$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft File: _AsDcmR6JE0QuNgkrgtQd21kZeo.mft (raw, json) Hash identifier: ZpUCIAytXvXomCTc2PyMfwiUJkPKCetgrRj1yYT9P6Y= Subject key identifier: 33:3D:CA:C2:A5:A0:36:CA:17:3E:E5:39:6A:25:6B:CD:C8:79:4B:0B Authority key identifier: FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA Certificate issuer: /CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Certificate serial: 0E Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft Manifest number: 05BB Signing time: Mon 21 Jul 2025 11:59:59 +0000 Manifest this update: Mon 21 Jul 2025 11:59:59 +0000 Manifest next update: Tue 05 Aug 2025 11:59:59 +0000 Files and hashes: 1: _AsDcmR6JE0QuNgkrgtQd21kZeo.crl (hash: QUDkGikRUW1MbRZkPATWom4D0Ir5Sj3hwU3a+rUIABs=) 2: y0l3vFrsPgNN9ZsqFGEzPr65lxU.roa (hash: jMDF/N1RbFU6eZIF3hb5Mi8G2lBm7OKGGPyaEOL/rGE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 11:52:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FC0B0372647A244D10B8D824AE0B50776D6465EA Validity Not Before: Jul 15 01:34:35 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=333DCAC2A5A036CA173EE5396A256BCDC8794B0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:59:8f:2a:4e:8e:19:cb:d4:3f:1d:a8:07: 85:7d:a4:74:41:35:1d:5e:71:4d:a4:7d:9a:f4:44: c8:d7:5e:ff:2b:27:60:47:1c:38:d9:6c:55:c2:de: d0:6f:47:de:9d:5d:3d:4a:ff:d3:c1:ba:6a:b1:93: 07:ee:f6:51:c4:75:54:56:d0:df:e6:a6:ec:27:f9: d7:49:2f:45:4c:04:08:40:46:d8:89:57:f2:8d:28: 03:2d:a5:f2:7b:7d:b3:18:00:f5:65:b6:57:4e:8d: dd:5e:cb:9c:12:65:48:32:32:ef:53:01:17:44:c8: ba:34:ee:c3:80:b2:c3:c3:6e:d5:fd:27:c8:68:8c: a4:94:c4:6b:80:b0:7e:19:78:96:c4:cf:3d:de:3d: 5e:e0:c2:0b:a4:a2:43:29:ef:87:56:27:37:2f:0a: 0e:a1:1c:c9:d6:19:35:4e:2a:4d:89:90:a8:89:12: 7b:14:87:f2:e0:84:dc:cf:0c:18:75:37:04:67:d4: 32:a3:d9:4a:dd:5d:9a:35:9c:ab:42:3b:e2:bb:91: 8a:c0:be:29:19:d3:3f:aa:79:8e:36:fb:21:f5:bb: 4c:80:97:1f:74:7c:e6:82:30:c6:7b:2e:89:f7:30: d2:9f:29:48:74:b7:51:a2:48:a9:1e:34:24:fc:b0: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3D:CA:C2:A5:A0:36:CA:17:3E:E5:39:6A:25:6B:CD:C8:79:4B:0B X509v3 Authority Key Identifier: keyid:FC:0B:03:72:64:7A:24:4D:10:B8:D8:24:AE:0B:50:77:6D:64:65:EA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_AsDcmR6JE0QuNgkrgtQd21kZeo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30442/_AsDcmR6JE0QuNgkrgtQd21kZeo.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:fd:b9:de:b4:99:d6:1c:db:09:0d:ec:ed:66:da:a5:ee:64: cb:86:18:77:4c:c5:48:29:e2:4d:b2:d0:75:54:13:f4:7a:de: 9e:98:cc:86:39:4d:65:12:32:cb:59:90:71:7d:21:c9:44:95: 63:27:a6:c5:3e:3c:ed:b1:04:cf:a9:6b:48:a8:9f:44:75:24: ff:37:68:1e:15:65:aa:bb:2b:51:36:84:cf:a9:b3:22:d2:14: 33:58:28:f9:92:82:88:fb:05:f1:43:67:ec:41:d3:e7:6c:8f: 96:88:19:9f:b6:cc:11:c8:e9:22:88:c2:29:d0:cb:e1:ab:57: 6c:b3:e6:3e:09:ca:77:7d:cd:cd:ef:4a:63:1b:b6:b6:53:e3: 16:a2:9a:ac:f6:90:e0:f7:e8:54:f5:2a:76:57:4b:4d:08:b8: dd:d2:4b:89:41:bf:29:a9:71:e3:ca:e1:b5:f3:51:c0:0a:39: 2b:f4:12:d4:36:49:90:9c:17:22:40:6e:ca:ce:c1:4f:30:ae: 12:b6:c3:93:3a:9a:a5:62:05:40:67:f9:0a:07:9b:76:2a:57: 14:e6:e6:f6:65:2f:ae:02:c6:24:72:08:45:6f:67:fc:36:a1: 06:68:3f:cf:f9:dd:f6:37:c6:07:0a:19:3d:20:90:4a:40:1d: ba:aa:79:98 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzBC MDM3MjY0N0EyNDREMTBCOEQ4MjRBRTBCNTA3NzZENjQ2NUVBMB4XDTI1MDcxNTAx MzQzNVoXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoMzMzRENBQzJBNUEwMzZD QTE3M0VFNTM5NkEyNTZCQ0RDODc5NEIwQjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKYQWY8qTo4Zy9Q/HagHhX2kdEE1HV5xTaR9mvREyNde/ysnYEcc ONlsVcLe0G9H3p1dPUr/08G6arGTB+72UcR1VFbQ3+am7Cf510kvRUwECEBG2IlX 8o0oAy2l8nt9sxgA9WW2V06N3V7LnBJlSDIy71MBF0TIujTuw4Cyw8Nu1f0nyGiM pJTEa4Cwfhl4lsTPPd49XuDCC6SiQynvh1YnNy8KDqEcydYZNU4qTYmQqIkSexSH 8uCE3M8MGHU3BGfUMqPZSt1dmjWcq0I74ruRisC+KRnTP6p5jjb7IfW7TICXH3R8 5oIwxnsuifcw0p8pSHS3UaJIqR40JPywd6MCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQzPcrCpaA2yhc+5TlqJWvNyHlLCzAfBgNVHSMEGDAWgBT8CwNyZHokTRC42CSu C1B3bWRl6jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzA0NDIvX0FzRGNtUjZKRTBRdU5na3JndFFkMjFrWmVvLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0FzRGNtUjZKRTBRdU5na3JndFFk MjFrWmVvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwNDQyL19Bc0RjbVI2SkUwUXVOZ2tyZ3RRZDIxa1plby5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU/bnetJnWHNsJDeztZtql7mTLhhh3TMVIKeJNstB1VBP0et6emMyG OU1lEjLLWZBxfSHJRJVjJ6bFPjztsQTPqWtIqJ9EdST/N2geFWWquytRNoTPqbMi 0hQzWCj5koKI+wXxQ2fsQdPnbI+WiBmftswRyOkiiMIp0Mvhq1dss+Y+Ccp3fc3N 70pjG7a2U+MWopqs9pDg9+hU9Sp2V0tNCLjd0kuJQb8pqXHjyuG181HACjkr9BLU NkmQnBciQG7KzsFPMK4StsOTOpqlYgVAZ/kKB5t2KlcU5ub2ZS+uAsYkcghFb2f8 NqEGaD/P+d32N8YHChk9IJBKQB26qnmY -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:27 2025 by rpki-client