$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft File: GTPePvlkUMoSDHel6oJkNN0UlUk.mft (raw, json) Hash identifier: hqLee4DjsZWDi0KBI7kn+dFa630VTJDGQqjgeedXbBg= Subject key identifier: FE:9B:FF:F3:75:8E:7A:F8:AE:E1:D7:61:DA:90:5D:04:F3:54:B2:59 Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49 Certificate issuer: /CN=1933DE3EF96450CA120C77A5EA826434DD149549 Certificate serial: 4D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft Manifest number: 0695 Signing time: Mon 21 Jul 2025 07:48:44 +0000 Manifest this update: Mon 21 Jul 2025 07:48:44 +0000 Manifest next update: Tue 05 Aug 2025 07:48:44 +0000 Files and hashes: 1: 6IFd0jowXubJRB3p2jcFfox_07s.roa (hash: Fl1km/KN+RaRmrUjm2mrJOSl4VgIP7pJoahS9D0ai0g=) 2: FmckM6DoBXobTN3OoWAJJOfkyWU.roa (hash: nUjeCuk8KZAoWx6Ezg2koczx4OuNtm3ulLO0PP/GBWY=) 3: GTPePvlkUMoSDHel6oJkNN0UlUk.crl (hash: iCu6uvNkFah84q8hYkTU2DRbUgk55LGmE1UKCiLx4Hw=) 4: fAcV3D9zZ9PPRvU-KFggdk11vlY.roa (hash: ks+hObg801++pSg/HvfkelEmU9gvXmMGQgzPhmxWbIQ=) 5: fzj2SAo08Y94Xi3rmJLD567jfAU.roa (hash: m9N5nM9U1Bh+1N4MWLySde7mookMkz/F+nW7D+AvY94=) 6: qgvt6_jIW4nWLTxZXMImM_clEpM.roa (hash: uILINXlx+qLd1IWn+jEXpzFGjfWXQWr7YFWsYhsVi7w=) 7: x4R9BN7zS6iOjQ-tGMMHornbkBI.roa (hash: wid4bFW3qa4KmdXMsIX+CnA/4qDgpalQwiwN6UVtwKM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549 Validity Not Before: Jul 15 01:32:46 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=FE9BFFF3758E7AF8AEE1D761DA905D04F354B259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:24:72:cc:67:52:6e:27:6b:ed:79:28:b8: f9:ce:f8:91:bb:35:ed:3e:4d:93:0a:47:c4:c9:f5: 40:ac:b1:99:b3:21:b7:1f:c5:bd:96:50:8d:87:17: 8a:3d:ae:5c:9d:5c:27:c8:78:9c:78:1a:48:df:05: e8:8b:60:f7:1c:71:7a:97:c1:1c:6e:eb:08:71:8a: 15:6f:b8:00:95:25:37:18:ed:00:24:2f:ef:c5:a1: 5b:aa:af:04:5f:6b:3b:3d:74:19:49:b5:28:20:ab: 01:6b:77:85:5d:13:8e:96:a4:a1:83:61:c8:eb:9b: 2c:24:6b:85:43:3a:aa:f6:1e:c9:23:9a:79:ec:3e: 51:bb:7f:3c:f3:bb:36:c5:b8:df:01:4f:66:e1:58: 3e:9a:3b:65:f8:42:a1:97:35:aa:7e:ca:4b:f5:78: 4a:e0:23:43:62:25:20:6e:0e:f0:09:fd:69:ff:54: 05:d6:d2:b4:69:05:6d:c7:08:5b:0e:70:29:a9:2b: ce:06:d8:ed:29:0a:57:fc:7d:2e:d1:99:20:63:41: af:17:52:69:16:a2:47:b1:7c:d1:4b:0d:b8:24:20: ba:4b:bb:6f:a5:cd:0b:d6:ab:01:89:59:2e:49:21: bd:01:64:f6:e6:be:e9:8f:59:29:44:03:62:8f:0b: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9B:FF:F3:75:8E:7A:F8:AE:E1:D7:61:DA:90:5D:04:F3:54:B2:59 X509v3 Authority Key Identifier: keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6d:82:cd:fb:95:67:f0:b1:1c:c9:7d:a9:4c:c2:a5:4b:38: 50:b3:5f:ea:a3:af:3b:f7:1f:40:fe:c2:f4:ed:2b:c7:80:92: 27:9b:1b:92:d8:b4:ed:eb:8a:5f:59:2c:4f:cb:94:62:8a:48: 2d:2d:0d:a6:dd:cd:f4:12:20:68:3a:c4:af:aa:6b:8b:00:d5: 87:c8:bf:0f:62:4c:da:a6:98:3c:a1:94:46:5a:9b:86:da:f6: a5:63:3a:fb:04:da:2b:62:4a:41:f1:97:3f:4f:c9:7a:ff:ec: 46:b4:c4:03:43:b6:e1:43:3a:da:bb:d4:d2:89:8a:bb:43:49: dc:b6:a4:63:50:97:14:46:ad:f0:69:c4:55:8c:9a:e8:d4:2f: 69:d9:e0:8f:8a:54:c6:3c:57:c0:5e:d2:1c:cb:03:f3:14:e2: 69:2b:c9:dd:5c:ea:13:15:da:be:81:28:16:99:21:98:a6:54: 93:a0:e6:50:a3:c4:41:f8:0e:30:32:22:e6:6e:fe:e1:53:e4: a9:5c:68:fe:5d:9b:df:3d:7f:1a:b8:6f:09:eb:9f:4d:29:58: a5:45:73:7e:25:1d:b0:49:3b:80:25:f2:ac:9a:82:4e:17:2c: 54:37:a5:2a:9f:b9:a8:1a:58:a2:71:23:81:6d:62:18:38:50: 30:c4:65:ca -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOTMz REUzRUY5NjQ1MENBMTIwQzc3QTVFQTgyNjQzNEREMTQ5NTQ5MB4XDTI1MDcxNTAx MzI0NloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoRkU5QkZGRjM3NThFN0FG OEFFRTFENzYxREE5MDVEMDRGMzU0QjI1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKjeJHLMZ1JuJ2vteSi4+c74kbs17T5NkwpHxMn1QKyxmbMhtx/F vZZQjYcXij2uXJ1cJ8h4nHgaSN8F6Itg9xxxepfBHG7rCHGKFW+4AJUlNxjtACQv 78WhW6qvBF9rOz10GUm1KCCrAWt3hV0TjpakoYNhyOubLCRrhUM6qvYeySOaeew+ Ubt/PPO7NsW43wFPZuFYPpo7ZfhCoZc1qn7KS/V4SuAjQ2IlIG4O8An9af9UBdbS tGkFbccIWw5wKakrzgbY7SkKV/x9LtGZIGNBrxdSaRaiR7F80UsNuCQguku7b6XN C9arAYlZLkkhvQFk9ua+6Y9ZKUQDYo8LMOMCAwEAAaOCAj0wggI5MB0GA1UdDgQW BBT+m//zdY56+K7h12HakF0E81SyWTAfBgNVHSMEGDAWgBQZM94++WRQyhIMd6Xq gmQ03RSVSTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvODc3L0dUUGVQdmxrVU1vU0RIZWw2b0prTk4wVWxVay5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dUUGVQdmxrVU1vU0RIZWw2b0prTk4w VWxVay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC84NzcvR1RQZVB2bGtVTW9TREhlbDZvSmtOTjBVbFVrLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAI5tgs37lWfwsRzJfalMwqVLOFCzX+qjrzv3H0D+wvTtK8eAkiebG5LYtO3r il9ZLE/LlGKKSC0tDabdzfQSIGg6xK+qa4sA1YfIvw9iTNqmmDyhlEZam4ba9qVj OvsE2itiSkHxlz9PyXr/7Ea0xANDtuFDOtq71NKJirtDSdy2pGNQlxRGrfBpxFWM mujUL2nZ4I+KVMY8V8Be0hzLA/MU4mkryd1c6hMV2r6BKBaZIZimVJOg5lCjxEH4 DjAyIuZu/uFT5KlcaP5dm989fxq4bwnrn00pWKVFc34lHbBJO4Al8qyagk4XLFQ3 pSqfuagaWKJxI4FtYhg4UDDEZco= -----END CERTIFICATE-----Generated at Mon Jul 21 09:16:24 2025 by rpki-client