$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft File: AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft (raw, json) Hash identifier: h8vBCY8tDaSJ++VMgN9zO/PRKrF+hyrxJxXyQ0KMtGw= Subject key identifier: 5D:5B:21:1C:39:F4:70:9C:53:E9:56:C5:B4:A4:25:06:A6:84:52:4A Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4 Certificate issuer: /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4 Certificate serial: 4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft Manifest number: 06CF Signing time: Mon 21 Jul 2025 15:34:26 +0000 Manifest this update: Mon 21 Jul 2025 15:34:26 +0000 Manifest next update: Tue 05 Aug 2025 15:34:26 +0000 Files and hashes: 1: AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl (hash: bBgkaSVDLDQmCSCqJOlCHvW/ceKv14sxuqby1ezsoaA=) 2: ByaKLxi8ugDsCUlm9INow9uu6HQ.roa (hash: rFudOXdLmyC8QrHWkk8RlCXIH1HOn6lrmOeEaDYa5Ww=) 3: HWgzIZVXEAs7FF0RbqBf_SQnRVg.roa (hash: Exrgbrgo8QPKtlDqTADP3vwyj4OqXqgX80ECG/w/A94=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 14:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4 Validity Not Before: Jul 15 01:31:51 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5D5B211C39F4709C53E956C5B4A42506A684524A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1f:7f:02:2d:93:59:d7:32:b1:88:07:0b:62: dd:c8:14:68:cb:5d:50:89:6e:28:70:6f:d2:5d:58: 30:cb:66:29:c7:70:c9:ec:0b:5e:75:fb:bc:f9:b5: e9:7b:4c:f1:ea:37:4c:4e:a8:14:9f:b7:9d:c4:26: 84:f4:35:b6:a4:4d:47:8e:43:06:36:57:bb:80:6f: 13:a0:1a:70:36:a8:30:a6:e5:9c:f3:b6:86:85:38: 5b:50:6e:1d:0c:a9:69:a6:ee:74:f9:10:23:23:bf: 9e:3b:e4:58:ad:11:d5:b9:67:c4:a3:8c:c3:67:96: 1e:97:7d:92:80:c2:3a:a2:39:1e:06:b7:02:0e:9c: 36:c9:a6:6f:a0:49:2a:36:94:31:3f:cf:6a:cc:b0: 80:58:df:6f:3e:f8:72:2e:28:61:51:35:c5:55:65: b6:4c:99:33:75:2f:b2:7b:f7:4a:f3:05:64:ea:e1: 1d:ff:37:69:18:d0:0c:56:fe:55:94:92:a1:08:7a: c6:bf:da:55:a0:50:1a:a4:01:e5:d6:d0:77:ca:7d: 29:4a:67:37:fd:92:8c:8e:b4:82:67:41:73:65:0c: 05:fe:1f:74:58:1a:c2:f1:b8:63:01:c2:6b:be:8b: d2:3c:e7:0e:a4:8d:1e:d8:a4:33:47:07:95:a8:a0: 2f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5B:21:1C:39:F4:70:9C:53:E9:56:C5:B4:A4:25:06:A6:84:52:4A X509v3 Authority Key Identifier: keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:01:3b:b4:e1:1e:c3:4c:05:0c:b2:61:de:e4:1b:cb:5c:4e: 39:74:e5:f8:1e:fc:fa:fc:22:03:4f:c3:0f:94:de:d8:fb:eb: b9:9e:80:38:01:5c:df:81:c3:6e:6c:fd:b0:78:f7:0e:44:2a: ec:b9:d1:f8:18:50:9c:dd:98:52:27:2f:03:92:92:40:57:18: dd:3a:2f:99:09:f4:83:b1:c2:39:ce:50:e0:30:56:c7:2e:18: 5b:f0:85:1f:83:f1:b0:4e:8c:8d:cb:05:b4:2d:c0:0c:f0:86: 02:68:5c:65:b0:7c:4e:31:a4:79:81:3b:a4:be:1d:54:f2:1d: 8b:64:8e:2c:1c:65:36:19:6f:42:ae:a7:dd:1d:42:05:70:a2: 40:d8:6f:3a:92:c8:64:5a:15:0b:e5:26:1c:b3:5b:9d:af:05: e8:05:8e:1b:0b:8e:4f:a8:b6:44:b8:b3:e5:56:a8:3e:48:af: fb:ad:be:78:05:3e:44:b2:ae:72:81:c2:ce:90:a7:d7:53:d9: da:10:54:a8:7b:3c:28:c7:00:62:67:16:30:0e:e8:c8:f3:3b: 11:09:0e:34:7a:c3:77:ad:e7:8b:76:51:0e:f0:f8:a3:ec:83: 4e:d9:3d:86:47:79:af:01:16:90:3b:23:03:80:a5:b2:ad:a5: 10:0a:99:92 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcx MUYyREQ3NjY3Q0ZCMDg4MDRCRThGQTI4NEE0OUU2MTNFREM0MB4XDTI1MDcxNTAx MzE1MVoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoNUQ1QjIxMUMzOUY0NzA5 QzUzRTk1NkM1QjRBNDI1MDZBNjg0NTI0QTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOEffwItk1nXMrGIBwti3cgUaMtdUIluKHBv0l1YMMtmKcdwyewL XnX7vPm16XtM8eo3TE6oFJ+3ncQmhPQ1tqRNR45DBjZXu4BvE6AacDaoMKblnPO2 hoU4W1BuHQypaabudPkQIyO/njvkWK0R1blnxKOMw2eWHpd9koDCOqI5Hga3Ag6c Nsmmb6BJKjaUMT/PasywgFjfbz74ci4oYVE1xVVltkyZM3Uvsnv3SvMFZOrhHf83 aRjQDFb+VZSSoQh6xr/aVaBQGqQB5dbQd8p9KUpnN/2SjI60gmdBc2UMBf4fdFga wvG4YwHCa76L0jznDqSNHtikM0cHlaigL8kCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRdWyEcOfRwnFPpVsW0pCUGpoRSSjAfBgNVHSMEGDAWgBQAcR8t12Z8+wiAS+j6 KEpJ5hPtxDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9BSEVmTGRkbWZQc0lnRXZvLWloS1Nl WVQ3Y1EuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEANgE7tOEew0wFDLJh3uQby1xOOXTl+B78+vwiA0/DD5Te2PvruZ6AOAFc 34HDbmz9sHj3DkQq7LnR+BhQnN2YUicvA5KSQFcY3TovmQn0g7HCOc5Q4DBWxy4Y W/CFH4PxsE6MjcsFtC3ADPCGAmhcZbB8TjGkeYE7pL4dVPIdi2SOLBxlNhlvQq6n 3R1CBXCiQNhvOpLIZFoVC+UmHLNbna8F6AWOGwuOT6i2RLiz5VaoPkiv+62+eAU+ RLKucoHCzpCn11PZ2hBUqHs8KMcAYmcWMA7oyPM7EQkONHrDd63ni3ZRDvD4o+yD Ttk9hkd5rwEWkDsjA4Clsq2lEAqZkg== -----END CERTIFICATE-----Generated at Mon Jul 21 18:49:46 2025 by rpki-client