$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft File: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft (raw, json) Hash identifier: ypP332m4KhyTXDJDHhXJI+Vm6ecmAKQe5rXWkbgZ1lU= Subject key identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2 Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05 Certificate issuer: /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05 Certificate serial: 2A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft Manifest number: 064E Signing time: Mon 21 Jul 2025 03:59:40 +0000 Manifest this update: Mon 21 Jul 2025 03:59:40 +0000 Manifest next update: Tue 05 Aug 2025 03:59:40 +0000 Files and hashes: 1: -hY0Txahey-phWtRvAvwAIYth9A.roa (hash: XBTF2xX2XSiXh35iU+RSDBwa9pjdewfeGBpMfN7D1Vw=) 2: JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl (hash: cH2IdO1JBwXNOBGrriU/vGhl7tgoFD8LyNXnY/duX34=) 3: PXGXVRY9PugPn_auWRS0jrR_ExY.roa (hash: mCzu8j4CHSQkR3klyKbwZGvNIEZQjlLoRad9h38bCR4=) 4: kafqO83HAVCwySc-07rlqdKTmgY.roa (hash: DFvL43vFx9bAV0wMN41/bL2NMFJruDgxGScpILO8nPE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05 Validity Not Before: Jul 15 01:46:34 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=315038AAC24C17549A82BAADE2AF446312D6F6D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:40:91:7a:c7:7c:e2:70:90:2c:3d:bb:7a:46: 2d:3a:26:24:9d:51:43:55:5b:fd:9b:50:38:f5:15: df:2c:0a:72:61:07:25:48:f4:d1:2b:0f:20:0c:ac: c2:c2:21:f0:6f:7a:c6:20:65:7c:7b:a8:f4:01:62: 64:31:1a:12:72:f0:70:53:1c:05:a0:77:c3:5c:40: 28:f7:cc:59:fe:c2:4b:24:d9:26:08:58:75:f5:c2: a3:3f:aa:5d:74:a2:5f:15:5b:2c:bf:5c:0c:19:5d: 4f:c3:20:f6:16:75:a5:4e:f0:82:35:a8:da:fc:d8: d6:7e:1a:ca:be:87:a6:c5:bc:90:a3:c9:aa:12:ed: 0e:5e:1d:06:bd:94:d2:6f:c8:34:9f:ea:a2:fc:3e: 61:11:2e:95:36:aa:54:5d:af:63:3a:02:42:df:0c: e5:d7:a0:e7:3a:5a:80:85:6a:0d:0c:60:53:fd:56: cd:aa:b1:b0:77:e3:d7:77:af:c7:c1:5b:fe:db:3a: 3d:1a:a9:2d:6d:cc:b4:44:5b:5b:e2:a6:2b:ef:de: 39:9f:44:66:4b:d6:4a:8c:e9:5e:6a:5a:0e:d5:ef: a9:44:97:13:6f:0e:bc:11:7c:ef:41:4f:9f:b3:9c: 28:6b:f6:75:b2:05:3a:0d:2b:24:53:28:bd:cd:81: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:50:38:AA:C2:4C:17:54:9A:82:BA:AD:E2:AF:44:63:12:D6:F6:D2 X509v3 Authority Key Identifier: keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:bf:67:95:cd:b8:c5:e5:b2:a0:5d:6a:b6:96:31:52:8c:fa: 83:2b:12:23:3d:9f:53:dd:75:85:25:88:5e:9a:59:35:c1:5f: 64:dc:38:90:c6:24:4b:d8:e2:62:25:4b:00:19:ca:96:c2:cc: aa:02:53:28:3f:f0:81:f9:a3:d0:0c:bb:b5:e4:ee:53:37:22: e6:ba:5f:ae:73:c8:9b:8a:fa:1d:13:e0:6b:3b:90:d3:70:2d: af:86:55:b9:37:92:a5:58:b3:e4:df:c8:87:1b:07:10:fd:85: 9f:cf:0c:8b:20:8a:f1:86:6e:eb:2c:97:0e:73:a7:f8:44:21: d9:73:f2:85:4d:1e:44:c9:40:97:bf:04:e1:78:04:4d:72:a4: ad:87:73:28:c3:9d:c3:0e:51:f9:f9:7f:f8:ae:c8:8a:30:b5: 53:db:0c:eb:0f:5d:63:e5:d0:42:54:6e:02:22:e5:16:16:e3: 8c:56:da:41:9f:88:16:45:47:01:8a:b2:47:dd:47:04:d9:bc: 48:8c:95:04:b9:ff:7e:fd:9c:cd:52:f1:e7:fd:10:92:36:20: 25:8e:43:f3:d3:f7:c8:d4:3b:de:6f:65:ea:16:2a:1c:cd:74: ee:13:d4:5c:7e:7c:81:60:18:bb:9f:24:e8:72:ab:8c:92:ac: b3:10:f0:24 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTBF ODI5NzVEODI5MUM0NEFBN0U1M0VBMTUxMjRGMEVFQTIwQjA1MB4XDTI1MDcxNTAx NDYzNFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoMzE1MDM4QUFDMjRDMTc1 NDlBODJCQUFERTJBRjQ0NjMxMkQ2RjZEMjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKFAkXrHfOJwkCw9u3pGLTomJJ1RQ1Vb/ZtQOPUV3ywKcmEHJUj0 0SsPIAyswsIh8G96xiBlfHuo9AFiZDEaEnLwcFMcBaB3w1xAKPfMWf7CSyTZJghY dfXCoz+qXXSiXxVbLL9cDBldT8Mg9hZ1pU7wgjWo2vzY1n4ayr6HpsW8kKPJqhLt Dl4dBr2U0m/INJ/qovw+YREulTaqVF2vYzoCQt8M5deg5zpagIVqDQxgU/1Wzaqx sHfj13evx8Fb/ts6PRqpLW3MtERbW+KmK+/eOZ9EZkvWSozpXmpaDtXvqUSXE28O vBF870FPn7OcKGv2dbIFOg0rJFMovc2BaxMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQxUDiqwkwXVJqCuq3ir0RjEtb20jAfBgNVHSMEGDAWgBQlDoKXXYKRxEqn5T6h USTw7qILBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAyMTQvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4TzZpQ3dVLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4 TzZpQ3dVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMjE0L0pRNkNsMTJDa2NSS3AtVS1vVkVrOE82aUN3VS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnv2eVzbjF5bKgXWq2ljFSjPqDKxIjPZ9T3XWFJYhemlk1wV9k3DiQ xiRL2OJiJUsAGcqWwsyqAlMoP/CB+aPQDLu15O5TNyLmul+uc8ibivodE+BrO5DT cC2vhlW5N5KlWLPk38iHGwcQ/YWfzwyLIIrxhm7rLJcOc6f4RCHZc/KFTR5EyUCX vwTheARNcqSth3Mow53DDlH5+X/4rsiKMLVT2wzrD11j5dBCVG4CIuUWFuOMVtpB n4gWRUcBirJH3UcE2bxIjJUEuf9+/ZzNUvHn/RCSNiAljkPz0/fI1Dveb2XqFioc zXTuE9RcfnyBYBi7nyTocquMkqyzEPAk -----END CERTIFICATE-----Generated at Mon Jul 21 08:57:21 2025 by rpki-client