$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft File: OvKWmsuGFl3yI6UJuuG137TZBLg.mft (raw, json) Hash identifier: H5ZF6aaeoH3imgDsjjl1yJxg4eka1xMvBepan+Nn+5Q= Subject key identifier: E7:1B:72:4B:C9:42:3D:B0:56:CA:C7:A0:85:0B:1F:45:1E:8F:F6:34 Authority key identifier: 3A:F2:96:9A:CB:86:16:5D:F2:23:A5:09:BA:E1:B5:DF:B4:D9:04:B8 Certificate issuer: /CN=3AF2969ACB86165DF223A509BAE1B5DFB4D904B8 Certificate serial: 03 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft Manifest number: CF Signing time: Mon 21 Jul 2025 16:31:39 +0000 Manifest this update: Mon 21 Jul 2025 16:31:39 +0000 Manifest next update: Tue 05 Aug 2025 16:31:39 +0000 Files and hashes: 1: JCkiQwFHtt4VZA-nvOE_DOqPPcc.roa (hash: e/2kBpmTz8xyo3NRjvD7/mjAQJFui4EVSXkTh2+WsmA=) 2: OvKWmsuGFl3yI6UJuuG137TZBLg.crl (hash: wmjnPU2BPP4hwGFvxePWH9sNwM130UjLbFGBEOfNvlQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 17:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3AF2969ACB86165DF223A509BAE1B5DFB4D904B8 Validity Not Before: Jul 15 01:44:01 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=E71B724BC9423DB056CAC7A0850B1F451E8FF634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:b1:25:ee:c4:7e:ef:81:3d:c6:72:93:3f: 82:7f:70:be:75:62:b4:3c:4c:07:40:42:c3:69:39: bf:e8:99:30:f5:a2:95:85:2f:1e:73:cb:a9:46:72: 78:b9:ca:d3:fb:6d:ac:fd:5a:1f:9a:d9:26:e1:5d: ca:5d:c9:c7:51:af:3f:95:9f:d0:5c:4e:c9:77:f2: 08:ef:82:14:86:46:9a:4b:03:33:3b:a8:d2:86:91: 23:d0:20:72:08:c8:ed:32:19:b8:3b:fe:75:2f:ff: c1:7e:d6:c1:66:89:f9:28:02:f3:c3:59:e3:7f:c7: 01:05:f0:49:6a:16:c3:78:6c:9e:40:49:94:f1:6d: 8b:e5:82:d6:90:1b:e1:24:21:83:7f:93:3e:39:14: f9:e2:8d:68:c1:3a:45:07:18:33:52:91:cd:64:26: 98:9b:09:5c:16:c2:4c:1b:99:68:dc:39:ec:8d:74: 51:78:39:33:0d:15:ec:7f:6c:f3:8a:d1:18:0c:79: 28:29:55:28:5d:5b:1c:d8:f8:5a:d7:a7:c4:08:e0: ee:99:a9:a4:be:7d:df:28:3c:67:48:1e:d1:d2:92: 6d:9a:ff:c0:f8:a3:23:5d:8e:66:87:51:c0:e9:ce: 00:69:85:ec:87:e4:2a:4f:6b:36:93:d9:65:b0:4c: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1B:72:4B:C9:42:3D:B0:56:CA:C7:A0:85:0B:1F:45:1E:8F:F6:34 X509v3 Authority Key Identifier: keyid:3A:F2:96:9A:CB:86:16:5D:F2:23:A5:09:BA:E1:B5:DF:B4:D9:04:B8 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OvKWmsuGFl3yI6UJuuG137TZBLg.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1204/OvKWmsuGFl3yI6UJuuG137TZBLg.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:1d:d4:e2:87:33:0a:c8:9a:4b:d0:a1:35:4d:b6:4e:af:5d: 80:11:8a:cd:0b:1b:f3:84:3b:27:89:ae:57:75:0b:38:3b:a9: 66:0e:fa:83:1b:ef:75:24:52:3d:9d:d6:24:99:46:b8:0d:c2: b9:8b:a9:69:1e:78:bc:1b:65:b9:ad:1a:48:17:1e:29:2b:11: 65:03:4b:1a:2a:62:33:ca:12:81:dc:82:c5:5f:d8:5f:71:36: c1:c7:ce:3b:f4:ae:a8:85:a7:92:a5:18:68:73:f6:dc:af:e9: 95:30:db:cb:8e:09:13:59:39:b5:33:6c:c8:05:16:18:60:ff: 28:60:b2:49:78:45:b3:65:15:fe:ed:db:f8:31:ac:dc:28:69: 9c:94:66:12:aa:66:57:84:41:f6:d5:07:44:93:60:22:61:50: 53:1b:b7:5b:92:1d:cf:52:a6:94:c7:5d:cf:4d:b1:5a:3e:32: 5f:d4:b1:00:99:f5:5b:28:f4:b7:1f:49:2b:5a:2f:9f:c5:f7: c6:a7:04:26:ae:2c:1b:84:ba:e3:69:61:79:ff:e0:9d:01:94: 75:d7:f3:8a:88:f9:0a:40:22:bc:45:14:74:0c:78:23:98:4f: 71:87:57:48:19:dd:75:72:4d:40:6f:51:aa:f6:c0:b7:47:0b: 58:d8:87:d1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzQUYy OTY5QUNCODYxNjVERjIyM0E1MDlCQUUxQjVERkI0RDkwNEI4MB4XDTI1MDcxNTAx NDQwMVoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRTcxQjcyNEJDOTQyM0RC MDU2Q0FDN0EwODUwQjFGNDUxRThGRjYzNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALQUsSXuxH7vgT3GcpM/gn9wvnVitDxMB0BCw2k5v+iZMPWilYUv HnPLqUZyeLnK0/ttrP1aH5rZJuFdyl3Jx1GvP5Wf0FxOyXfyCO+CFIZGmksDMzuo 0oaRI9AgcgjI7TIZuDv+dS//wX7WwWaJ+SgC88NZ43/HAQXwSWoWw3hsnkBJlPFt i+WC1pAb4SQhg3+TPjkU+eKNaME6RQcYM1KRzWQmmJsJXBbCTBuZaNw57I10UXg5 Mw0V7H9s84rRGAx5KClVKF1bHNj4WtenxAjg7pmppL593yg8Z0ge0dKSbZr/wPij I12OZodRwOnOAGmF7IfkKk9rNpPZZbBMqEUCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBTnG3JLyUI9sFbKx6CFCx9FHo/2NDAfBgNVHSMEGDAWgBQ68paay4YWXfIjpQm6 4bXftNkEuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwNC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3VFpCTGcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3 VFpCTGcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwNC9PdktXbXN1R0ZsM3lJNlVKdXVHMTM3VFpCTGcubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAuh3U4oczCsiaS9ChNU22Tq9dgBGKzQsb84Q7J4muV3ULODupZg76gxvv dSRSPZ3WJJlGuA3CuYupaR54vBtlua0aSBceKSsRZQNLGipiM8oSgdyCxV/YX3E2 wcfOO/SuqIWnkqUYaHP23K/plTDby44JE1k5tTNsyAUWGGD/KGCySXhFs2UV/u3b +DGs3ChpnJRmEqpmV4RB9tUHRJNgImFQUxu3W5Idz1KmlMddz02xWj4yX9SxAJn1 Wyj0tx9JK1ovn8X3xqcEJq4sG4S642lhef/gnQGUddfzioj5CkAivEUUdAx4I5hP cYdXSBnddXJNQG9RqvbAt0cLWNiH0Q== -----END CERTIFICATE-----Generated at Mon Jul 21 18:48:42 2025 by rpki-client