$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft File: wO3ow4eQgROPlJUwa-ee9zQKlFE.mft (raw, json) Hash identifier: WzDGtA9uwBQ8tSf4M4Gj+9fNjHedF/hzFZwlFteWVGI= Subject key identifier: 20:DC:89:B6:FD:2E:D0:2D:E9:D7:6B:D5:29:AE:C9:D2:84:D7:CB:4F Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51 Certificate issuer: /CN=C0EDE8C3879081138F9495306BE79EF7340A9451 Certificate serial: 59 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft Manifest number: 160C Signing time: Sat 05 Apr 2025 14:55:25 +0000 Manifest this update: Sat 05 Apr 2025 14:55:25 +0000 Manifest next update: Sun 20 Apr 2025 14:55:25 +0000 Files and hashes: 1: 7NWJnS8oPxaAw6Dh9y89xbttV2w.roa (hash: /YVrSb9gppTGswU7lY9yInFeGyG7NqUf4+mpY/8IJDI=) 2: wO3ow4eQgROPlJUwa-ee9zQKlFE.crl (hash: ClPWBaEhWsB7Ttmqe3ku9fVE/JRuzWyidPlZQ7cPSLc=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451 Validity Not Before: Mar 15 01:37:43 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=20DC89B6FD2ED02DE9D76BD529AEC9D284D7CB4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:17:b5:d7:53:60:94:2e:dc:42:9a:ec:95:b5: f5:99:2d:24:37:2f:9d:15:f7:37:b8:49:55:fb:74: 2e:e7:94:3a:3b:ef:9b:34:9a:9c:c3:f6:c5:bb:d4: 23:ad:5e:96:92:af:9d:ab:e0:c1:c1:27:63:9d:90: 49:4b:ec:24:dd:4b:d3:a7:7e:e7:f6:21:8f:25:84: 50:51:1d:01:91:ca:d5:0e:2c:d7:a3:7e:2c:7d:d1: 0e:05:43:2b:94:5e:27:26:c8:7e:5a:d4:71:18:4f: 6d:41:8e:60:3c:53:46:4d:1a:ba:07:2d:63:4c:41: a3:3d:aa:ee:ac:1d:d4:54:33:63:34:f0:4b:63:34: d6:67:10:64:b4:b3:02:2a:ea:4e:66:72:4b:ef:54: 22:ff:4e:49:2f:49:96:6a:b2:45:2b:12:d7:6f:95: a7:11:2c:ee:05:df:ae:76:8b:e0:cd:e2:f8:b2:22: ec:e1:3c:af:35:0e:b0:fd:23:09:32:96:1f:3d:be: b2:7f:0f:88:0c:95:6a:da:40:5c:85:fd:2f:78:03: 71:72:ba:b5:88:b1:3c:b5:8c:bd:70:f8:74:52:00: cc:72:d4:c6:f9:24:15:62:ba:cf:35:d0:65:fc:07: 16:8e:bd:1c:28:be:ee:16:93:db:cc:24:8e:7d:a2: d1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:89:B6:FD:2E:D0:2D:E9:D7:6B:D5:29:AE:C9:D2:84:D7:CB:4F X509v3 Authority Key Identifier: keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e3:6f:74:93:e1:0b:71:0f:34:81:a9:6d:2a:c9:aa:83:41: 54:a1:65:d6:25:ec:b6:cc:99:88:1f:24:1b:be:2b:86:fa:5b: 55:b7:77:1b:e2:29:b8:45:f9:58:20:b0:c7:79:80:b9:ef:d5: 1c:e0:4f:43:5c:94:24:30:93:7f:51:9d:7f:72:ee:67:42:bc: 60:44:39:72:c1:4e:50:2a:fc:5f:55:dc:cf:b2:70:5a:d8:b6: 47:79:f9:3c:93:f4:3f:fa:a8:24:87:55:66:46:59:81:06:30: 6f:41:47:54:8d:3f:5e:85:a2:ef:77:9e:1c:4c:54:2d:07:3b: 54:94:d8:40:bd:4b:58:54:3a:32:e1:a0:fc:b5:8e:bd:82:fe: 1b:88:b9:24:bc:34:97:16:9e:67:be:f3:0f:1c:41:98:00:ef: 4d:26:89:2f:f5:fb:aa:b8:f1:ac:23:68:37:ba:70:6b:34:ef: 89:33:3c:e3:59:8e:9c:bf:b8:53:c8:d9:b1:86:ce:fc:bd:cc: dc:1f:3e:d6:da:8a:f1:62:06:57:3c:03:d4:42:dc:93:d3:7a: 6a:8f:bc:1f:98:77:97:19:a1:7b:21:51:2e:a2:d4:39:99:c6: a4:98:e6:c0:47:a3:5d:95:c1:46:dd:74:7f:66:c1:f8:04:ef: ff:3d:23:87 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMEVE RThDMzg3OTA4MTEzOEY5NDk1MzA2QkU3OUVGNzM0MEE5NDUxMB4XDTI1MDMxNTAx Mzc0M1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMjBEQzg5QjZGRDJFRDAy REU5RDc2QkQ1MjlBRUM5RDI4NEQ3Q0I0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANMXtddTYJQu3EKa7JW19ZktJDcvnRX3N7hJVft0LueUOjvvmzSa nMP2xbvUI61elpKvnavgwcEnY52QSUvsJN1L06d+5/YhjyWEUFEdAZHK1Q4s16N+ LH3RDgVDK5ReJybIflrUcRhPbUGOYDxTRk0augctY0xBoz2q7qwd1FQzYzTwS2M0 1mcQZLSzAirqTmZyS+9UIv9OSS9JlmqyRSsS12+VpxEs7gXfrnaL4M3i+LIi7OE8 rzUOsP0jCTKWHz2+sn8PiAyVatpAXIX9L3gDcXK6tYixPLWMvXD4dFIAzHLUxvkk FWK6zzXQZfwHFo69HCi+7haT28wkjn2i0f0CAwEAAaOCAj8wggI7MB0GA1UdDgQW BBQg3Im2/S7QLenXa9UprsnShNfLTzAfBgNVHSMEGDAWgBTA7ejDh5CBE4+UlTBr 5573NAqUUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC93TzNvdzRlUWdST1BsSlV3YS1lZTl6 UUtsRkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTYzOS93TzNvdzRlUWdST1BsSlV3YS1lZTl6UUtsRkUubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAdeNvdJPhC3EPNIGpbSrJqoNBVKFl1iXstsyZiB8kG74rhvpbVbd3G+Ip uEX5WCCwx3mAue/VHOBPQ1yUJDCTf1Gdf3LuZ0K8YEQ5csFOUCr8X1Xcz7JwWti2 R3n5PJP0P/qoJIdVZkZZgQYwb0FHVI0/XoWi73eeHExULQc7VJTYQL1LWFQ6MuGg /LWOvYL+G4i5JLw0lxaeZ77zDxxBmADvTSaJL/X7qrjxrCNoN7pwazTviTM841mO nL+4U8jZsYbO/L3M3B8+1tqK8WIGVzwD1ELck9N6ao+8H5h3lxmheyFRLqLUOZnG pJjmwEejXZXBRt10f2bB+ATv/z0jhw== -----END CERTIFICATE-----Generated at Sun Apr 6 01:49:15 2025 by rpki-client