$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft File: KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft (raw, json) Hash identifier: Ul2UqP8nGZPFUbTRFIjFlO703PURQIm5yW5iCA7At0E= Subject key identifier: F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96 Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4 Certificate serial: 84 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft Manifest number: 0EB2 Signing time: Mon 21 Jul 2025 11:14:54 +0000 Manifest this update: Mon 21 Jul 2025 11:14:54 +0000 Manifest next update: Tue 05 Aug 2025 11:14:54 +0000 Files and hashes: 1: KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl (hash: jBIqsWXU//JGn9cfC8nRib9qj+w5cwJaxYFF/0EjnyA=) 2: P8rTet0Yl5aAdhQXIvdfTEbAS00.roa (hash: qYyC7BEh5ztU3VOjXn8NSp0KXJm2NHYlzd/WGz2Ibc4=) 3: W7-jB7TlCHzYPXEvluRvHW3c-YM.roa (hash: zkpvWqt1+x7ZRaML9Dc0qHmfSJDPd30rHUm0Lk5DXcE=) 4: ccMndzJgtkTXfhMpOCs75U7IW90.roa (hash: yTJL/Uncs0Sbvbafe1cZL24s4eAxvGIlhtovgco/dzE=) 5: e9gLAol1q7kBhLRQioZiBJYa_Pg.roa (hash: VAiYbbVv/xkOEytt8h70yV2oPrETc6G1Wd2eM1smgZE=) 6: shcaRon1lwsJwBq4yOSy_I_7STg.roa (hash: BXY9dnOfYqiD7KG7KmpneYkhzR4OrPK0MeJf2q5BN0A=) 7: t4vV_cGkrftHf6-FUIhxZQTw4sc.roa (hash: gzOlpDUgx3CAbdmvmj2ZeixVEjWckDZ68shVKUgW1l8=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 12:44:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4 Validity Not Before: Jul 15 01:39:15 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=F9AC90D3EEBB839F20C652E482F6A1B5B11D9296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:9c:e1:19:64:37:4c:1f:f0:7f:ef:10:dc: 0b:54:fb:cf:76:2c:da:5b:9f:2e:22:1b:24:09:4c: fa:cc:f4:1e:78:d2:76:43:b1:a8:cc:a7:58:f6:86: 22:48:39:e2:48:2d:fb:7f:cd:7d:a9:45:31:7b:b3: e2:17:d6:63:c6:59:04:ec:33:df:e3:7d:d2:4f:3e: e7:df:15:67:e1:df:1c:95:2f:a7:09:19:15:6c:68: 72:6e:22:a6:c2:95:74:eb:af:f8:c0:b5:86:58:95: bc:4d:47:9e:36:bd:e7:15:59:f4:9a:b6:71:05:33: f6:42:82:2c:3a:83:c4:d2:de:79:46:ef:4e:f0:cf: 73:40:fc:57:4c:fd:42:74:33:1a:a9:12:cb:1e:62: 22:19:bc:38:ff:a0:d7:1b:f8:fd:bf:70:52:f4:33: 06:79:52:e1:91:0a:fa:33:6b:a9:8a:78:af:bc:f4: c1:31:81:79:5b:32:7d:ae:b8:ec:84:5b:e8:8c:20: 99:cf:4c:04:f1:d6:0d:e3:f3:9d:54:9f:41:f4:51: 13:2a:0f:77:f3:07:f4:ad:7c:55:48:04:91:39:46: 79:37:d8:d2:52:8a:d0:01:58:b5:89:54:03:12:5d: 5b:d4:77:89:d4:9f:46:82:91:99:f2:db:5c:c1:6b: 8a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:AC:90:D3:EE:BB:83:9F:20:C6:52:E4:82:F6:A1:B5:B1:1D:92:96 X509v3 Authority Key Identifier: keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:44:84:ae:2f:1a:32:74:2e:6b:54:ea:c7:03:45:3e:01:64: 98:a6:03:3b:8a:64:c1:86:0c:8a:74:cc:a2:43:2f:46:8a:e1: 03:0b:9a:2e:48:35:8a:a2:50:11:15:bb:5f:b5:ff:00:f4:31: cd:ab:66:62:18:84:b8:4a:e7:34:05:0b:da:7b:c4:9d:b0:25: c6:52:65:cf:99:22:42:9f:61:9a:9f:ea:03:dc:e4:1b:ad:9b: fc:46:fe:da:90:e8:36:62:3f:32:6f:e7:9b:9e:d9:9d:cf:f6: 8c:53:5d:8a:b4:61:d5:c1:95:20:65:b2:4f:58:87:87:cc:33: 9d:ff:c6:33:c7:6f:47:59:fc:03:53:71:35:5f:13:d3:73:3b: 02:11:23:e2:04:95:bc:5f:8b:eb:d4:81:ea:3a:48:a3:68:f1: 8b:55:83:28:59:62:06:df:89:24:ee:1b:43:e3:d9:5f:9a:79: 40:e1:b0:59:62:e4:e7:7d:c0:55:50:2d:de:0d:be:37:a6:eb: b7:29:23:29:9f:4b:17:b4:c4:dd:55:70:ee:96:be:c6:66:5e: bd:6d:00:a0:39:2a:22:ee:7b:69:2b:0f:b6:c2:af:f5:30:1f: 66:b6:45:82:80:f6:cf:25:dc:6b:87:64:91:7b:5c:22:3c:21: 2b:80:9c:a5 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk2 OTY2REQ3MjBDMzA1NzVGNjJEOEZENDE0OTQ1OEE5MEFBQ0FBNDAeFw0yNTA3MTUw MTM5MTVaFw0yNjA3MTUwMTMwMDFaMDMxMTAvBgNVBAMTKEY5QUM5MEQzRUVCQjgz OUYyMEM2NTJFNDgyRjZBMUI1QjExRDkyOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDKcZzhGWQ3TB/wf+8Q3AtU+892LNpbny4iGyQJTPrM9B540nZD sajMp1j2hiJIOeJILft/zX2pRTF7s+IX1mPGWQTsM9/jfdJPPuffFWfh3xyVL6cJ GRVsaHJuIqbClXTrr/jAtYZYlbxNR542vecVWfSatnEFM/ZCgiw6g8TS3nlG707w z3NA/FdM/UJ0MxqpEsseYiIZvDj/oNcb+P2/cFL0MwZ5UuGRCvoza6mKeK+89MEx gXlbMn2uuOyEW+iMIJnPTATx1g3j851Un0H0URMqD3fzB/StfFVIBJE5Rnk32NJS itABWLWJVAMSXVvUd4nUn0aCkZny21zBa4plAgMBAAGjggI5MIICNTAdBgNVHQ4E FgQU+ayQ0+67g58gxlLkgvahtbEdkpYwHwYDVR0jBBgwFoAUKWlm3XIMMFdfYtj9 QUlFipCqyqQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzYvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENxeXFRLmNybDBtBggrBgEF BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENx eXFRLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx QTczODEwMDAwLzYvS1dsbTNYSU1NRmRmWXRqOVFVbEZpcENxeXFRLm1mdDBGBggr BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv YXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQADggEB AJZEhK4vGjJ0LmtU6scDRT4BZJimAzuKZMGGDIp0zKJDL0aK4QMLmi5INYqiUBEV u1+1/wD0Mc2rZmIYhLhK5zQFC9p7xJ2wJcZSZc+ZIkKfYZqf6gPc5Butm/xG/tqQ 6DZiPzJv55ue2Z3P9oxTXYq0YdXBlSBlsk9Yh4fMM53/xjPHb0dZ/ANTcTVfE9Nz OwIRI+IElbxfi+vUgeo6SKNo8YtVgyhZYgbfiSTuG0Pj2V+aeUDhsFli5Od9wFVQ Ld4Nvjem67cpIymfSxe0xN1VcO6WvsZmXr1tAKA5KiLue2krD7bCr/UwH2a2RYKA 9s8l3GuHZJF7XCI8ISuAnKU= -----END CERTIFICATE-----Generated at Mon Jul 21 13:28:53 2025 by rpki-client