$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft File: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft (raw, json) Hash identifier: bd33mmG49poppiVN48/7wAQDuzR2xWNnPXffqaoZLmU= Subject key identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D Authority key identifier: 63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC Certificate issuer: /CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Certificate serial: 41 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft Manifest number: 06A7 Signing time: Mon 21 Jul 2025 15:34:28 +0000 Manifest this update: Mon 21 Jul 2025 15:34:28 +0000 Manifest next update: Tue 05 Aug 2025 15:34:28 +0000 Files and hashes: 1: Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl (hash: ph9g4MxLelIpEhRWS5Dpyb0dEBfFkd7MR9znAiuuG8E=) 2: h_jKPxFGzFxdMTKGqgADNrpFLFY.roa (hash: py+tyDzACK9ub7FVfysH0e6yW69EJ2UrMSlH/Qjkjj8=) 3: nQbSbdzXpOrjCLYzhMGV7WR_sHI.roa (hash: kvDRiFJhakWkRHFf+nf0iRCXboKzrhzg3BCj2fdjfHM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=637B364ED0458526D668CEF8CEE65A09DDC2E4DC Validity Not Before: Jul 15 01:31:56 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=E532D38B390BA23855C21F281072D162264A819D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:77:3c:7f:7e:8d:6e:0d:b2:e7:4d:bc:63: ea:6d:08:76:b0:c8:a6:77:a9:83:24:5c:c8:c2:d6: a8:ee:e5:6a:f2:3e:ac:c7:93:32:58:77:25:62:b4: a8:ea:26:67:5c:4c:81:8d:63:75:17:bc:65:50:d5: 5e:c3:36:ba:ca:86:87:c1:3c:31:4c:47:08:08:5a: 16:51:3c:dc:ec:97:ad:5b:c0:65:9e:0b:66:df:5e: 0c:ee:0e:1a:04:40:d8:d6:72:28:32:f5:90:2d:ac: 56:89:67:7e:64:8d:36:f3:de:32:ea:a8:66:99:ff: 37:d3:ab:0a:11:7d:3c:65:d0:15:07:6c:ba:e3:ee: 84:51:4b:36:bb:25:b8:56:92:5b:1c:c6:88:75:58: 50:f4:72:10:ab:36:ec:a2:bb:77:b6:7b:cf:d6:f5: 62:cb:5a:13:bd:55:c5:c7:3d:d8:67:91:2c:ed:87: 21:d9:96:52:75:9a:b7:91:0a:9c:0c:25:e1:a3:b9: 7d:9c:61:c8:40:6f:25:07:8a:0f:d2:fd:5d:bc:e5: 86:7d:a9:12:47:34:9a:5f:16:2a:c2:85:99:4d:a7: 9b:25:ae:c9:be:47:a4:98:e5:7f:fa:1e:b5:3f:17: 61:0b:76:de:08:71:50:00:4e:1d:56:b0:3f:d6:73: 37:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:32:D3:8B:39:0B:A2:38:55:C2:1F:28:10:72:D1:62:26:4A:81:9D X509v3 Authority Key Identifier: keyid:63:7B:36:4E:D0:45:85:26:D6:68:CE:F8:CE:E6:5A:09:DD:C2:E4:DC X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Y3s2TtBFhSbWaM74zuZaCd3C5Nw.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:be:e1:f6:cb:23:a5:ed:41:4d:58:04:bb:70:7c:d2:95:3c: f1:94:c9:88:d8:2e:7b:d0:1d:8c:de:55:44:19:64:09:1c:91: 38:aa:c8:83:f0:a8:4e:2c:d0:66:47:da:7b:02:4e:6c:05:63: 69:62:d0:c6:38:2c:fb:b6:74:db:67:6e:71:cf:97:26:d0:89: 34:98:d4:3c:1d:05:8a:fd:a0:0c:36:d3:e7:fc:a8:06:1e:77: a3:38:96:15:ae:66:72:43:cb:c8:98:94:3d:75:7a:a3:d5:c3: e1:26:cf:42:66:42:e7:99:4b:eb:b6:3e:59:1c:5b:bf:6d:7c: 33:a9:55:3c:71:1f:b0:21:86:f7:41:c4:63:8f:da:39:3d:8f: 80:d8:1d:16:fc:3d:1a:52:7e:a7:86:a7:9a:76:4a:5d:e7:9e: 72:97:c7:26:dc:97:ca:c2:79:88:29:7a:31:38:a3:2a:23:e3: d0:75:de:32:40:4c:ed:d6:88:a0:7f:b9:0b:de:03:76:1f:3f: e7:2e:a8:ea:43:6b:e2:ab:74:7c:89:d5:83:f5:29:8d:d1:81: d7:c2:2d:b3:b5:d1:b8:f2:a2:1a:24:18:cc:81:71:21:3f:3a: 52:d6:3b:c6:84:c6:f5:ab:f5:92:cc:6c:f6:79:5d:3b:64:56: f9:98:c7:60 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBQTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MzdC MzY0RUQwNDU4NTI2RDY2OENFRjhDRUU2NUEwOUREQzJFNERDMB4XDTI1MDcxNTAx MzE1NloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRTUzMkQzOEIzOTBCQTIz ODU1QzIxRjI4MTA3MkQxNjIyNjRBODE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKuWdzx/fo1uDbLnTbxj6m0IdrDIpnepgyRcyMLWqO7lavI+rMeT Mlh3JWK0qOomZ1xMgY1jdRe8ZVDVXsM2usqGh8E8MUxHCAhaFlE83OyXrVvAZZ4L Zt9eDO4OGgRA2NZyKDL1kC2sVolnfmSNNvPeMuqoZpn/N9OrChF9PGXQFQdsuuPu hFFLNrsluFaSWxzGiHVYUPRyEKs27KK7d7Z7z9b1YstaE71Vxcc92GeRLO2HIdmW UnWat5EKnAwl4aO5fZxhyEBvJQeKD9L9Xbzlhn2pEkc0ml8WKsKFmU2nmyWuyb5H pJjlf/oetT8XYQt23ghxUABOHVawP9ZzN/sCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTlMtOLOQuiOFXCHygQctFiJkqBnTAfBgNVHSMEGDAWgBRjezZO0EWFJtZozvjO 5loJ3cLk3DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM0L1kzczJUdEJGaFNiV2FNNzR6dVphQ2QzQzVOdy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1kzczJUdEJGaFNiV2FNNzR6dVphQ2Qz QzVOdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC8yMzQvWTNzMlR0QkZoU2JXYU03NHp1WmFDZDNDNU53Lm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAFi+4fbLI6XtQU1YBLtwfNKVPPGUyYjYLnvQHYzeVUQZZAkckTiqyIPwqE4s 0GZH2nsCTmwFY2li0MY4LPu2dNtnbnHPlybQiTSY1DwdBYr9oAw20+f8qAYed6M4 lhWuZnJDy8iYlD11eqPVw+Emz0JmQueZS+u2PlkcW79tfDOpVTxxH7AhhvdBxGOP 2jk9j4DYHRb8PRpSfqeGp5p2Sl3nnnKXxybcl8rCeYgpejE4oyoj49B13jJATO3W iKB/uQveA3YfP+cuqOpDa+KrdHyJ1YP1KY3RgdfCLbO10bjyohokGMyBcSE/OlLW O8aExvWr9ZLMbPZ5XTtkVvmYx2A= -----END CERTIFICATE-----Generated at Mon Jul 21 18:46:38 2025 by rpki-client