$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft File: guWyiiD0xqYqRhL2xd-3o9ZNneo.mft (raw, json) Hash identifier: s4pIptznwsEkJ/EICZlS6xkRY8a7urk4wJWf4Xd0NJM= Subject key identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA Certificate issuer: /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Certificate serial: 47 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft Manifest number: 06AA Signing time: Mon 21 Jul 2025 11:31:55 +0000 Manifest this update: Mon 21 Jul 2025 11:31:55 +0000 Manifest next update: Tue 05 Aug 2025 11:31:55 +0000 Files and hashes: 1: 2BNI2Wb5Mkw6-2A40fyC1nR5hj4.roa (hash: acnVgy0vikcd1cp4i6J4K3HcFRFGyzbTlBp2CCSW2qo=) 2: 8l1yGgbRhKXc8YLiWlBjYORgxVU.roa (hash: qo5+ZUNixdUnwoBN/DfIP2IGq/vCAAu4h6AVZu6qphg=) 3: HCP2hiVnh9cn0htU3pNTk0PR9F4.roa (hash: Ngqy3zLR0l6n06ujxAmNymBAyPzNXncUZttp6wwqWAA=) 4: Yp-AHdFoYHq_JJTGdhfkBATIvsE.roa (hash: PxD1BrxRHg/HUChYt23RB03R+3bE6IDwHh58mzI2cq4=) 5: e0djzTgeveHHSdjiRHdUJRsjwD0.roa (hash: EV33+66eBe27B/FJAHNynuFdhThDBK4/5SaVcn5RsY4=) 6: guWyiiD0xqYqRhL2xd-3o9ZNneo.crl (hash: QQQMuKynTgu2iKNH7HeLOayn9lYLkrEL3Q1sOOa2DJE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 11:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA Validity Not Before: Jul 15 01:32:35 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=386B8CA4A5FDB1EE07A124DDEC82A3B3007FF350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:58:3a:1c:75:36:98:50:2e:a7:58:ad:9d: 64:60:e1:10:97:ed:fc:94:b1:4d:69:ba:67:0e:8a: 56:e6:38:64:76:b1:43:84:bd:3d:e5:bf:12:59:a1: 68:b1:11:92:cc:82:9d:b9:fd:76:f9:5c:15:39:a5: c1:42:5e:03:25:66:6f:bd:91:3a:34:4c:46:e5:77: 5f:6d:d1:97:74:5a:50:1b:2c:db:74:1f:e0:f7:76: 15:68:a7:b8:a6:46:bd:e5:91:0c:0f:70:38:53:fc: f7:09:4a:37:98:d7:e4:f6:79:42:02:b7:4f:d7:16: 28:f3:f0:ee:43:fd:81:4b:05:6b:5a:82:91:02:42: 01:25:ea:a6:ad:a7:df:19:10:9e:6a:ed:f8:5d:77: 72:f2:17:20:56:45:4d:d2:5c:eb:cd:7a:ed:22:eb: 4d:dc:4f:d4:98:b1:bc:61:b9:91:86:6c:47:58:6c: aa:f1:ce:bf:66:c1:5b:fd:79:06:8e:a6:07:d9:71: 2c:e7:c5:b6:ec:d6:72:fd:d5:87:c7:2b:da:3c:3c: 97:43:1c:00:52:bb:e2:16:6b:ea:9f:4c:46:6a:4f: bf:26:f9:33:25:b4:85:05:77:51:a0:d2:df:83:5b: d9:8b:58:d6:c7:b2:9a:23:15:75:19:a1:bd:bb:85: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6B:8C:A4:A5:FD:B1:EE:07:A1:24:DD:EC:82:A3:B3:00:7F:F3:50 X509v3 Authority Key Identifier: keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:da:b5:1f:db:36:ec:2e:10:c7:fd:92:5e:2f:16:d0:3b:85: 36:aa:cf:07:7e:33:bd:61:31:37:a7:ca:0b:ae:25:63:b9:b2: 5a:22:0d:61:fb:f3:f1:f1:bd:86:fa:29:f0:88:85:83:b5:c9: d6:e3:32:97:8d:14:51:06:db:ce:7f:77:1f:3d:60:b8:96:68: 92:6d:25:76:bf:62:85:0c:69:97:d6:dc:71:a6:7e:f4:57:79: 69:94:0b:dd:c0:f0:ce:3c:7c:3d:37:20:f8:b2:64:53:31:66: 48:af:4e:30:bd:4f:c8:22:88:30:93:7a:a9:07:42:2c:16:28: 2b:01:80:fb:b5:24:27:20:8f:11:db:ae:a8:ff:49:ad:b9:b9: b5:db:22:be:64:56:2d:e5:b1:74:b7:8a:6e:24:9d:4b:98:bf: 7f:11:9b:54:88:93:cb:2d:25:80:f4:ca:b0:56:8a:04:00:9b: 62:7e:3e:d9:90:85:8f:55:c7:96:15:c3:09:ee:65:10:49:ee: d1:1d:ce:aa:e8:5d:ab:9b:63:45:98:c8:ae:d4:76:cb:cf:b7: 34:fc:85:1e:5e:5a:cf:57:f6:ba:e1:c4:c2:a6:db:d6:82:35: 93:6d:8d:41:a5:cd:60:76:75:b4:b9:ae:75:e9:f6:80:e2:ee: 85:ab:87:fc -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MkU1 QjI4QTIwRjRDNkE2MkE0NjEyRjZDNURGQjdBM0Q2NEQ5REVBMB4XDTI1MDcxNTAx MzIzNVoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoMzg2QjhDQTRBNUZEQjFF RTA3QTEyNERERUM4MkEzQjMwMDdGRjM1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAL27WDocdTaYUC6nWK2dZGDhEJft/JSxTWm6Zw6KVuY4ZHaxQ4S9 PeW/ElmhaLERksyCnbn9dvlcFTmlwUJeAyVmb72ROjRMRuV3X23Rl3RaUBss23Qf 4Pd2FWinuKZGveWRDA9wOFP89wlKN5jX5PZ5QgK3T9cWKPPw7kP9gUsFa1qCkQJC ASXqpq2n3xkQnmrt+F13cvIXIFZFTdJc68167SLrTdxP1JixvGG5kYZsR1hsqvHO v2bBW/15Bo6mB9lxLOfFtuzWcv3Vh8cr2jw8l0McAFK74hZr6p9MRmpPvyb5MyW0 hQV3UaDS34Nb2YtY1seymiMVdRmhvbuFlOkCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQ4a4ykpf2x7gehJN3sgqOzAH/zUDAfBgNVHSMEGDAWgBSC5bKKIPTGpipGEvbF 37ej1k2d6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAzNjcvZ3VXeWlpRDB4cVlxUmhMMnhkLTNvOVpObmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZ3VXeWlpRDB4cVlxUmhMMnhkLTNv OVpObmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMzY3L2d1V3lpaUQweHFZcVJoTDJ4ZC0zbzlaTm5lby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH2rUf2zbsLhDH/ZJeLxbQO4U2qs8HfjO9YTE3p8oLriVjubJaIg1h +/Px8b2G+inwiIWDtcnW4zKXjRRRBtvOf3cfPWC4lmiSbSV2v2KFDGmX1txxpn70 V3lplAvdwPDOPHw9NyD4smRTMWZIr04wvU/IIogwk3qpB0IsFigrAYD7tSQnII8R 266o/0mtubm12yK+ZFYt5bF0t4puJJ1LmL9/EZtUiJPLLSWA9MqwVooEAJtifj7Z kIWPVceWFcMJ7mUQSe7RHc6q6F2rm2NFmMiu1HbLz7c0/IUeXlrPV/a64cTCptvW gjWTbY1Bpc1gdnW0ua516faA4u6Fq4f8 -----END CERTIFICATE-----Generated at Mon Jul 21 12:47:01 2025 by rpki-client