$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft File: P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft (raw, json) Hash identifier: QNsG1/xlvyqmwElGqyfh/aT0zQm7SmdRni8y29vv0/A= Subject key identifier: 0B:1F:2D:E2:CE:0A:57:8A:D8:73:D3:BA:BD:7B:28:EA:40:D6:39:A1 Authority key identifier: 3F:CE:57:41:A4:81:39:45:3D:71:F2:93:D0:FB:E6:DC:81:26:A4:21 Certificate issuer: /CN=3FCE5741A48139453D71F293D0FBE6DC8126A421 Certificate serial: 12 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft Manifest number: 03A0 Signing time: Sat 05 Apr 2025 10:50:44 +0000 Manifest this update: Sat 05 Apr 2025 10:50:44 +0000 Manifest next update: Sun 20 Apr 2025 10:50:44 +0000 Files and hashes: 1: 2GF01kDgrVv18tnq6aOmxLmnVgg.roa (hash: b3+sYbzZz7iTw6qZ+D30zgWV9gPDbsggaAm/rK2y3JE=) 2: P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl (hash: E5qGu98GtQDIDFiBmm7wroJvrKzJUULQXebho8wHy4U=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3FCE5741A48139453D71F293D0FBE6DC8126A421 Validity Not Before: Mar 15 01:36:39 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=0B1F2DE2CE0A578AD873D3BABD7B28EA40D639A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ef:db:89:84:4f:a9:55:55:3f:28:1b:0c:c1: cc:37:40:36:39:54:ad:65:fa:fd:70:e5:bb:25:eb: b9:d5:a2:bf:1d:34:14:48:ba:f0:00:4b:35:b2:51: 7c:ab:12:a4:b8:c1:69:6c:6b:40:8e:10:a5:65:bd: 23:09:0f:d6:db:7b:d8:a8:0f:d6:39:28:5c:40:66: c4:00:78:90:4d:1f:2d:bf:0e:0c:7b:1f:a9:28:73: 52:72:c2:ae:5c:c0:bd:e9:78:c9:8f:4f:06:a0:82: 08:4f:be:12:10:9b:58:d5:b6:dc:75:18:b5:24:43: cf:e0:26:5c:34:26:e0:28:80:b9:29:12:7e:3d:af: b5:ad:cd:12:92:44:08:8e:3b:aa:0f:66:d2:36:51: 75:b4:5c:40:9e:74:95:5e:96:87:99:98:f8:cf:70: 6b:da:49:e3:80:38:e4:24:c6:f2:41:0a:f4:d9:8a: 85:4b:a7:4e:7a:86:ba:cc:d9:03:3e:49:16:b2:2c: e2:fb:a3:cd:55:cc:28:5d:7c:8f:34:97:9e:14:84: eb:8f:47:3a:30:59:ac:9b:f2:db:5b:34:f7:c1:08: 9b:ab:ba:96:2a:e9:e7:0d:c4:2a:ee:59:ce:38:47: 66:b6:89:1e:aa:f4:bf:e9:19:96:b9:d7:87:ba:ed: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1F:2D:E2:CE:0A:57:8A:D8:73:D3:BA:BD:7B:28:EA:40:D6:39:A1 X509v3 Authority Key Identifier: keyid:3F:CE:57:41:A4:81:39:45:3D:71:F2:93:D0:FB:E6:DC:81:26:A4:21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P85XQaSBOUU9cfKT0Pvm3IEmpCE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30059/P85XQaSBOUU9cfKT0Pvm3IEmpCE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2d:95:2a:1f:4c:ce:15:ab:3a:c0:a1:b4:29:c8:69:20:d9: 1e:8a:d2:87:a2:59:63:3c:3c:f9:67:fc:ef:6e:5b:ef:5b:c8: 57:55:e1:d1:94:f1:68:aa:57:15:1b:42:29:83:f1:ae:79:e5: b6:cd:78:5e:ea:55:e5:6b:5e:bc:b6:8b:d4:9d:be:79:13:46: 9c:fc:ac:15:89:5d:b4:43:99:96:00:ac:51:14:8f:8a:06:5e: ce:eb:66:a4:78:90:e9:c5:0e:6b:11:32:99:5c:25:37:77:5a: 19:3b:06:02:4f:41:a9:93:c1:19:ab:d8:9a:f1:e8:3b:40:b5: 2e:fd:df:cb:06:13:ce:3c:b9:4a:a8:19:33:c5:11:c9:88:0b: 84:a6:46:d4:98:ad:02:0f:07:0d:ab:ad:af:47:ba:16:71:54: 78:c5:91:64:35:9b:77:47:ef:9c:c5:94:e6:fe:46:8e:62:a7: a1:79:80:75:40:0d:b3:02:60:36:c6:3a:49:db:93:66:e3:ea: d8:92:a1:ed:8e:65:15:7b:2e:ce:ff:30:8e:47:e8:cf:62:ca: c4:ce:a1:17:60:cf:77:f0:64:b4:63:62:4e:ef:f9:36:1c:ee: f8:cb:5b:3b:3b:aa:8e:dc:50:c9:d0:ef:54:80:3c:59:2e:c7: 82:03:b6:b4 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBEjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzRkNF NTc0MUE0ODEzOTQ1M0Q3MUYyOTNEMEZCRTZEQzgxMjZBNDIxMB4XDTI1MDMxNTAx MzYzOVoXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoMEIxRjJERTJDRTBBNTc4 QUQ4NzNEM0JBQkQ3QjI4RUE0MEQ2MzlBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKLv24mET6lVVT8oGwzBzDdANjlUrWX6/XDluyXrudWivx00FEi6 8ABLNbJRfKsSpLjBaWxrQI4QpWW9IwkP1tt72KgP1jkoXEBmxAB4kE0fLb8ODHsf qShzUnLCrlzAvel4yY9PBqCCCE++EhCbWNW23HUYtSRDz+AmXDQm4CiAuSkSfj2v ta3NEpJECI47qg9m0jZRdbRcQJ50lV6Wh5mY+M9wa9pJ44A45CTG8kEK9NmKhUun TnqGuszZAz5JFrIs4vujzVXMKF18jzSXnhSE649HOjBZrJvy21s098EIm6u6lirp 5w3EKu5ZzjhHZraJHqr0v+kZlrnXh7rtmh0CAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQLHy3izgpXithz07q9eyjqQNY5oTAfBgNVHSMEGDAWgBQ/zldBpIE5RT1x8pPQ ++bcgSakITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNTkvUDg1WFFhU0JPVVU5Y2ZLVDBQdm0zSUVtcENFLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvUDg1WFFhU0JPVVU5Y2ZLVDBQdm0z SUVtcENFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDU5L1A4NVhRYVNCT1VVOWNmS1QwUHZtM0lFbXBDRS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/LZUqH0zOFas6wKG0KchpINkeitKHolljPDz5Z/zvblvvW8hXVeHR lPFoqlcVG0Ipg/GueeW2zXhe6lXla168tovUnb55E0ac/KwViV20Q5mWAKxRFI+K Bl7O62akeJDpxQ5rETKZXCU3d1oZOwYCT0Gpk8EZq9ia8eg7QLUu/d/LBhPOPLlK qBkzxRHJiAuEpkbUmK0CDwcNq62vR7oWcVR4xZFkNZt3R++cxZTm/kaOYqeheYB1 QA2zAmA2xjpJ25Nm4+rYkqHtjmUVey7O/zCOR+jPYsrEzqEXYM938GS0Y2JO7/k2 HO74y1s7O6qO3FDJ0O9UgDxZLseCA7a0 -----END CERTIFICATE-----Generated at Sat Apr 5 17:19:43 2025 by rpki-client