$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft File: OV2JJ1PBWV4Ha18QBloEhmHDB54.mft (raw, json) Hash identifier: z2AUy46vJV4KXmydBI4qdUFR47L762IxOk+FzRgkULc= Subject key identifier: C5:A9:65:0C:12:05:05:B0:7C:44:7A:F1:7B:31:39:1D:67:FE:5B:BB Authority key identifier: 39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E Certificate issuer: /CN=395D892753C1595E076B5F10065A048661C3079E Certificate serial: 63 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft Manifest number: 1684 Signing time: Mon 21 Jul 2025 11:37:38 +0000 Manifest this update: Mon 21 Jul 2025 11:37:38 +0000 Manifest next update: Tue 05 Aug 2025 11:37:38 +0000 Files and hashes: 1: Dg3Xx3zsJP9SYITqFNrAYCLK5xk.roa (hash: XJAdfG/VIdYc8rlQAvdjmxI91Oj7jJZlXNxPx+/7rsE=) 2: OV2JJ1PBWV4Ha18QBloEhmHDB54.crl (hash: 7w1Jb1ki84/1nrRGxo/6eKOZQlJZ7xPX5vBybC1jksw=) 3: nliHp25N6ClyucgJjptpOaTwmK8.roa (hash: kfkoE9BRd+7czxvR9LTowK8rWF/3hTUrvHicWzWy1mk=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 12:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=395D892753C1595E076B5F10065A048661C3079E Validity Not Before: Jul 15 01:38:44 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=C5A9650C120505B07C447AF17B31391D67FE5BBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:1f:91:30:bd:20:0e:45:74:5f:66:af:5c: a2:f1:92:ec:1c:9a:41:ee:64:5e:08:14:a8:9c:58: cc:28:65:74:d3:68:46:ca:6f:e8:96:eb:03:84:ef: ae:4c:63:f7:d0:9d:bb:4f:da:6e:ea:d2:89:f8:68: 6f:65:d5:b7:fe:cc:99:00:4a:5d:4c:ff:11:5e:5e: 65:55:14:b2:73:f2:59:f3:3b:36:8b:d2:26:88:ac: b0:2a:f6:0c:28:5a:ee:d6:c6:d0:2d:3f:5c:1d:8b: 6c:8d:8e:cc:49:68:55:d9:8b:64:d2:44:b7:99:c2: bf:e7:8d:f4:6b:17:0a:e4:35:c0:0b:5c:49:85:c2: 98:45:2c:13:42:56:cf:6a:05:68:a5:cb:88:db:81: 13:6f:2a:35:f8:f0:08:5a:aa:8f:03:a0:d4:a9:54: be:08:88:80:ba:22:8e:7a:c5:18:4f:5d:71:9f:83: 1e:4a:0a:43:30:b9:77:28:f4:63:3c:b7:0b:06:72: cc:6a:50:78:03:fc:9a:ed:eb:3a:0d:c5:78:41:a6: ef:db:7b:26:9a:1b:25:75:6f:46:cc:a4:e7:f7:f0: 96:d7:86:9d:80:be:58:87:99:80:98:77:73:75:d9: bb:c7:c3:78:59:95:30:86:e3:75:c6:23:e7:29:d6: ae:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A9:65:0C:12:05:05:B0:7C:44:7A:F1:7B:31:39:1D:67:FE:5B:BB X509v3 Authority Key Identifier: keyid:39:5D:89:27:53:C1:59:5E:07:6B:5F:10:06:5A:04:86:61:C3:07:9E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OV2JJ1PBWV4Ha18QBloEhmHDB54.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30045/OV2JJ1PBWV4Ha18QBloEhmHDB54.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:16:2d:47:28:60:2a:5d:11:50:e2:b6:c5:dd:a8:9a:87:8f: c0:a6:75:43:09:95:4a:06:40:a9:f6:7d:a2:55:b2:33:8d:9c: 6b:01:08:c9:fc:ce:7f:c9:1c:6d:97:00:78:2e:f2:f4:c4:02: e1:6a:45:90:ee:0b:c3:89:62:be:07:9e:77:21:b7:0c:fb:0e: 74:d1:e6:a9:e6:1f:3a:09:15:9c:83:3f:b6:e6:02:b0:fb:a5: fe:13:68:28:6b:16:35:03:e1:bd:4d:51:18:8b:74:1c:26:9e: 20:53:35:37:07:1e:f0:3d:c0:02:dd:9f:d5:88:a0:1f:d0:9a: 13:cf:b9:20:ee:2b:8b:f8:14:73:62:c2:a2:12:ca:e0:e7:f8: f5:ad:ba:cd:f3:55:fd:01:32:e0:1c:42:49:aa:56:1f:46:c1: 9b:09:31:8c:3a:ad:cf:2e:17:f4:9b:59:94:6b:fa:ba:aa:90: a0:dd:52:68:03:ca:0d:dc:31:a8:ce:0c:c1:ca:f0:db:a5:66: ab:07:48:b4:ba:90:99:79:f7:86:dd:e0:22:67:f5:9d:94:88: eb:8c:39:32:ed:df:c1:b1:02:5a:17:17:ad:0e:ff:97:d6:48: 40:60:5f:23:65:84:4a:59:50:9e:08:77:84:98:60:ba:b3:45: ef:a9:1b:40 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOTVE ODkyNzUzQzE1OTVFMDc2QjVGMTAwNjVBMDQ4NjYxQzMwNzlFMB4XDTI1MDcxNTAx Mzg0NFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoQzVBOTY1MEMxMjA1MDVC MDdDNDQ3QUYxN0IzMTM5MUQ2N0ZFNUJCQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKEVH5EwvSAORXRfZq9covGS7ByaQe5kXggUqJxYzChldNNoRspv 6JbrA4Tvrkxj99Cdu0/aburSifhob2XVt/7MmQBKXUz/EV5eZVUUsnPyWfM7NovS JoissCr2DCha7tbG0C0/XB2LbI2OzEloVdmLZNJEt5nCv+eN9GsXCuQ1wAtcSYXC mEUsE0JWz2oFaKXLiNuBE28qNfjwCFqqjwOg1KlUvgiIgLoijnrFGE9dcZ+DHkoK QzC5dyj0Yzy3CwZyzGpQeAP8mu3rOg3FeEGm79t7JpobJXVvRsyk5/fwlteGnYC+ WIeZgJh3c3XZu8fDeFmVMIbjdcYj5ynWrtECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBTFqWUMEgUFsHxEevF7MTkdZ/5buzAfBgNVHSMEGDAWgBQ5XYknU8FZXgdrXxAG WgSGYcMHnjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNDUvT1YySkoxUEJXVjRIYTE4UUJsb0VobUhEQjU0LmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT1YySkoxUEJXVjRIYTE4UUJsb0Vo bUhEQjU0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDQ1L09WMkpKMVBCV1Y0SGExOFFCbG9FaG1IREI1NC5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWFi1HKGAqXRFQ4rbF3aiah4/ApnVDCZVKBkCp9n2iVbIzjZxrAQjJ /M5/yRxtlwB4LvL0xALhakWQ7gvDiWK+B553IbcM+w500eap5h86CRWcgz+25gKw +6X+E2goaxY1A+G9TVEYi3QcJp4gUzU3Bx7wPcAC3Z/ViKAf0JoTz7kg7iuL+BRz YsKiEsrg5/j1rbrN81X9ATLgHEJJqlYfRsGbCTGMOq3PLhf0m1mUa/q6qpCg3VJo A8oN3DGozgzByvDbpWarB0i0upCZefeG3eAiZ/WdlIjrjDky7d/BsQJaFxetDv+X 1khAYF8jZYRKWVCeCHeEmGC6s0XvqRtA -----END CERTIFICATE-----Generated at Mon Jul 21 14:01:57 2025 by rpki-client