$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft File: qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft (raw, json) Hash identifier: ZsIXZDQSXheK7o2tKBKTJ5U9uMoI7eyo69WMrnrJd3Y= Subject key identifier: 91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0 Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 Certificate issuer: /CN=A935D5AD33DC630C4611987140F5E468B7081D11 Certificate serial: 60 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft Manifest number: 0701 Signing time: Tue 22 Jul 2025 08:03:16 +0000 Manifest this update: Tue 22 Jul 2025 08:03:16 +0000 Manifest next update: Wed 06 Aug 2025 08:03:16 +0000 Files and hashes: 1: 5Hi5II5jIayLrKUp-nvrQr3PJF4.roa (hash: S2iXMSjj9YZuM3C436hhhXBzauDLNfMTmCUtl1GyO98=) 2: D69mHvRQirzJlu5CJlGLqDEeivw.roa (hash: vZ9rRlYbjtXNGNSSLngyUUKOlziWBYOUehj8Q32V9i8=) 3: EHX5Y-sl_ISGcMCje0yGRR8HROY.roa (hash: LcBfUws4JmUW3QNe/nuHC+Lwqz4FXMBVSNOwZt9OUH8=) 4: N5Gjl4OqTQDKK7UV7lQ2NLKTZyk.roa (hash: RP3EKXCxvwKPj3JmMnXkkY7R6rYlH3BVSCFnfaIy0eo=) 5: O9ilW85m98c7GBKGvfsd54C3KJU.roa (hash: uWJVjR8xcDSJTifBzmQ/E/abNmJ3S5JBewFATcszy8A=) 6: TwJEe3dtoJ8dcxgPHiNAgtKgIZc.roa (hash: L1pqklHPHso3MG1ZJjEtLbApzqIKmAJH/VgTZkq+6Nc=) 7: qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl (hash: pvfVohARBhLcW7g/HgiEUzoP7WuG6h7Ms/EjQ79JkAc=) 8: yaG6g7C6Gj9pbKTyhgZKyoKs8aE.roa (hash: 6XJIfKQTtldK2uA6SVYMaZN2BGXtf30YmJ69DERV3sY=) 9: zAnxaBqqOz2v0GvOru_-EhSvcdg.roa (hash: V0Zsm1Bhrp4WE4N30BwTJ2l7BFj38/b6TEiLYYo9gpQ=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 09:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11 Validity Not Before: Jul 15 01:39:02 2025 GMT Not After : Jul 15 01:30:01 2026 GMT Subject: CN=9134E80DBF9D5AB38549CD9B8A333036492AF7A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8d:60:2a:b4:6d:b3:7e:14:b9:dc:cc:59:03: 19:b5:5a:56:18:b0:db:ad:7a:83:0c:9e:39:27:45: 40:ac:bd:24:82:4e:09:ec:67:49:d3:a7:b2:d7:c9: 83:b5:2c:50:95:69:48:65:e2:a9:4b:70:41:5e:7d: c8:f0:46:62:9c:96:5c:ba:28:f8:a0:97:45:0c:44: 90:2d:44:a6:d2:9d:c4:f7:76:45:48:d3:6d:43:f2: e8:4f:6b:6b:74:94:c8:ab:07:8a:15:0e:a2:4c:06: 6c:df:a8:27:97:04:48:3c:70:b7:e6:d1:c2:55:f2: f1:17:af:b8:63:0a:f7:66:d0:e4:43:b4:6a:1b:3e: 2e:5f:95:71:18:88:2f:44:e9:ad:24:7b:f6:f8:fc: 20:46:68:e8:16:12:9e:0a:7c:9c:fa:62:a7:d7:e0: b4:6d:68:39:2e:2c:89:6f:af:5e:45:8b:ae:69:36: 4b:63:16:2c:94:5b:a1:4d:bc:91:86:a8:30:4b:cb: a0:68:63:65:06:a6:c1:b7:32:bf:0f:f3:6f:2c:52: 3a:79:bb:a5:89:48:06:d8:f4:a3:05:c7:ae:c2:a5: cf:69:fa:8d:ae:62:7a:75:66:b8:8a:49:00:79:89: 49:88:97:9a:72:20:bd:87:bc:8f:16:ed:81:08:37: b1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:34:E8:0D:BF:9D:5A:B3:85:49:CD:9B:8A:33:30:36:49:2A:F7:A0 X509v3 Authority Key Identifier: keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:a0:98:31:af:7d:74:24:f9:60:4f:fe:41:28:9f:bd:a8:3b: 6d:f0:f0:e4:17:37:8e:d4:b8:14:80:06:d7:54:7b:78:aa:f9: 4a:d2:a2:d1:5e:32:93:7b:b3:ff:d6:de:19:37:4f:73:c6:e9: 25:c1:5c:c5:17:a6:58:e7:3d:60:0e:e0:b0:bc:bf:65:29:39: a0:63:f0:46:18:b1:a2:af:30:6d:94:0d:38:87:fb:44:b2:39: 0f:38:81:05:95:d5:e3:06:c4:47:3d:c1:46:f4:01:47:c0:f3: fa:67:ae:a4:58:bb:e4:5d:7f:86:eb:f9:e4:a5:0c:e4:51:1a: b5:89:f4:04:64:d6:ed:dd:67:4b:07:02:b3:a5:00:76:1f:25: f9:f9:de:95:fa:68:29:88:4e:0b:f1:58:25:db:63:06:de:cd: c0:62:d2:f5:11:df:2a:dd:6f:07:1d:bb:b0:cd:f7:b5:4a:65: ce:eb:8e:28:b4:87:80:6c:6b:2c:41:3b:09:e6:35:fa:6a:c7: 05:97:43:c3:41:9e:35:31:69:df:07:c8:25:e6:96:37:c4:9e: e7:7a:48:76:82:41:ba:6b:45:4e:71:bb:06:db:bd:19:70:2f: 49:5b:33:45:25:16:27:76:a0:b6:b7:1b:3d:53:94:01:07:c1: 08:26:77:d7 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1 RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTI1MDcxNTAx MzkwMloXDTI2MDcxNTAxMzAwMVowMzExMC8GA1UEAxMoOTEzNEU4MERCRjlENUFC Mzg1NDlDRDlCOEEzMzMwMzY0OTJBRjdBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJuNYCq0bbN+FLnczFkDGbVaVhiw2616gwyeOSdFQKy9JIJOCexn SdOnstfJg7UsUJVpSGXiqUtwQV59yPBGYpyWXLoo+KCXRQxEkC1EptKdxPd2RUjT bUPy6E9ra3SUyKsHihUOokwGbN+oJ5cESDxwt+bRwlXy8RevuGMK92bQ5EO0ahs+ Ll+VcRiIL0TprSR79vj8IEZo6BYSngp8nPpip9fgtG1oOS4siW+vXkWLrmk2S2MW LJRboU28kYaoMEvLoGhjZQamwbcyvw/zbyxSOnm7pYlIBtj0owXHrsKlz2n6ja5i enVmuIpJAHmJSYiXmnIgvYe8jxbtgQg3sbMCAwEAAaOCAj8wggI7MB0GA1UdDgQW BBSRNOgNv51as4VJzZuKMzA2SSr3oDAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA 9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAw6CYMa99dCT5YE/+QSifvag7bfDw5Bc3jtS4FIAG11R7eKr5StKi0V4y k3uz/9beGTdPc8bpJcFcxRemWOc9YA7gsLy/ZSk5oGPwRhixoq8wbZQNOIf7RLI5 DziBBZXV4wbERz3BRvQBR8Dz+meupFi75F1/huv55KUM5FEatYn0BGTW7d1nSwcC s6UAdh8l+fnelfpoKYhOC/FYJdtjBt7NwGLS9RHfKt1vBx27sM33tUplzuuOKLSH gGxrLEE7CeY1+mrHBZdDw0GeNTFp3wfIJeaWN8Se53pIdoJBumtFTnG7Btu9GXAv SVszRSUWJ3agtrcbPVOUAQfBCCZ31w== -----END CERTIFICATE-----Generated at Tue Jul 22 12:45:09 2025 by rpki-client