$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft File: BqhITfT7r-XEjZiKBGtqtqgbLfM.mft (raw, json) Hash identifier: ZVmokXrTBWvVi2jioi8/ejqCJds3JIr6nNXQO5CcCKA= Subject key identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06 Authority key identifier: 06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3 Certificate issuer: /CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3 Certificate serial: 4A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft Manifest number: 0498 Signing time: Sun 06 Apr 2025 05:28:00 +0000 Manifest this update: Sun 06 Apr 2025 05:28:00 +0000 Manifest next update: Mon 21 Apr 2025 05:28:00 +0000 Files and hashes: 1: BqhITfT7r-XEjZiKBGtqtqgbLfM.crl (hash: ZnVS/QnI3AamQwzxNbZw7R4KVu5ol2uVgwShObqlSQw=) 2: G_S0Gz3KTyh-MqzAOua6wLduGAI.roa (hash: 9XGjozh1G2Anp7EXh+cJlebAWIWL1XDMHThLmfGh8ck=) 3: XiPKeCusl_MuXNzs6Mc2jnDN07s.roa (hash: 3LBcWqFuWfFpb6sJq0NC48yBSGSdmbyS7LwgsGVTbdI=) 4: ZXuos-JEHWQcWv_PGq0NWZkhB9k.roa (hash: GjdLJdIqTadhJ7yNRh70YPtOT+LzMauEQ0aBOBT+Zhs=) 5: gXJMlFIb5gGqwKsaF3UnKaQ4SOA.roa (hash: FWSayJ+Q8MyzWxO1VutrOzC6k8P23b5jlJ+Ua+d4N48=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 07:53:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06A8484DF4FBAFE5C48D988A046B6AB6A81B2DF3 Validity Not Before: Mar 15 01:34:37 2025 GMT Not After : Mar 15 01:30:03 2026 GMT Subject: CN=E23C280566C84096512598EF39E5E2B65AB67806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:89:f2:5e:fc:7e:5f:f4:57:24:01:c8:13:a5: 8a:19:7e:e5:e1:3d:65:64:0d:33:5d:32:2a:b9:6e: 46:73:49:e6:47:f8:85:fc:eb:40:37:89:b3:8d:2b: 5c:58:71:fb:3c:59:57:96:fc:e5:00:53:01:ac:55: 76:ac:87:a8:f4:0e:69:c9:c3:29:19:e5:a3:34:69: 30:13:37:e0:2b:45:be:af:df:1e:bc:b9:44:b1:62: 29:46:6c:8c:9c:37:34:0c:50:52:d3:e5:eb:c8:08: 98:2b:ee:7b:9f:d6:7f:e0:d5:6a:8d:d6:92:09:fb: eb:a9:70:68:9e:ea:9a:e3:38:ee:5a:38:13:ce:27: 89:99:13:22:bf:c9:6c:10:5c:4d:ce:7b:c1:80:89: 8c:6b:6a:61:9f:1f:bf:86:f8:3c:de:fe:1c:57:f4: 83:c4:a0:6c:67:dd:dd:aa:68:8e:cd:da:c3:d7:b3: 89:46:65:1b:d0:b2:a1:d9:f8:21:50:1f:d6:18:64: 26:45:ef:07:ef:f6:36:b1:4e:91:ef:07:1c:fb:cc: 3d:cf:d7:e0:9d:9e:66:ae:29:9c:67:0f:3e:44:56: 09:7a:92:00:0a:dd:0c:2f:12:d8:73:3e:83:b7:b9: d4:00:fd:d0:bd:e7:49:41:94:00:9e:68:c9:7e:6a: 40:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3C:28:05:66:C8:40:96:51:25:98:EF:39:E5:E2:B6:5A:B6:78:06 X509v3 Authority Key Identifier: keyid:06:A8:48:4D:F4:FB:AF:E5:C4:8D:98:8A:04:6B:6A:B6:A8:1B:2D:F3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BqhITfT7r-XEjZiKBGtqtqgbLfM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/924/BqhITfT7r-XEjZiKBGtqtqgbLfM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:b3:41:3f:66:19:d7:d7:4a:ea:43:32:df:06:fd:06:17:95: 84:27:c8:4e:09:4b:c8:80:37:d4:59:60:00:97:40:97:dc:9d: 23:89:54:27:f3:e2:d3:a0:e6:71:f6:76:15:a3:d5:69:44:ec: d6:39:97:b6:17:bb:1e:5f:8e:ec:b0:82:0d:2d:1b:f5:4b:94: 59:ad:14:7a:90:e9:6e:06:9a:95:a4:c2:bf:6c:51:04:ae:ea: 15:ff:4d:f3:16:d0:f0:e9:f5:7b:05:f1:a1:22:db:66:3f:68: 9a:d2:fc:d4:ca:07:5d:df:54:f4:65:a0:1c:16:b4:fd:6d:89: 76:61:e2:0a:75:9c:de:3e:fc:1a:09:ff:46:09:52:88:7c:b4: e7:8f:9a:f4:69:f2:11:0d:f7:56:2a:e2:38:88:3e:d3:f9:0a: 11:a7:b5:51:66:ab:62:8a:b0:7b:be:a9:bf:93:c9:e5:cf:27: d6:df:54:69:40:cb:9d:ce:13:07:f9:2f:b2:6b:71:78:e1:f7: ae:33:eb:47:c0:2f:88:a7:65:c9:36:f9:ad:3d:3b:96:d5:5f: b9:93:ee:01:73:98:92:5c:ff:34:69:43:f5:ef:41:8e:bb:a3: 91:5e:11:6f:76:42:77:34:fd:0f:d9:5b:df:2d:1f:ea:be:2d: 03:c2:38:87 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkE4 NDg0REY0RkJBRkU1QzQ4RDk4OEEwNDZCNkFCNkE4MUIyREYzMB4XDTI1MDMxNTAx MzQzN1oXDTI2MDMxNTAxMzAwM1owMzExMC8GA1UEAxMoRTIzQzI4MDU2NkM4NDA5 NjUxMjU5OEVGMzlFNUUyQjY1QUI2NzgwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJaJ8l78fl/0VyQByBOlihl+5eE9ZWQNM10yKrluRnNJ5kf4hfzr QDeJs40rXFhx+zxZV5b85QBTAaxVdqyHqPQOacnDKRnlozRpMBM34CtFvq/fHry5 RLFiKUZsjJw3NAxQUtPl68gImCvue5/Wf+DVao3Wkgn766lwaJ7qmuM47lo4E84n iZkTIr/JbBBcTc57wYCJjGtqYZ8fv4b4PN7+HFf0g8SgbGfd3apojs3aw9eziUZl G9Cyodn4IVAf1hhkJkXvB+/2NrFOke8HHPvMPc/X4J2eZq4pnGcPPkRWCXqSAArd DC8S2HM+g7e51AD90L3nSUGUAJ5oyX5qQD8CAwEAAaOCAj0wggI5MB0GA1UdDgQW BBTiPCgFZshAllElmO855eK2WrZ4BjAfBgNVHSMEGDAWgBQGqEhN9Puv5cSNmIoE a2q2qBst8zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTI0L0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFnYkxmTS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0JxaElUZlQ3ci1YRWpaaUtCR3RxdHFn YkxmTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85MjQvQnFoSVRmVDdyLVhFalppS0JHdHF0cWdiTGZNLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABqzQT9mGdfXSupDMt8G/QYXlYQnyE4JS8iAN9RZYACXQJfcnSOJVCfz4tOg 5nH2dhWj1WlE7NY5l7YXux5fjuywgg0tG/VLlFmtFHqQ6W4GmpWkwr9sUQSu6hX/ TfMW0PDp9XsF8aEi22Y/aJrS/NTKB13fVPRloBwWtP1tiXZh4gp1nN4+/BoJ/0YJ Uoh8tOePmvRp8hEN91Yq4jiIPtP5ChGntVFmq2KKsHu+qb+TyeXPJ9bfVGlAy53O Ewf5L7JrcXjh964z60fAL4inZck2+a09O5bVX7mT7gFzmJJc/zRpQ/XvQY67o5Fe EW92Qnc0/Q/ZW98tH+q+LQPCOIc= -----END CERTIFICATE-----Generated at Sun Apr 6 12:24:12 2025 by rpki-client