$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.mft File: hf4PpwRGCqT674-oymCfAMTN4Ag.mft (raw, json) Hash identifier: Xs+u9dde8GEf/6hDixrm3GPjBGcnBA4UHVexwQuFHVI= Subject key identifier: 80:1C:3E:13:85:C5:02:7B:D2:03:52:25:2A:7C:72:B9:A6:58:4D:AE Authority key identifier: 85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08 Certificate issuer: /CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008 Certificate serial: 28 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.mft Manifest number: 03F3 Signing time: Sat 05 Apr 2025 13:05:41 +0000 Manifest this update: Sat 05 Apr 2025 13:05:41 +0000 Manifest next update: Sun 20 Apr 2025 13:05:41 +0000 Files and hashes: 1: An9Bxl9jKtpgzT5G-300c2-tkkw.roa (hash: +A4wK24gqpDhxKvwfim+ZKJTDTPVko95hu832NEp8JY=) 2: BJBd5-95c2pQGDea5wFSWyPpKMM.roa (hash: 3D8QpC+CZuMVManQuwgxIdI2EvmJ9BVtum0gJdSTvEA=) 3: hf4PpwRGCqT674-oymCfAMTN4Ag.crl (hash: k96mg41cUwPy2pZKPXKZGQVfUXPsPPJDCXSZoC7X0UU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85FE0FA704460AA4FAEF8FA8CA609F00C4CDE008 Validity Not Before: Mar 15 01:34:31 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=801C3E1385C5027BD20352252A7C72B9A6584DAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bc:73:0d:81:c8:8e:ba:93:e1:45:e3:64:0a: e8:89:b3:8d:17:a3:8a:fb:54:ac:8d:86:b8:bd:1c: 8f:8d:87:96:7f:a2:54:18:7a:16:25:ac:72:4f:71: 71:7d:26:79:75:84:d9:8e:bf:aa:2f:f4:80:c9:5e: 2d:29:a9:c5:fb:8f:dd:20:45:4a:c4:46:98:58:0e: f5:ed:82:c8:30:76:39:a7:5b:f6:7d:c5:0b:87:f2: ba:d4:9a:64:59:bd:19:a7:ea:ca:47:a5:d6:e9:a9: 50:cb:6d:ae:7f:e1:9a:c2:92:4d:1a:18:e0:e0:7e: d9:42:ac:87:9f:e0:5c:9b:35:dc:62:2c:cf:ef:1e: aa:c8:96:08:30:e5:f7:c8:8b:24:c8:e4:75:63:1b: 0c:56:a0:56:90:32:8e:aa:10:b5:95:fa:d8:42:3f: c5:ac:0a:60:ae:49:92:8b:20:dd:53:b7:08:ff:29: 4b:d3:b8:76:0f:ac:c3:98:d6:f8:b7:36:fb:72:26: 6a:d0:87:55:a2:3f:f1:73:6c:b5:cd:06:67:c9:17: fb:55:d5:f7:66:a7:75:40:76:63:54:f4:1e:22:0e: 3f:92:08:2c:e0:c4:74:0f:fe:3d:9f:53:13:af:34: 30:3d:9b:05:0a:fa:d2:13:93:ca:71:1c:2c:28:a7: 32:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:1C:3E:13:85:C5:02:7B:D2:03:52:25:2A:7C:72:B9:A6:58:4D:AE X509v3 Authority Key Identifier: keyid:85:FE:0F:A7:04:46:0A:A4:FA:EF:8F:A8:CA:60:9F:00:C4:CD:E0:08 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hf4PpwRGCqT674-oymCfAMTN4Ag.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/hf4PpwRGCqT674-oymCfAMTN4Ag.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:0c:0a:31:a7:f9:22:75:c3:3e:7d:10:12:20:74:31:de:3a: 60:76:00:63:88:39:13:4a:e7:30:1d:9b:6a:8b:ed:67:5b:b0: 5e:b9:62:cf:30:bd:97:0d:83:e3:db:2e:ee:48:40:e6:ce:0a: 71:45:2e:66:20:f1:04:93:89:9d:cd:72:0a:b9:3a:e2:30:ee: 36:59:32:4f:22:0a:d8:90:38:77:6d:b6:e5:1b:a8:82:62:11: 97:33:eb:89:c2:9f:ed:f2:20:73:b3:b1:b9:0a:9d:a4:82:2e: 75:0a:ea:eb:3a:b0:73:6e:ef:92:e8:81:5e:a0:52:e1:c9:18: ad:f4:0e:b8:a1:97:10:4f:2e:dc:ef:92:72:d4:25:0b:75:32: cc:2a:ac:71:03:86:21:95:d9:66:b7:dc:05:c4:ab:1e:40:30: f2:24:10:99:c1:06:1a:83:fb:21:03:0d:b1:68:b8:e1:dd:36: 1d:85:6f:03:4b:9a:59:f1:6a:dd:8b:a3:df:ed:96:5e:7d:0f: d5:db:06:c5:54:dc:f1:df:db:f3:64:38:c3:a3:64:03:b3:81: ae:af:97:40:06:e9:f0:79:63:af:c1:b7:5d:86:27:ff:d2:e8: 34:65:de:0c:95:ec:36:e3:dd:56:8c:e2:fd:1a:ee:c2:77:f0: a5:d3:f6:80 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NUZF MEZBNzA0NDYwQUE0RkFFRjhGQThDQTYwOUYwMEM0Q0RFMDA4MB4XDTI1MDMxNTAx MzQzMVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoODAxQzNFMTM4NUM1MDI3 QkQyMDM1MjI1MkE3QzcyQjlBNjU4NERBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALy8cw2ByI66k+FF42QK6ImzjRejivtUrI2GuL0cj42Hln+iVBh6 FiWsck9xcX0meXWE2Y6/qi/0gMleLSmpxfuP3SBFSsRGmFgO9e2CyDB2Oadb9n3F C4fyutSaZFm9Gafqykel1umpUMttrn/hmsKSTRoY4OB+2UKsh5/gXJs13GIsz+8e qsiWCDDl98iLJMjkdWMbDFagVpAyjqoQtZX62EI/xawKYK5Jkosg3VO3CP8pS9O4 dg+sw5jW+Lc2+3ImatCHVaI/8XNstc0GZ8kX+1XV92andUB2Y1T0HiIOP5IILODE dA/+PZ9TE680MD2bBQr60hOTynEcLCinMocCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBSAHD4ThcUCe9IDUiUqfHK5plhNrjAfBgNVHSMEGDAWgBSF/g+nBEYKpPrvj6jK YJ8AxM3gCDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjI1MS9oZjRQcHdSR0NxVDY3NC1veW1DZkFNVE40QWcuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oZjRQcHdSR0NxVDY3NC1veW1DZkFN VE40QWcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjI1MS9oZjRQcHdSR0NxVDY3NC1veW1DZkFNVE40QWcubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEANQwKMaf5InXDPn0QEiB0Md46YHYAY4g5E0rnMB2baovtZ1uwXrlizzC9 lw2D49su7khA5s4KcUUuZiDxBJOJnc1yCrk64jDuNlkyTyIK2JA4d2225RuogmIR lzPricKf7fIgc7OxuQqdpIIudQrq6zqwc27vkuiBXqBS4ckYrfQOuKGXEE8u3O+S ctQlC3UyzCqscQOGIZXZZrfcBcSrHkAw8iQQmcEGGoP7IQMNsWi44d02HYVvA0ua WfFq3Yuj3+2WXn0P1dsGxVTc8d/b82Q4w6NkA7OBrq+XQAbp8Hljr8G3XYYn/9Lo NGXeDJXsNuPdVozi/RruwnfwpdP2gA== -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:27 2025 by rpki-client