$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft File: 4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json) Hash identifier: 0ynEKfCwUZTQAgbbBh/6Y99x+YNBDjtNiOVhsAKbym4= Subject key identifier: 51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5 Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 Certificate issuer: /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Certificate serial: 61 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft Manifest number: 0D38 Signing time: Thu 24 Jul 2025 03:59:53 +0000 Manifest this update: Thu 24 Jul 2025 03:59:53 +0000 Manifest next update: Fri 08 Aug 2025 03:59:53 +0000 Files and hashes: 1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: kUxd4g0hcB7bq/eLEnw+N7kPV6WxibAL5kDS2EJMDQg=) 2: dxr5UWXfhgYCs9g2WsrVKEZJACI.roa (hash: Xue1ueDJ8hT3OdTCJKtOaTgxXmUHlH8Nwl1PI7fvLXA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 03:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 97 (0x61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Validity Not Before: Jul 15 01:39:10 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7: 1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8: 8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84: 5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1: db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d: 29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06: d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03: 38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36: 81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2: 8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1: c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14: ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9: 57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18: ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12: 73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d: d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5: fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5 X509v3 Authority Key Identifier: keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:dd:11:3f:41:9b:1d:be:08:17:d6:f7:d1:48:98:08:13:cb: 73:66:7b:f9:5e:de:5b:46:e2:83:b3:74:12:72:80:fd:94:cc: 30:4d:70:a2:a3:c6:01:85:9f:aa:14:d9:20:f0:16:18:7a:78: 9a:dd:d8:4d:9c:e3:ce:2e:76:14:af:a4:36:13:a6:d1:46:9a: 84:0c:c3:6e:53:51:74:bb:56:cf:d3:fb:1f:21:ea:de:07:ee: dc:4f:06:a0:dd:93:6e:2b:ad:87:5e:67:43:a1:5e:10:cb:41: cb:67:09:2b:2b:a3:22:47:2a:72:9b:07:e2:10:af:a4:a4:eb: e1:55:45:b7:f8:5e:58:a1:f5:3a:78:ac:1a:6d:83:da:2a:12: b1:a1:90:99:9c:0e:bf:99:b9:7b:72:f5:6f:ae:6c:47:3a:75: a4:43:5a:11:80:2f:e6:dc:b9:23:43:47:ab:10:89:e5:bc:f4: 1e:95:e7:2b:e5:ae:d4:6a:42:46:ec:98:24:9c:43:57:a0:7d: 9b:25:d9:88:e0:c3:e7:6e:f5:5b:75:53:3c:d6:ad:be:1d:ae: e1:09:e0:45:3d:4e:b1:b0:00:96:22:c2:86:19:df:e4:a9:5f: 8e:a2:ca:e4:76:22:d2:02:eb:00:3b:15:a9:c2:1c:3a:7a:cc: a4:05:a6:f5 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBYTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw QjAwNDlGMUEzRDEyM0RDQUNBNUNFQjVCNEU1RTlFQzc5NEQ3MB4XDTI1MDcxNTAx MzkxMFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoNTEwQkNBRjZDRjRFMTEy QjgyREEyNzcxNDgzODRBOUQ2RkQ3MUJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANBSYCI1kL24JfMAvhPnH7usiayAsOkazP80n8HIi9hOzJ0/2Z42 9ekQI9GEXhfKMXNwf1PZi+hasO3R2wfHDGyYXDSdjrAtv8VtKRMb+woSbzhrvh6e Z8gG2ZIXL5o+mTAyAVNGoBYDOA1NP39NQ4FM5N9EFlA2gRk2SllaoE88Xk6pkhey jGOguEDedo1LBTMUAPixwdSJCSbQqITC1pUnz44Urki1xIgcktVk194h7gL5V8Xi +4jBlQYbg81uL7UYzrsWpAzwqnomU+9uwk0Sc5H8jXpDtWRx2z9EVYAd18Yvqnox 5AvQHEA4A6bV+oUgZnIgtF6d3vcFc+GLtv8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRRC8r2z04RK4LaJ3FIOEqdb9cbpTAfBgNVHSMEGDAWgBTioLAEnxo9Ej3Kylzr W05enseU1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAyNDcvNHFDd0JKOGFQUkk5eXNwYzYxdE9YcDdIbE5jLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFDd0JKOGFQUkk5eXNwYzYxdE9Y cDdIbE5jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwMjQ3LzRxQ3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy3RE/QZsdvggX1vfRSJgIE8tzZnv5Xt5bRuKDs3QScoD9lMwwTXCi o8YBhZ+qFNkg8BYYenia3dhNnOPOLnYUr6Q2E6bRRpqEDMNuU1F0u1bP0/sfIere B+7cTwag3ZNuK62HXmdDoV4Qy0HLZwkrK6MiRypymwfiEK+kpOvhVUW3+F5YofU6 eKwabYPaKhKxoZCZnA6/mbl7cvVvrmxHOnWkQ1oRgC/m3LkjQ0erEInlvPQelecr 5a7UakJG7JgknENXoH2bJdmI4MPnbvVbdVM81q2+Ha7hCeBFPU6xsACWIsKGGd/k qV+OosrkdiLSAusAOxWpwhw6esykBab1 -----END CERTIFICATE-----Generated at Thu Jul 24 08:37:24 2025 by rpki-client