$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft File: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft (raw, json) Hash identifier: TIZHb2SL2oHvgFtJpXKazRRPIBEsrqgcqly50dipWkA= Subject key identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Certificate serial: 3B Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft Manifest number: 0426 Signing time: Sat 05 Apr 2025 14:08:00 +0000 Manifest this update: Sat 05 Apr 2025 14:08:00 +0000 Manifest next update: Sun 20 Apr 2025 14:08:00 +0000 Files and hashes: 1: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl (hash: dsk/+GMVYaQIWcNtjU8X5QOjDsCS76nE+/mpTLYzvK0=) 2: h_jKPxFGzFxdMTKGqgADNrpFLFY.roa (hash: py+tyDzACK9ub7FVfysH0e6yW69EJ2UrMSlH/Qjkjj8=) 3: nQbSbdzXpOrjCLYzhMGV7WR_sHI.roa (hash: kvDRiFJhakWkRHFf+nf0iRCXboKzrhzg3BCj2fdjfHM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Validity Not Before: Mar 15 01:35:33 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E532D38B390BA23855C21F281072D162264A819D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:77:3c:7f:7e:8d:6e:0d:b2:e7:4d:bc:63: ea:6d:08:76:b0:c8:a6:77:a9:83:24:5c:c8:c2:d6: a8:ee:e5:6a:f2:3e:ac:c7:93:32:58:77:25:62:b4: a8:ea:26:67:5c:4c:81:8d:63:75:17:bc:65:50:d5: 5e:c3:36:ba:ca:86:87:c1:3c:31:4c:47:08:08:5a: 16:51:3c:dc:ec:97:ad:5b:c0:65:9e:0b:66:df:5e: 0c:ee:0e:1a:04:40:d8:d6:72:28:32:f5:90:2d:ac: 56:89:67:7e:64:8d:36:f3:de:32:ea:a8:66:99:ff: 37:d3:ab:0a:11:7d:3c:65:d0:15:07:6c:ba:e3:ee: 84:51:4b:36:bb:25:b8:56:92:5b:1c:c6:88:75:58: 50:f4:72:10:ab:36:ec:a2:bb:77:b6:7b:cf:d6:f5: 62:cb:5a:13:bd:55:c5:c7:3d:d8:67:91:2c:ed:87: 21:d9:96:52:75:9a:b7:91:0a:9c:0c:25:e1:a3:b9: 7d:9c:61:c8:40:6f:25:07:8a:0f:d2:fd:5d:bc:e5: 86:7d:a9:12:47:34:9a:5f:16:2a:c2:85:99:4d:a7: 9b:25:ae:c9:be:47:a4:98:e5:7f:fa:1e:b5:3f:17: 61:0b:76:de:08:71:50:00:4e:1d:56:b0:3f:d6:73: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D X509v3 Authority Key Identifier: keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:7e:20:d7:17:58:5f:68:7e:6c:d1:16:d6:b0:84:30:82:f7: 8d:8d:b0:f7:90:03:da:25:62:bd:ea:3f:7f:f0:90:21:0f:6f: 69:bd:d5:f8:2f:86:c8:4b:0c:63:61:56:09:5c:7f:7c:e9:cf: 00:f3:71:b5:4a:6b:18:9e:82:ee:64:94:82:7a:0f:cc:43:13: b8:17:83:8c:58:28:9d:fa:62:86:98:2f:7d:0b:94:5d:7e:6f: 9a:4a:2d:a3:7b:3e:b9:f9:21:d4:21:d2:c7:7e:7c:c9:d3:1c: 1e:37:bf:c3:ad:fd:57:e0:02:47:ba:0e:d2:53:e3:4f:33:81: 14:87:42:e4:77:c1:8f:cb:5d:2d:c8:19:8f:88:dd:63:06:60: 28:1a:7f:72:1a:c3:f5:10:ea:f4:eb:9d:ba:39:cf:20:18:1b: 15:89:69:2e:43:24:53:62:2f:55:d0:23:71:bd:bd:c6:a5:7d: 05:53:8b:fa:3c:74:17:b4:87:87:ac:00:32:60:c9:26:42:10: 31:ba:20:61:96:62:b1:21:dc:cd:b9:69:13:e1:76:ef:48:df: 56:c9:63:3b:83:c4:bc:c3:f6:4a:7a:86:3d:2d:3f:67:64:69: ed:62:83:5f:a1:cd:56:cc:ba:de:2b:c0:02:c8:00:0d:91:a1: 14:cc:c2:43 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzdC MzY0RUQwNDU4NTI2RDY2OENFRjhDRUU2NUEwOUREQzJFNERDMB4XDTI1MDMxNTAx MzUzM1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRTUzMkQzOEIzOTBCQTIz ODU1QzIxRjI4MTA3MkQxNjIyNjRBODE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKuWdzx/fo1uDbLnTbxj6m0IdrDIpnepgyRcyMLWqO7lavI+rMeT Mlh3JWK0qOomZ1xMgY1jdRe8ZVDVXsM2usqGh8E8MUxHCAhaFlE83OyXrVvAZZ4L Zt9eDO4OGgRA2NZyKDL1kC2sVolnfmSNNvPeMuqoZpn/N9OrChF9PGXQFQdsuuPu hFFLNrsluFaSWxzGiHVYUPRyEKs27KK7d7Z7z9b1YstaE71Vxcc92GeRLO2HIdmW UnWat5EKnAwl4aO5fZxhyEBvJQeKD9L9Xbzlhn2pEkc0ml8WKsKFmU2nmyWuyb5H pJjlf/oetT8XYQt23ghxUABOHVawP9ZzN/sCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTlMtOLOQuiOFXCHygQctFiJkqBnTAfBgNVHSMEGDAWgBRjezZO0EWFJtZozvjO 5loJ3cLk3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L1kzczJUdEJGaFNiV2FNNzR6dVphQ2QzQzVOdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1kzczJUdEJGaFNiV2FNNzR6dVphQ2Qz QzVOdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvWTNzMlR0QkZoU2JXYU03NHp1WmFDZDNDNU53Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAJ9+INcXWF9ofmzRFtawhDCC942NsPeQA9olYr3qP3/wkCEPb2m91fgvhshL DGNhVglcf3zpzwDzcbVKaxiegu5klIJ6D8xDE7gXg4xYKJ36YoaYL30LlF1+b5pK LaN7Prn5IdQh0sd+fMnTHB43v8Ot/VfgAke6DtJT408zgRSHQuR3wY/LXS3IGY+I 3WMGYCgaf3Iaw/UQ6vTrnbo5zyAYGxWJaS5DJFNiL1XQI3G9vcalfQVTi/o8dBe0 h4esADJgySZCEDG6IGGWYrEh3M25aRPhdu9I31bJYzuDxLzD9kp6hj0tP2dkae1i g1+hzVbMut4rwALIAA2RoRTMwkM= -----END CERTIFICATE-----Generated at Sat Apr 5 17:20:07 2025 by rpki-client