtqHKleNmR5KMHvyfhX34Gg/v8CnfkQ1u33T2vzpRMWQ7UmK u29NWOJVT3KGv1GXr7GWOQcoqp0wHwH9mPehFo8esbkeZy9/iaNINCC/f2n7b7X+ lpuLbZKrzgJIvwk/a+kzJsgYDIMkcN2+62N/q7W2Giv/z269vGhv1h3r/kAnd6HW HSugF/gSjOgBwcVaYWTgDo4V3q6m7had7dECO0MZnxJ4H5MbOoBSgaA7eMZXKn/Z r6YLaJpd1PdM1JieFrmzTVaRpNkAT8sXs+ydEPGrsoj8dNlHIphX7Fv2gaa5ljkl qo08HiBUvji1WLt+zrYOhXRWMhVHrfADAGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQlV8K2fVzshzVrx61vYpuVvoNnrDAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjUvbUo2Q1p5eVlwaWNTQ3JweTNyNi1JZ0ZZU2FBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAAb38LaIHaZAVMEb1k4q8zKLPlmmPuFipSyX4/hiJ3BIJI9zjkBlpoLQxOXJ npDxaYoqAEHo0rIUcYRdKS8DxqNiMMp4VFaJLHPhISeS+6ItxfjfmNzRZqqiRD1F pnNNbhvFHja+BRmOeup1Jtj7GnI8QvQ6kM0OHkNKHwAxiMmGBA0Ho7C0cURYfwvV M7G7UVUAJtUdWdqrQyCnW3Jsi8+Fwc22G9EXyh8zj/CgcDjiT2IkJP3/Kmqjl8N8 NAov9KBWiose5p6FcHsp1MifHi7oeRWfk9GCPCKEueGVD2Zit9RG+I0z6Zx0GS5T 5fahBBNmx9Con/kagZKT7GZV2SU= -----END CERTIFICATE-----Generated at Sat Apr 26 14:21:06 2025 by rpki-client