$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft File: 4qCwBJ8aPRI9yspc61tOXp7HlNc.mft (raw, json) Hash identifier: wY3A6nt5tEpAynyRO+bHQNQlVGyVVU6XDKpOVNvmJQQ= Subject key identifier: 51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5 Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 Certificate issuer: /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Certificate serial: 5B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft Manifest number: 0AA7 Signing time: Sat 05 Apr 2025 13:51:39 +0000 Manifest this update: Sat 05 Apr 2025 13:51:39 +0000 Manifest next update: Sun 20 Apr 2025 13:51:39 +0000 Files and hashes: 1: 4qCwBJ8aPRI9yspc61tOXp7HlNc.crl (hash: Lg9A1VPBBL4xANmgpyE7NSXBmTDQZ/uywOGTBj4vKj0=) 2: dxr5UWXfhgYCs9g2WsrVKEZJACI.roa (hash: Xue1ueDJ8hT3OdTCJKtOaTgxXmUHlH8Nwl1PI7fvLXA=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7 Validity Not Before: Mar 15 01:38:01 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=510BCAF6CF4E112B82DA277148384A9D6FD71BA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:60:22:35:90:bd:b8:25:f3:00:be:13:e7: 1f:bb:ac:89:ac:80:b0:e9:1a:cc:ff:34:9f:c1:c8: 8b:d8:4e:cc:9d:3f:d9:9e:36:f5:e9:10:23:d1:84: 5e:17:ca:31:73:70:7f:53:d9:8b:e8:5a:b0:ed:d1: db:07:c7:0c:6c:98:5c:34:9d:8e:b0:2d:bf:c5:6d: 29:13:1b:fb:0a:12:6f:38:6b:be:1e:9e:67:c8:06: d9:92:17:2f:9a:3e:99:30:32:01:53:46:a0:16:03: 38:0d:4d:3f:7f:4d:43:81:4c:e4:df:44:16:50:36: 81:19:36:4a:59:5a:a0:4f:3c:5e:4e:a9:92:17:b2: 8c:63:a0:b8:40:de:76:8d:4b:05:33:14:00:f8:b1: c1:d4:89:09:26:d0:a8:84:c2:d6:95:27:cf:8e:14: ae:48:b5:c4:88:1c:92:d5:64:d7:de:21:ee:02:f9: 57:c5:e2:fb:88:c1:95:06:1b:83:cd:6e:2f:b5:18: ce:bb:16:a4:0c:f0:aa:7a:26:53:ef:6e:c2:4d:12: 73:91:fc:8d:7a:43:b5:64:71:db:3f:44:55:80:1d: d7:c6:2f:aa:7a:31:e4:0b:d0:1c:40:38:03:a6:d5: fa:85:20:66:72:20:b4:5e:9d:de:f7:05:73:e1:8b: b6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0B:CA:F6:CF:4E:11:2B:82:DA:27:71:48:38:4A:9D:6F:D7:1B:A5 X509v3 Authority Key Identifier: keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:72:7a:41:45:4b:f0:00:63:4b:ab:a0:3c:05:c3:de:6f:61: b5:09:6b:bb:6a:31:26:11:f5:5d:0c:4b:0b:af:bf:ff:6c:94: 06:c1:b9:ac:04:ff:c7:2e:67:5b:82:30:a0:fa:2b:e6:11:6a: 14:9e:09:f5:2d:62:32:09:1e:7c:28:29:5b:77:70:ca:0a:5c: 3f:81:08:73:3f:a8:39:05:a5:08:4b:de:7f:d7:92:bb:bc:47: 2d:8f:53:1a:21:86:80:9b:2e:65:83:b6:81:5a:ad:5e:ea:b1: 0f:aa:fa:70:0a:e1:d4:8d:ef:81:11:92:86:9e:42:7a:8f:be: 1f:a6:f4:28:e5:ab:bf:ee:4e:2a:e7:d5:1e:f5:e8:0f:ff:5b: 97:64:4e:1a:be:0d:64:1e:de:c7:6f:77:43:15:c2:90:a5:39: c8:11:f9:cd:8c:22:3b:c9:5a:61:03:aa:d3:7a:ba:77:a6:97: 2d:10:ed:17:a3:1e:4e:ed:a3:a8:2a:92:c0:83:89:a6:85:8d: c0:8b:7e:76:96:d7:9d:ea:1e:79:ad:7a:01:8d:0d:21:95:b6: 1d:34:66:a8:17:9a:e5:26:e8:ee:fc:7a:74:23:a3:e9:53:a7: 9c:f6:63:01:05:1c:97:11:1f:a7:56:6f:e0:93:f7:15:13:5d: 7c:da:7f:41 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMkEw QjAwNDlGMUEzRDEyM0RDQUNBNUNFQjVCNEU1RTlFQzc5NEQ3MB4XDTI1MDMxNTAx MzgwMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoNTEwQkNBRjZDRjRFMTEy QjgyREEyNzcxNDgzODRBOUQ2RkQ3MUJBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANBSYCI1kL24JfMAvhPnH7usiayAsOkazP80n8HIi9hOzJ0/2Z42 9ekQI9GEXhfKMXNwf1PZi+hasO3R2wfHDGyYXDSdjrAtv8VtKRMb+woSbzhrvh6e Z8gG2ZIXL5o+mTAyAVNGoBYDOA1NP39NQ4FM5N9EFlA2gRk2SllaoE88Xk6pkhey jGOguEDedo1LBTMUAPixwdSJCSbQqITC1pUnz44Urki1xIgcktVk194h7gL5V8Xi +4jBlQYbg81uL7UYzrsWpAzwqnomU+9uwk0Sc5H8jXpDtWRx2z9EVYAd18Yvqnox 5AvQHEA4A6bV+oUgZnIgtF6d3vcFc+GLtv8CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRRC8r2z04RK4LaJ3FIOEqdb9cbpTAfBgNVHSMEGDAWgBTioLAEnxo9Ej3Kylzr W05enseU1zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTAyNDcvNHFDd0JKOGFQUkk5eXNwYzYxdE9YcDdIbE5jLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNHFDd0JKOGFQUkk5eXNwYzYxdE9Y cDdIbE5jLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzEwMjQ3LzRxQ3dCSjhhUFJJOXlzcGM2MXRPWHA3SGxOYy5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMcnpBRUvwAGNLq6A8BcPeb2G1CWu7ajEmEfVdDEsLr7//bJQGwbms BP/HLmdbgjCg+ivmEWoUngn1LWIyCR58KClbd3DKClw/gQhzP6g5BaUIS95/15K7 vEctj1MaIYaAmy5lg7aBWq1e6rEPqvpwCuHUje+BEZKGnkJ6j74fpvQo5au/7k4q 59Ue9egP/1uXZE4avg1kHt7Hb3dDFcKQpTnIEfnNjCI7yVphA6rTerp3ppctEO0X ox5O7aOoKpLAg4mmhY3Ai352lted6h55rXoBjQ0hlbYdNGaoF5rlJuju/Hp0I6Pp U6ec9mMBBRyXER+nVm/gk/cVE1182n9B -----END CERTIFICATE-----Generated at Sat Apr 5 23:10:57 2025 by rpki-client