$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft File: mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft (raw, json) Hash identifier: pFGD43/HBrX5KslKqPQqMF1vdtLDpq/1BBWo3QDTqHM= Subject key identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC Authority key identifier: 98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 Certificate issuer: /CN=989E82672C98A627120ABA72DEBEBE22015849A0 Certificate serial: 0C Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft Manifest number: 25 Signing time: Thu 06 Jun 2024 13:46:00 +0000 Manifest this update: Thu 06 Jun 2024 13:46:00 +0000 Manifest next update: Sun 16 Jun 2024 13:46:00 +0000 Files and hashes: 1: QK4S3RxvDkeAvvRNzxPab0riCVc.roa (hash: /T1wnifkk1XmMWyXRKR7NEuopBr/F/xm4wFkfWrWD8A=) 2: mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl (hash: m04/Xr0+uFUvy1B6p0g1Q4Ltkym0SjbLK6kVKHaCXFo=) 3: vAabgpi9EUW8d7PNc9svNTRxQZY.roa (hash: vFLGdBi14zGIZj1Sk/xJoL0Z7r9BEugQfblEQO3VRfc=) 4: zNgPbFHZc0Q9pwVSPQTm037kltA.roa (hash: dm2pSUoUSUPHApzVkt4btzjljv7vN1Ixyk8iapXfVhE=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Jun 2024 14:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989E82672C98A627120ABA72DEBEBE22015849A0 Validity Not Before: May 15 01:38:00 2024 GMT Not After : May 15 01:30:03 2025 GMT Subject: CN=2557C2B67D5CEC87356BC7AD6F629B95BE8367AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:1e:da:87:2a:57:8d:99:1e:4a:30:7b:f2: 7e:15:f7:e0:68:3f:bf:c0:a7:7e:44:35:bb:7d:d3: da:fc:e9:44:c5:90:ed:49:8a:bb:6f:4d:58:e2:55: 4f:72:86:bf:51:97:af:b1:96:39:07:28:aa:9d:30: 1f:01:fd:98:f7:a1:16:8f:1e:b1:b9:1e:67:2f:7f: 89:a3:48:34:20:bf:7f:69:fb:6f:b5:fe:96:9b:8b: 6d:92:ab:ce:02:48:bf:09:3f:6b:e9:33:26:c8:18: 0c:83:24:70:dd:be:eb:63:7f:ab:b5:b6:1a:2b:ff: cf:6e:bd:bc:68:6f:d6:1d:eb:fe:40:27:77:a1:d6: 1d:2b:a0:17:f8:12:8c:e8:01:c1:c5:5a:61:64:e0: 0e:8e:15:de:ae:a6:ee:16:9d:ed:d1:02:3b:43:19: 9f:12:78:1f:93:1b:3a:80:52:81:a0:3b:78:c6:57: 2a:7f:d9:af:a6:0b:68:9a:5d:d4:f7:4c:d4:98:9e: 16:b9:b3:4d:56:91:a4:d9:00:4f:cb:17:b3:ec:9d: 10:f1:ab:b2:88:fc:74:d9:47:22:98:57:ec:5b:f6: 81:a6:b9:96:39:25:aa:8d:3c:1e:20:54:be:38:b5: 58:bb:7e:ce:b6:0e:85:74:56:32:15:47:ad:f0:03: 00:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:57:C2:B6:7D:5C:EC:87:35:6B:C7:AD:6F:62:9B:95:BE:83:67:AC X509v3 Authority Key Identifier: keyid:98:9E:82:67:2C:98:A6:27:12:0A:BA:72:DE:BE:BE:22:01:58:49:A0 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mJ6CZyyYpicSCrpy3r6-IgFYSaA.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/965/mJ6CZyyYpicSCrpy3r6-IgFYSaA.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:70:3e:1c:58:f7:28:09:02:b1:4f:e8:fa:d1:28:ed:ec:88: 4b:c4:8e:ec:bf:e0:7e:f1:be:aa:39:8f:32:b9:a8:28:c2:46: 41:47:7a:93:94:93:d4:e8:07:72:22:11:ec:ca:85:ce:c9:9e: 51:8f:bc:c7:bb:a1:4a:c7:34:f7:9d:d4:b8:22:7f:8e:f4:73: 2c:44:6e:14:b5:9d:69:96:81:fd:8b:9c:48:4c:3c:ee:11:1b: 08:af:00:29:f8:5f:4a:e2:60:27:b0:da:c4:99:2f:ec:fd:ff: 10:84:f4:3e:cf:b8:b8:0e:94:2e:16:ba:12:94:7a:98:71:d9: 93:e2:63:21:5f:97:23:ab:69:43:2e:a7:ea:6c:bf:18:aa:3a: d8:f1:df:79:8a:07:3e:76:04:58:c6:d4:35:c5:67:df:ad:38: 39:0c:0f:cf:b9:f7:d5:b0:c0:88:52:0c:22:88:30:75:93:41: ad:05:88:40:c9:b7:78:91:ab:20:fb:ee:11:1b:62:1a:6e:b3: d3:ea:3c:8d:59:13:ab:b3:43:cf:1b:fb:e9:e7:e4:66:fc:a7: ae:a7:e8:14:d3:2e:9c:26:a7:dd:83:eb:b8:bf:bf:cb:a4:9b: f1:27:d0:46:30:2c:66:3a:14:ed:68:f7:f7:76:7f:c9:fb:f7: 0b:2c:1d:b3 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5ODlF ODI2NzJDOThBNjI3MTIwQUJBNzJERUJFQkUyMjAxNTg0OUEwMB4XDTI0MDUxNTAx MzgwMFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMjU1N0MyQjY3RDVDRUM4 NzM1NkJDN0FENkY2MjlCOTVCRTgzNjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAMKzHtqHKleNmR5KMHvyfhX34Gg/v8CnfkQ1u33T2vzpRMWQ7UmK u29NWOJVT3KGv1GXr7GWOQcoqp0wHwH9mPehFo8esbkeZy9/iaNINCC/f2n7b7X+ lpuLbZKrzgJIvwk/a+kzJsgYDIMkcN2+62N/q7W2Giv/z269vGhv1h3r/kAnd6HW HSugF/gSjOgBwcVaYWTgDo4V3q6m7had7dECO0MZnxJ4H5MbOoBSgaA7eMZXKn/Z r6YLaJpd1PdM1JieFrmzTVaRpNkAT8sXs+ydEPGrsoj8dNlHIphX7Fv2gaa5ljkl qo08HiBUvji1WLt+zrYOhXRWMhVHrfADAGECAwEAAaOCAj0wggI5MB0GA1UdDgQW BBQlV8K2fVzshzVrx61vYpuVvoNnrDAfBgNVHSMEGDAWgBSYnoJnLJimJxIKunLe vr4iAVhJoDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTY1L21KNkNaeXlZcGljU0NycHkzcjYtSWdGWVNhQS5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL21KNkNaeXlZcGljU0NycHkzcjYtSWdG WVNhQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC85NjUvbUo2Q1p5eVlwaWNTQ3JweTNyNi1JZ0ZZU2FBLm1mdDBG BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBABVwPhxY9ygJArFP6PrRKO3siEvEjuy/4H7xvqo5jzK5qCjCRkFHepOUk9To B3IiEezKhc7JnlGPvMe7oUrHNPed1Lgif470cyxEbhS1nWmWgf2LnEhMPO4RGwiv ACn4X0riYCew2sSZL+z9/xCE9D7PuLgOlC4WuhKUephx2ZPiYyFflyOraUMup+ps vxiqOtjx33mKBz52BFjG1DXFZ9+tODkMD8+599WwwIhSDCKIMHWTQa0FiEDJt3iR qyD77hEbYhpus9PqPI1ZE6uzQ88b++nn5Gb8p66n6BTTLpwmp92D67i/v8ukm/En 0EYwLGY6FO1o9/d2f8n79wssHbM= -----END CERTIFICATE-----Generated at Thu Jun 6 14:56:25 2024 by rpki-client on console-fra.rpki-client.org