$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft File: 4FbQUB1DDOD88NsGdbr8kLBdm_U.mft (raw, json) Hash identifier: 2BkdcvWljMrBdo9P2xQzEuqekGBpAZoj4s+t1YTEZWE= Subject key identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 Certificate issuer: /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Certificate serial: 7A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft Manifest number: 1235 Signing time: Fri 13 Jun 2025 13:37:34 +0000 Manifest this update: Fri 13 Jun 2025 13:37:34 +0000 Manifest next update: Sat 28 Jun 2025 13:37:34 +0000 Files and hashes: 1: 3o4efsy6CF7jZ61dtOW7PqQSq94.roa (hash: kBN7u6BGw6aX4jO6ee9sQffgu3wHtY2kw5tnWjAwSDc=) 2: 4FbQUB1DDOD88NsGdbr8kLBdm_U.crl (hash: 6UEsdssYPKow9OK3xN+dtNjB4FLuQwFitHLKh53GCNc=) 3: 8oH6agpp1ENa38mQLZQr1iG0qnY.roa (hash: kCgm9wR/qw1bOTiSB8WF7+qt79rPFX9Gruyq07nzcjY=) 4: Htn5TbuZ0ywFb2QUrta39pHLTsM.roa (hash: W8JiYZ8GhlKTsZI0eWdZQICZ8luw3Ek3h9OwUiFN7yw=) 5: qsVmoq0KHHiMzxcwMrvP3kU9hqo.roa (hash: cWbsDbS0XIg1G0NaeGS0yc6PGzej0S2xn1+oZEyO6vg=) 6: vxiw72qJLhOZWd4axelngyu2BMs.roa (hash: cWyZP78E8QjkwpLE90bWmmtG3kW6i8AXs2mNvKYd69g=) 7: wsGZYljcA1Ick8Kg4FH_ygf-Jf8.roa (hash: JKqvbMmvJoK14+TL/yEi8jX2l01b0FGxFTqnYJsg6Gw=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5 Validity Not Before: May 23 10:06:11 2025 GMT Not After : May 23 09:51:00 2026 GMT Subject: CN=1237FA2C47A961C2F966F3B20BB09D2477AEF307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4e:1c:dd:e1:32:ba:b9:74:3f:c7:64:44:c7: 56:ee:be:36:7a:80:45:63:f4:2b:18:6d:35:9b:1b: 62:c6:04:b5:ce:f8:53:1b:26:fc:cd:ac:1f:6c:05: 53:4d:b4:c4:57:10:0c:0c:f6:b4:c1:69:6d:69:3e: 2b:3d:f2:d8:ae:1b:c5:85:1b:3d:29:da:19:da:f7: 08:60:29:81:db:3c:a4:92:82:9c:f1:2e:19:ce:0c: 71:ab:07:60:dd:f5:84:93:95:1d:c3:72:ab:c0:0b: bd:49:06:9b:06:cd:f2:2e:3f:12:da:33:54:97:ac: 57:d9:a1:d5:59:27:2c:88:b4:f9:04:17:3d:4e:8b: ee:29:6a:43:59:a1:1b:34:84:1c:0b:ab:f8:2d:be: a0:42:6b:4c:50:f7:95:7c:dc:05:12:64:12:17:c4: 97:a9:b2:1f:ee:f6:e8:89:81:8c:a1:44:2e:d2:a5: 83:b1:af:ba:3e:c2:3b:61:10:be:87:9c:e0:66:a3: 0a:c1:61:d3:84:79:19:f7:7c:82:bc:ed:5a:9e:63: 9e:81:d9:8e:b5:10:e0:b2:c9:e5:14:a8:a8:ed:ca: 1d:71:41:be:7d:97:a2:c2:3a:7a:36:e5:ff:87:71: 2f:46:1b:39:39:72:81:3d:01:18:af:40:4e:cd:dc: 50:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:37:FA:2C:47:A9:61:C2:F9:66:F3:B2:0B:B0:9D:24:77:AE:F3:07 X509v3 Authority Key Identifier: keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:84:09:0b:08:81:37:c7:4b:53:ef:d7:01:66:a5:e2:7f:5e: 23:5c:cb:5c:ef:b0:5d:e0:9e:cf:44:85:6e:57:2d:38:2b:88: 6c:0a:3f:46:d5:fa:0e:a1:21:94:f1:11:46:3f:3b:83:47:93: 6a:8b:40:90:d9:3c:0f:bf:29:79:fb:0c:c8:2b:65:93:1b:50: 85:1a:0a:a2:71:fc:6c:6c:6b:93:96:ef:a6:21:47:d4:79:ac: 59:1c:38:96:28:17:88:7a:74:a8:64:d7:2f:16:e2:11:86:1f: d1:fd:38:8e:3f:db:d5:df:8e:a1:d1:ff:f6:be:48:63:35:4c: b6:a4:a1:84:6c:e0:e4:b5:2f:fd:d1:60:4e:47:9a:12:c2:7f: 51:35:03:09:ff:69:0d:c0:0b:d4:32:44:78:66:f4:da:8b:79: ff:af:5e:59:75:86:b8:70:6c:11:c7:50:f2:50:02:1e:1a:6a: 31:0b:40:e1:fe:cb:7e:11:37:ec:95:45:87:cf:26:7f:25:75: 43:f2:bb:17:2f:ab:22:cb:da:b9:c6:05:aa:18:70:52:17:cd: 39:75:83:6e:49:e4:90:3f:73:65:21:a8:3b:ed:77:21:84:3e: b4:3d:bf:5b:e5:c6:99:8f:09:d7:50:98:4a:72:76:8f:c9:c5: b9:33:f8:f8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBejANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2 RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI1MDUyMzEw MDYxMVoXDTI2MDUyMzA5NTEwMFowMzExMC8GA1UEAxMoMTIzN0ZBMkM0N0E5NjFD MkY5NjZGM0IyMEJCMDlEMjQ3N0FFRjMwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAOZOHN3hMrq5dD/HZETHVu6+NnqARWP0KxhtNZsbYsYEtc74Uxsm /M2sH2wFU020xFcQDAz2tMFpbWk+Kz3y2K4bxYUbPSnaGdr3CGApgds8pJKCnPEu Gc4McasHYN31hJOVHcNyq8ALvUkGmwbN8i4/EtozVJesV9mh1VknLIi0+QQXPU6L 7ilqQ1mhGzSEHAur+C2+oEJrTFD3lXzcBRJkEhfEl6myH+726ImBjKFELtKlg7Gv uj7CO2EQvoec4GajCsFh04R5Gfd8grztWp5jnoHZjrUQ4LLJ5RSoqO3KHXFBvn2X osI6ejbl/4dxL0YbOTlygT0BGK9ATs3cUJECAwEAAaOCAkEwggI9MB0GA1UdDgQW BBQSN/osR6lhwvlm87ILsJ0kd67zBzAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1 uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzExMjA3LzRGYlFVQjFERE9EODhOc0dkYnI4a0xCZG1fVS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBehAkLCIE3x0tT79cBZqXif14jXMtc77Bd4J7PRIVuVy04K4hsCj9G 1foOoSGU8RFGPzuDR5Nqi0CQ2TwPvyl5+wzIK2WTG1CFGgqicfxsbGuTlu+mIUfU eaxZHDiWKBeIenSoZNcvFuIRhh/R/TiOP9vV346h0f/2vkhjNUy2pKGEbODktS/9 0WBOR5oSwn9RNQMJ/2kNwAvUMkR4ZvTai3n/r15ZdYa4cGwRx1DyUAIeGmoxC0Dh /st+ETfslUWHzyZ/JXVD8rsXL6siy9q5xgWqGHBSF805dYNuSeSQP3NlIag77Xch hD60Pb9b5caZjwnXUJhKcnaPycW5M/j4 -----END CERTIFICATE-----Generated at Fri Jun 13 15:36:52 2025 by rpki-client