$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft File: xEEZOsVogvn9Y4tspfB4EcYfFuA.mft (raw, json) Hash identifier: QgZiDbhNikUpYaPAwcP+aO2h3AJAko30y8yGutdHEXk= Subject key identifier: 55:89:0F:86:D9:F9:6B:3E:4F:51:0C:ED:25:AB:43:BA:14:E1:2C:5F Authority key identifier: C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0 Certificate issuer: /CN=C441193AC56882F9FD638B6CA5F07811C61F16E0 Certificate serial: 29 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft Manifest number: 0663 Signing time: Mon 21 Jul 2025 12:32:18 +0000 Manifest this update: Mon 21 Jul 2025 12:32:18 +0000 Manifest next update: Tue 05 Aug 2025 12:32:18 +0000 Files and hashes: 1: r7umhPD94LHQiDyR4A-OTUL7EXE.roa (hash: 047wsKda4MH7l4C4p1EdfwsMpOnRXhj5dvF4llKUdok=) 2: xEEZOsVogvn9Y4tspfB4EcYfFuA.crl (hash: FzoymcDuxQdbgyc7FLKyJAQv5H8rk2sIY0UeFQQybTE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 12:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C441193AC56882F9FD638B6CA5F07811C61F16E0 Validity Not Before: Jul 15 01:41:38 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=55890F86D9F96B3E4F510CED25AB43BA14E12C5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:5d:55:d2:56:05:d9:c1:57:36:6f:04:72: 88:b1:56:9c:fa:33:2f:1f:62:b3:0f:36:7f:30:9e: 83:3b:15:f1:a0:86:59:4d:b9:1b:4e:45:a2:02:c1: 8b:2d:bb:2d:6d:4c:8a:d6:fb:22:61:04:69:e0:e2: 12:24:ad:d2:ee:02:ee:24:18:e3:14:4f:75:65:4e: f0:9a:c2:55:89:c3:c6:13:5f:9f:0c:b6:22:51:ed: 80:c9:35:9b:e1:29:1e:0d:d7:6f:cf:3d:c9:e3:60: 18:71:4f:34:f3:a6:ae:eb:88:d4:08:b9:96:dd:db: dc:54:70:d2:dd:86:49:2b:3b:68:6d:1b:3b:fd:48: eb:40:7b:d1:d7:6d:bf:5e:95:d4:44:e5:6d:a5:fe: b7:b5:02:85:fc:65:d2:37:16:20:c5:20:ee:25:8c: c5:48:52:b5:19:14:5e:04:0b:9c:39:7f:0e:61:4b: a4:85:6f:e7:57:22:b6:5e:c9:01:88:66:f0:78:fe: d3:c4:3e:3b:2e:57:8a:a9:db:6d:d2:42:8f:7c:ba: 29:ec:d1:e0:5e:09:82:56:a8:eb:23:41:37:04:48: 42:52:8a:67:1f:15:48:d8:2b:95:13:f2:25:6b:4b: 66:3b:10:9f:6b:d0:9e:30:de:8a:2b:55:81:0c:9d: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:89:0F:86:D9:F9:6B:3E:4F:51:0C:ED:25:AB:43:BA:14:E1:2C:5F X509v3 Authority Key Identifier: keyid:C4:41:19:3A:C5:68:82:F9:FD:63:8B:6C:A5:F0:78:11:C6:1F:16:E0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xEEZOsVogvn9Y4tspfB4EcYfFuA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30299/xEEZOsVogvn9Y4tspfB4EcYfFuA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:fc:ce:58:16:27:25:9e:9a:bc:29:b0:bb:a0:e9:d1:27:16: 31:33:2b:88:a3:14:23:74:27:dd:6a:96:10:b6:90:c8:1f:a6: 9b:a6:15:2d:bb:90:2e:96:4c:86:51:46:c1:d4:78:5f:48:d8: 00:7b:54:05:b0:bf:89:fc:a4:39:ac:ee:95:a0:1e:aa:b5:1f: 21:b4:27:99:61:e7:a1:01:a4:75:b5:52:be:82:fe:a8:ca:25: b2:11:32:d2:f6:89:da:87:25:4b:fb:e9:e2:42:31:e2:35:74: aa:bc:17:67:eb:11:f7:8e:7a:2b:b3:cb:9a:89:c1:11:aa:a0: e7:c4:4d:73:5c:0d:6c:2e:dd:1f:f8:01:7b:36:85:c7:32:65: 1b:3c:b3:52:b4:2c:00:a7:78:43:5e:4e:cc:e4:25:ed:ec:a0: 89:82:9d:b2:66:b6:b7:1f:18:19:51:ed:81:46:23:97:df:e0: d8:60:b3:a4:14:a3:2f:9e:d4:7d:b6:39:16:14:b9:72:16:2a: ec:9d:40:fb:81:1a:9f:51:1a:b0:22:89:b6:6b:43:a2:93:31: 0c:71:b3:87:77:fc:2a:1d:d3:18:70:a0:64:88:19:44:1b:26: 01:4b:81:b3:b0:32:93:13:79:f6:fc:f8:d7:6e:b6:e1:81:11: 4c:7a:7d:fe -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDQx MTkzQUM1Njg4MkY5RkQ2MzhCNkNBNUYwNzgxMUM2MUYxNkUwMB4XDTI1MDcxNTAx NDEzOFoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoNTU4OTBGODZEOUY5NkIz RTRGNTEwQ0VEMjVBQjQzQkExNEUxMkM1RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANCSXVXSVgXZwVc2bwRyiLFWnPozLx9isw82fzCegzsV8aCGWU25 G05FogLBiy27LW1Mitb7ImEEaeDiEiSt0u4C7iQY4xRPdWVO8JrCVYnDxhNfnwy2 IlHtgMk1m+EpHg3Xb889yeNgGHFPNPOmruuI1Ai5lt3b3FRw0t2GSSs7aG0bO/1I 60B70ddtv16V1ETlbaX+t7UChfxl0jcWIMUg7iWMxUhStRkUXgQLnDl/DmFLpIVv 51citl7JAYhm8Hj+08Q+Oy5XiqnbbdJCj3y6KezR4F4Jglao6yNBNwRIQlKKZx8V SNgrlRPyJWtLZjsQn2vQnjDeiitVgQydszsCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBRViQ+G2flrPk9RDO0lq0O6FOEsXzAfBgNVHSMEGDAWgBTEQRk6xWiC+f1ji2yl 8HgRxh8W4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAyOTkveEVFWk9zVm9ndm45WTR0c3BmQjRFY1lmRnVBLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEVFWk9zVm9ndm45WTR0c3BmQjRF Y1lmRnVBLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMjk5L3hFRVpPc1ZvZ3ZuOVk0dHNwZkI0RWNZZkZ1QS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP/M5YFiclnpq8KbC7oOnRJxYxMyuIoxQjdCfdapYQtpDIH6abphUt u5AulkyGUUbB1HhfSNgAe1QFsL+J/KQ5rO6VoB6qtR8htCeZYeehAaR1tVK+gv6o yiWyETLS9onahyVL++niQjHiNXSqvBdn6xH3jnors8uaicERqqDnxE1zXA1sLt0f +AF7NoXHMmUbPLNStCwAp3hDXk7M5CXt7KCJgp2yZra3HxgZUe2BRiOX3+DYYLOk FKMvntR9tjkWFLlyFirsnUD7gRqfURqwIom2a0OikzEMcbOHd/wqHdMYcKBkiBlE GyYBS4GzsDKTE3n2/PjXbrbhgRFMen3+ -----END CERTIFICATE-----Generated at Mon Jul 21 13:46:14 2025 by rpki-client