$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft File: 7hOsz353sCkq4XsFNAIRyPlxdgs.mft (raw, json) Hash identifier: MhBOacfsxEIYgTzcNJrdr8aDgYMGQUxHf1vNdMJOjTk= Subject key identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Certificate serial: 3A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft Manifest number: 03EA Signing time: Sat 05 Apr 2025 13:30:28 +0000 Manifest this update: Sat 05 Apr 2025 13:30:28 +0000 Manifest next update: Sun 20 Apr 2025 13:30:28 +0000 Files and hashes: 1: 1SJbYUd8p8oMen6RPa00IOWV9mE.roa (hash: UDpcHQ+0Abc5mWmR8ULJBoE8aKN+3NO2e+ukT6tgxHE=) 2: 2tfCUV_uz9A4cuYQPukBhWSb95s.roa (hash: rLb9OLvnUAWM0boRqUkiI5TRFDZgMEpErnM1W8cSidY=) 3: 7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa (hash: 3LyiamrnzDGpP8Svs8FK2CISDqoO7UiQPpQOYaoqlPA=) 4: 7hOsz353sCkq4XsFNAIRyPlxdgs.crl (hash: wiIXroywIHzJ/Ry9FED5LUtVLNt1mRF0Y4AbVdHxvtU=) 5: 85Nf2Qq391Vv7HxJ-kHXZY1pjc0.roa (hash: 9QoDjSKM9fHDfVtU1sq5tzZVzvHN7kh4uN+rudSmHfg=) 6: BkA8wyb8wW-wUM7VW6oPScpAa3c.roa (hash: SWTK7ZnqM8yHvUMKBTyOUXDewy5cp5fXqoSaN/6NwFw=) 7: HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (hash: 3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=) 8: PlXujQnIvaBVcgfdZUzMCXjJkDo.roa (hash: aCxl5jvQ7JXLWmmFHmSbXTq8loJZ9FyWSuvvPH4W5oM=) 9: pdXpMRQzmzHKpbd5WN1-fHvtxX4.roa (hash: iFw35uTbq7FkqOf44/VRS8oi7idiiwS4oRODoDjRvoU=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B Validity Not Before: Mar 15 01:30:56 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=A1572E6059AA59060E81A795850DA2F007C13AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:29:3b:f4:8c:d7:04:25:47:ed:0d:44:65:3e: 85:54:48:9a:0e:b7:4c:3c:5a:2e:3b:7b:2d:aa:bf: b8:24:01:16:7e:7b:75:fa:9a:36:6d:5e:47:84:d7: 45:a2:e2:60:14:20:1a:2c:0b:a7:77:03:08:b3:b9: fc:32:03:26:23:2e:dd:e3:e8:ed:f9:cf:f0:9f:ff: f2:7d:d0:e8:57:ba:bc:03:05:d4:7c:af:c1:32:ed: fb:b2:cf:01:f1:39:58:ab:aa:6d:df:4d:56:79:89: af:7a:37:44:b4:7c:78:1e:30:66:75:d3:ce:73:fe: 13:2f:b0:3a:0f:e2:28:aa:14:f8:97:66:78:cc:2f: 56:89:6b:58:f8:15:24:c7:f1:2f:df:11:37:a3:ac: 80:48:1d:b8:a4:4d:fb:ff:cc:27:34:1f:c4:b2:ef: 2c:e5:63:b4:ed:30:5e:ac:0b:8a:38:c9:c8:ac:22: eb:b2:43:a4:18:7d:a5:cf:96:37:e4:b3:57:54:85: a3:98:e7:04:a4:13:69:74:8b:24:29:4b:fa:29:f3: c0:1f:98:6c:07:96:cc:90:d4:35:14:aa:f2:f1:d9: 38:07:d3:1f:4e:57:b2:1a:46:c8:ad:3e:ae:88:8d: f9:36:88:85:1c:ab:c6:0e:3d:7f:f6:f4:ef:87:4f: 38:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:57:2E:60:59:AA:59:06:0E:81:A7:95:85:0D:A2:F0:07:C1:3A:A4 X509v3 Authority Key Identifier: keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:7a:66:5b:cc:73:ad:79:12:e2:4f:fd:3f:97:18:22:85:db: 04:83:c6:8d:18:3b:80:44:48:d7:92:5b:4b:ab:a7:cc:ad:22: f6:78:21:53:bb:23:8e:7c:e5:30:a7:79:bc:21:8f:51:68:93: 4d:23:b8:64:a5:5b:38:05:c2:c2:5a:4a:32:34:b4:4e:06:00: de:34:e9:5f:08:e8:74:22:a8:99:6a:16:05:a2:87:58:74:af: 87:18:e3:c6:36:f2:f5:3a:7a:c8:83:e5:de:09:35:03:71:10: ca:4a:3b:76:b8:a0:11:dd:c7:f6:75:61:57:9c:f5:bb:a8:d3: 3d:42:4b:93:bf:6f:40:83:33:f7:9d:01:bf:75:87:5a:bc:01: ba:cc:45:0d:3a:39:c4:01:6a:66:17:fc:eb:d7:9a:57:fb:7e: 3c:69:fd:73:74:04:a4:7f:20:b3:bf:75:66:60:b3:54:93:5b: 22:46:32:ee:c0:1d:a8:03:ff:8f:41:0f:79:2a:fa:18:2f:07: 94:29:e6:35:28:55:f7:dc:2e:f7:0a:90:76:b0:3c:ac:43:21: 29:92:cc:40:12:f2:57:c5:c3:06:d4:7b:60:ff:65:c5:63:5f: 49:c2:07:3c:fb:8c:01:9b:39:3a:21:0c:82:b4:ee:81:60:85: 95:28:9e:b9 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI1MDMxNTAx MzA1NloXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoQTE1NzJFNjA1OUFBNTkw NjBFODFBNzk1ODUwREEyRjAwN0MxM0FBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAK4pO/SM1wQlR+0NRGU+hVRImg63TDxaLjt7Laq/uCQBFn57dfqa Nm1eR4TXRaLiYBQgGiwLp3cDCLO5/DIDJiMu3ePo7fnP8J//8n3Q6Fe6vAMF1Hyv wTLt+7LPAfE5WKuqbd9NVnmJr3o3RLR8eB4wZnXTznP+Ey+wOg/iKKoU+JdmeMwv VolrWPgVJMfxL98RN6OsgEgduKRN+//MJzQfxLLvLOVjtO0wXqwLijjJyKwi67JD pBh9pc+WN+SzV1SFo5jnBKQTaXSLJClL+inzwB+YbAeWzJDUNRSq8vHZOAfTH05X shpGyK0+roiN+TaIhRyrxg49f/b074dPOK0CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBShVy5gWapZBg6Bp5WFDaLwB8E6pDAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0 AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC81MjQvN2hPc3ozNTNzQ2txNFhzRk5BSVJ5UGx4ZGdzLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAHV6ZlvMc615EuJP/T+XGCKF2wSDxo0YO4BESNeSW0urp8ytIvZ4IVO7I458 5TCnebwhj1Fok00juGSlWzgFwsJaSjI0tE4GAN406V8I6HQiqJlqFgWih1h0r4cY 48Y28vU6esiD5d4JNQNxEMpKO3a4oBHdx/Z1YVec9buo0z1CS5O/b0CDM/edAb91 h1q8AbrMRQ06OcQBamYX/OvXmlf7fjxp/XN0BKR/ILO/dWZgs1STWyJGMu7AHagD /49BD3kq+hgvB5Qp5jUoVffcLvcKkHawPKxDISmSzEAS8lfFwwbUe2D/ZcVjX0nC Bzz7jAGbOTohDIK07oFghZUonrk= -----END CERTIFICATE-----Generated at Sat Apr 5 17:30:46 2025 by rpki-client