$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft File: VHLEB0jNqem8COrkJcaCYX6S5KI.mft (raw, json) Hash identifier: sG9fxTzVfO3Rm0Rq/TXfUV2uCxfbtq24Se+FHNqmKMA= Subject key identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Certificate serial: 53 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft Manifest number: 0AC3 Signing time: Mon 21 Jul 2025 11:43:45 +0000 Manifest this update: Mon 21 Jul 2025 11:43:45 +0000 Manifest next update: Tue 05 Aug 2025 11:43:45 +0000 Files and hashes: 1: PZgSZK55zfwWeIr-B-GxnlKGlR8.roa (hash: aRGTgN2wyQndmc1R1mv3te/V80Qm+XfZ2sFH6XKNBOE=) 2: VHLEB0jNqem8COrkJcaCYX6S5KI.crl (hash: aWfSkL9EXcel6zNaxTR2jx5n+XQDMBt3i9LZNUMYNlM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 11:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2 Validity Not Before: Jul 15 01:38:56 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=898E70014FCE9DCF4DEDEE57130DB5B9715D969F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:c8:b6:67:eb:d1:22:51:67:82:5e:9b:0c: 68:c9:0f:c2:d7:45:c8:46:a6:c4:64:4c:4d:a8:0e: 07:3e:91:42:e0:da:4b:dd:1d:98:e0:e6:85:42:81: 92:76:b2:4a:33:65:b0:e6:70:af:64:e4:65:0b:5a: 87:84:a7:56:72:38:04:ec:bc:cb:dc:bb:da:e6:61: c6:5f:1f:d5:e2:be:69:7c:fc:fc:3f:0b:eb:ca:6e: 01:1a:2b:3a:05:80:a4:3a:26:81:c1:7f:cc:0b:f1: 2b:c9:be:c8:8f:45:3d:aa:87:66:b2:c5:64:64:22: e2:6f:f7:d3:77:b5:9d:2d:3c:97:56:68:4f:a7:f2: 2b:31:b2:1d:e2:c9:30:1e:8a:ef:9b:dd:32:a7:71: e7:8a:51:80:bf:fa:e2:a2:18:43:83:5d:0d:a5:39: e1:92:0e:27:26:65:b7:7c:05:80:c1:c9:db:0d:2e: e5:a1:ca:f8:f3:a3:c8:11:0f:00:12:49:f1:b8:36: 07:4b:fd:11:05:aa:fc:82:30:3f:db:15:d5:00:f0: b5:8f:38:c0:a2:59:63:45:78:5b:9f:8d:2e:99:b9: a0:18:17:e8:b9:56:02:4e:56:da:4b:ea:66:1b:09: ba:aa:4d:0c:4c:79:f9:4f:0c:0f:ba:a8:dd:82:77: d0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8E:70:01:4F:CE:9D:CF:4D:ED:EE:57:13:0D:B5:B9:71:5D:96:9F X509v3 Authority Key Identifier: keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d6:21:5f:e8:15:64:f2:32:fe:4d:fa:57:2c:13:e8:7a:52: a5:20:0f:43:4d:1e:db:a1:4f:86:b2:f3:dd:82:30:e1:0d:fe: 3d:a5:da:5b:bd:58:48:1b:9c:61:32:c8:92:f5:e0:05:89:4f: 0a:cb:61:9e:95:a1:bb:73:b2:e2:63:ed:72:d8:8d:9a:87:af: 23:8e:7e:40:e2:be:75:5b:4a:f6:24:e3:0e:5c:7f:aa:96:74: 63:c3:4d:c5:ee:7b:76:14:5f:7d:59:ba:11:59:8f:6a:4c:fb: 8d:fb:ce:06:15:29:17:40:42:ee:6d:4e:dd:33:59:90:7f:15: a0:f0:14:0e:ea:46:92:32:c0:c1:af:df:66:c9:c9:1f:29:64: 60:c7:db:34:a6:a0:e2:fa:ee:37:b3:91:fe:0b:24:2c:06:71: b8:e6:5a:0b:ce:91:ae:90:ef:44:3e:1a:46:54:f3:e7:79:60: f2:f8:80:fa:da:af:ba:b2:6c:8f:b8:af:03:da:02:ec:b0:aa: 1d:46:71:83:a8:75:a0:22:a7:7d:97:90:66:1a:e0:66:27:c7: d6:b6:dc:fa:f1:7e:f3:83:c0:88:d1:12:53:e2:5d:ef:11:13: c1:c5:66:28:07:6d:ed:8c:65:9c:37:6b:af:ef:d4:33:0d:42: 40:4a:d2:59 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NDcy QzQwNzQ4Q0RBOUU5QkMwOEVBRTQyNUM2ODI2MTdFOTJFNEEyMB4XDTI1MDcxNTAx Mzg1NloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoODk4RTcwMDE0RkNFOURD RjRERURFRTU3MTMwREI1Qjk3MTVEOTY5RjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBANzzyLZn69EiUWeCXpsMaMkPwtdFyEamxGRMTagOBz6RQuDaS90d mODmhUKBknaySjNlsOZwr2TkZQtah4SnVnI4BOy8y9y72uZhxl8f1eK+aXz8/D8L 68puARorOgWApDomgcF/zAvxK8m+yI9FPaqHZrLFZGQi4m/303e1nS08l1ZoT6fy KzGyHeLJMB6K75vdMqdx54pRgL/64qIYQ4NdDaU54ZIOJyZlt3wFgMHJ2w0u5aHK +POjyBEPABJJ8bg2B0v9EQWq/IIwP9sV1QDwtY84wKJZY0V4W5+NLpm5oBgX6LlW Ak5W2kvqZhsJuqpNDEx5+U8MD7qo3YJ30EMCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBSJjnABT86dz03t7lcTDbW5cV2WnzAfBgNVHSMEGDAWgBRUcsQHSM2p6bwI6uQl xoJhfpLkojAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzMjEvVkhMRUIwak5xZW04Q09ya0pjYUNZWDZTNUtJLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvVkhMRUIwak5xZW04Q09ya0pjYUNZ WDZTNUtJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzIxL1ZITEVCMGpOcWVtOENPcmtKY2FDWVg2UzVLSS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCL1iFf6BVk8jL+TfpXLBPoelKlIA9DTR7boU+GsvPdgjDhDf49pdpb vVhIG5xhMsiS9eAFiU8Ky2GelaG7c7LiY+1y2I2ah68jjn5A4r51W0r2JOMOXH+q lnRjw03F7nt2FF99WboRWY9qTPuN+84GFSkXQELubU7dM1mQfxWg8BQO6kaSMsDB r99myckfKWRgx9s0pqDi+u43s5H+CyQsBnG45loLzpGukO9EPhpGVPPneWDy+ID6 2q+6smyPuK8D2gLssKodRnGDqHWgIqd9l5BmGuBmJ8fWttz68X7zg8CI0RJT4l3v ERPBxWYoB23tjGWcN2uv79QzDUJAStJZ -----END CERTIFICATE-----Generated at Mon Jul 21 12:45:19 2025 by rpki-client