$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft File: Xe_54al9RszcEvYG7rOKPmTbyB8.mft (raw, json) Hash identifier: PplMC5dkPzwQz554eTcOpRULQQtHg/61mES6QuRO8ig= Subject key identifier: 58:12:DA:EC:97:6F:6D:31:FF:20:1C:8A:6A:5E:66:77:F9:E2:E0:BC Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F Certificate issuer: /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Certificate serial: 2E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft Manifest number: 0663 Signing time: Tue 22 Jul 2025 00:08:17 +0000 Manifest this update: Tue 22 Jul 2025 00:08:17 +0000 Manifest next update: Wed 06 Aug 2025 00:08:17 +0000 Files and hashes: 1: D9wlSRMdwJhdWAy5bpX7z71z9DI.roa (hash: j/X2+wzvoea4B7MS4Kbw1f2zpFd/lvPY47vHdmdgr+M=) 2: MeEHE-vlUdq2BHWefRHYnB38w_Y.roa (hash: 9ysP4c/5sFhvMJDAaPTUAsgR36XZBI+PYmJljtgR7Po=) 3: Xe_54al9RszcEvYG7rOKPmTbyB8.crl (hash: m3qIl1LYS4PJ4vx+70W2/To6fn1gaxMP/DDz8n5j1bA=) 4: uhBWYlwuc-evXx8jkLWWKRgwLD4.roa (hash: xFqg88p13zHne/bveGmo2GlufJ14Ss6v7Q1WAB/tjl0=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 01:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F Validity Not Before: Jul 15 01:41:45 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=5812DAEC976F6D31FF201C8A6A5E6677F9E2E0BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:d0:35:86:7f:74:c3:2c:ed:a8:97:36:49: de:c6:da:f6:97:02:59:95:bb:4a:71:ce:b6:e8:e2: 04:12:68:f1:ec:21:b8:91:fc:6d:57:3c:f0:dd:a6: f0:4f:81:33:d2:cf:c2:17:7a:9c:74:68:e8:69:66: 2b:70:e3:d0:d7:60:65:fb:ad:b8:ad:f1:08:64:70: 11:26:5f:66:e2:12:98:ed:53:77:1e:67:7b:5e:e2: 06:37:e7:c8:b7:a2:17:61:f4:e4:40:ae:b8:15:bd: 69:b9:bd:7d:d6:2e:58:a8:01:9c:c1:51:53:02:a0: 84:48:12:9c:2b:f2:dd:1f:b5:f5:da:82:d7:00:d7: 2e:02:4f:20:d5:c1:da:c2:e3:f6:eb:33:38:09:72: de:91:3f:d9:25:50:f2:6b:10:14:d9:12:38:04:9e: ed:b3:f2:50:aa:98:70:2a:3c:cf:4a:58:15:62:39: 0b:96:77:01:5e:3a:eb:a4:d7:30:1b:62:b5:5b:c6: 03:a4:9f:41:95:f0:cc:93:f2:17:36:ff:05:31:be: 46:e7:13:7c:26:53:95:01:b9:94:27:fc:51:40:89: 5e:1e:a0:f3:a1:bd:f3:07:d1:9f:60:24:a0:58:89: 9c:f9:fa:18:0f:88:96:93:49:83:d3:27:f4:1a:70: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:12:DA:EC:97:6F:6D:31:FF:20:1C:8A:6A:5E:66:77:F9:E2:E0:BC X509v3 Authority Key Identifier: keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:4f:e6:6f:d9:e7:0e:8b:5b:86:55:0d:17:a6:7f:d8:5f:46: 94:37:aa:1e:8c:a0:b1:21:94:54:e9:08:45:5c:5d:5d:f4:e1: 44:78:95:1c:e7:64:e0:73:70:93:65:6d:03:6e:f2:d6:c4:af: 63:a6:af:bf:9d:fd:87:ee:0e:af:5e:a9:55:d4:f5:92:c7:03: a0:2c:58:4e:5f:7f:6a:31:8e:71:da:2b:ca:5d:09:3a:bc:e4: 6f:04:77:ea:34:dc:6d:90:71:78:14:dc:49:38:90:e6:29:fc: 82:07:21:61:01:24:99:70:b3:22:5a:4c:e1:67:d2:da:bf:af: bb:6d:6b:25:bd:af:44:28:9a:9c:23:78:dd:d5:06:3a:51:91: aa:07:39:3e:8b:79:a4:dd:02:7a:89:c4:f6:b6:d1:45:71:b6: 3d:ff:b9:d5:f8:c5:72:c6:6d:f3:8e:85:50:96:b6:35:fb:9c: 74:05:1b:77:41:07:53:12:dc:34:a0:16:68:ff:14:ea:08:36: be:6e:16:8f:d2:0d:23:57:7f:6d:66:19:ea:2b:8f:5b:4d:f8: 9e:65:ad:3c:df:6b:aa:44:9e:ef:d4:a1:2c:52:f1:55:42:cc: 35:92:ad:a7:67:1a:80:f7:cc:fd:96:83:2b:bc:01:2f:c9:06: 62:b7:e1:53 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1REVG RjlFMUE5N0Q0NkNDREMxMkY2MDZFRUIzOEEzRTY0REJDODFGMB4XDTI1MDcxNTAx NDE0NVoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoNTgxMkRBRUM5NzZGNkQz MUZGMjAxQzhBNkE1RTY2NzdGOUUyRTBCQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMWp0DWGf3TDLO2olzZJ3sba9pcCWZW7SnHOtujiBBJo8ewhuJH8 bVc88N2m8E+BM9LPwhd6nHRo6GlmK3Dj0NdgZfutuK3xCGRwESZfZuISmO1Tdx5n e17iBjfnyLeiF2H05ECuuBW9abm9fdYuWKgBnMFRUwKghEgSnCvy3R+19dqC1wDX LgJPINXB2sLj9uszOAly3pE/2SVQ8msQFNkSOASe7bPyUKqYcCo8z0pYFWI5C5Z3 AV4666TXMBtitVvGA6SfQZXwzJPyFzb/BTG+RucTfCZTlQG5lCf8UUCJXh6g86G9 8wfRn2AkoFiJnPn6GA+IlpNJg9Mn9Bpw9HUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRYEtrsl29tMf8gHIpqXmZ3+eLgvDAfBgNVHSMEGDAWgBRd7/nhqX1GzNwS9gbu s4o+ZNvIHzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQbVRieUI4LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWGVfNTRhbDlSc3pjRXZZRzdyT0tQ bVRieUI4LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDQwL1hlXzU0YWw5UnN6Y0V2WUc3ck9LUG1UYnlCOC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1T+Zv2ecOi1uGVQ0Xpn/YX0aUN6oejKCxIZRU6QhFXF1d9OFEeJUc 52Tgc3CTZW0DbvLWxK9jpq+/nf2H7g6vXqlV1PWSxwOgLFhOX39qMY5x2ivKXQk6 vORvBHfqNNxtkHF4FNxJOJDmKfyCByFhASSZcLMiWkzhZ9Lav6+7bWslva9EKJqc I3jd1QY6UZGqBzk+i3mk3QJ6icT2ttFFcbY9/7nV+MVyxm3zjoVQlrY1+5x0BRt3 QQdTEtw0oBZo/xTqCDa+bhaP0g0jV39tZhnqK49bTfieZa0832uqRJ7v1KEsUvFV Qsw1kq2nZxqA98z9loMrvAEvyQZit+FT -----END CERTIFICATE-----Generated at Tue Jul 22 02:37:24 2025 by rpki-client