$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft File: o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft (raw, json) Hash identifier: 0StKMIYLYJwlnop250QG9ooe20YP1rkzCmW1ouXIC5A= Subject key identifier: 45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5 Authority key identifier: A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF Certificate issuer: /CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF Certificate serial: 1A Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft Manifest number: 08BA Signing time: Sat 15 Nov 2025 17:45:50 +0000 Manifest this update: Sat 15 Nov 2025 17:45:50 +0000 Manifest next update: Sun 30 Nov 2025 17:45:50 +0000 Files and hashes: 1: F6ilgIJBpYNP2NIgALlLEG-jkRA.roa (hash: uzvD2OBlyXFShOyQj2ZMeY4abdUiMNWn3The25E/3OA=) 2: VZWn_-1bGQd-d339wIb-XCxpUUg.roa (hash: bfcL1OTITKIvAocbZXkgpiPM0pg2Gywdn4ECEZ3VJrI=) 3: o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl (hash: Dug34KOxhQ6uRPRMKxmCa2qsIOzJeFbH8/TNLNHOu7o=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Nov 2025 15:34:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A34005B8EDE6636C61911B6BA981E49D9E1216CF Validity Not Before: Nov 15 01:37:36 2025 GMT Not After : Nov 15 01:30:02 2026 GMT Subject: CN=451744DF5FCC00491CBA9FA0CC7244F7419C48E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:35:fd:cf:5c:20:c0:7a:37:f9:5a:f4:7d: 2d:7e:77:ad:ef:f3:71:3a:f0:2f:bf:f1:15:ff:07: fb:7c:5f:be:fd:8f:74:3a:8a:db:03:ae:79:b0:7a: 84:2f:db:93:37:2c:e2:e8:ab:bc:b2:55:f6:0c:02: 8b:67:dc:65:02:fa:9f:bd:4e:b1:b0:4f:32:1a:c0: 7d:a2:18:7f:38:81:c8:d0:5b:6c:19:a4:72:27:c3: 9c:b5:ee:4e:44:4d:88:ab:90:c8:f4:9f:c0:2d:a4: 95:49:6f:c7:db:b2:0b:b0:79:fa:63:5d:7b:f0:1b: 67:a5:6f:53:e4:d5:3d:c3:57:fd:72:e0:cb:fa:a3: a2:28:d1:0c:2e:31:05:bb:1f:45:f3:c3:3f:6b:88: 22:4a:25:cf:7d:85:ae:59:4e:36:15:17:e1:a1:80: 17:03:88:e3:9c:13:26:55:af:14:49:3e:97:c9:b9: 47:db:26:f5:52:48:42:03:d5:92:e2:02:af:09:1a: 0a:c6:aa:a8:39:72:60:4c:4b:d9:e8:ff:6a:29:60: fb:95:94:ed:57:3c:52:f1:e8:08:91:3e:a3:2d:7c: 52:09:4d:24:f9:9c:8b:5b:fa:a1:ae:da:87:c4:d3: e8:84:25:e9:a2:4f:0e:1a:cc:7f:ed:76:64:cb:28: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:17:44:DF:5F:CC:00:49:1C:BA:9F:A0:CC:72:44:F7:41:9C:48:E5 X509v3 Authority Key Identifier: keyid:A3:40:05:B8:ED:E6:63:6C:61:91:1B:6B:A9:81:E4:9D:9E:12:16:CF X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o0AFuO3mY2xhkRtrqYHknZ4SFs8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/o0AFuO3mY2xhkRtrqYHknZ4SFs8.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a6:f2:c8:87:e0:5d:21:0f:9a:1d:99:6b:35:d5:09:67:63: fb:4e:0f:f6:32:fd:b4:99:e0:52:04:39:00:e5:99:ea:29:3b: 25:c8:4a:95:f2:84:b9:82:1d:82:8a:9b:76:4d:50:5c:ef:60: 71:c1:b0:96:e7:46:1f:87:58:53:57:f5:e1:ec:8b:11:14:41: 14:c4:9b:40:59:26:33:a3:cf:7c:1d:0d:0d:94:87:d4:47:ba: cd:7a:f1:3f:6e:7b:1b:9e:bd:ca:48:b4:f7:cb:3d:a3:05:cc: 2d:39:b2:4a:13:ee:ef:8b:77:d1:83:4e:4a:e9:22:cb:f3:64: ce:a6:8f:7c:c4:41:f7:67:c4:ee:01:3c:0e:3a:50:c2:39:03: be:ca:09:6e:cb:17:38:25:13:c0:bd:17:bf:dc:41:2e:bd:20: f2:8c:8f:a7:32:75:56:ce:d8:75:2f:0f:15:ef:7f:e2:59:01: 09:6d:9e:1f:1c:ed:43:18:0c:d7:b1:49:91:c4:db:33:55:b4: 15:da:14:51:dd:da:db:0e:19:7f:44:79:04:da:60:85:64:21: 3f:17:2a:63:7d:86:18:47:24:a5:92:3e:b1:03:d3:b0:8c:d4: 2a:47:b9:7b:f4:c9:64:e8:50:16:82:7c:da:b1:9c:7b:46:7f: 24:35:8f:3e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBMzQw MDVCOEVERTY2MzZDNjE5MTFCNkJBOTgxRTQ5RDlFMTIxNkNGMB4XDTI1MTExNTAx MzczNloXDTI2MTExNTAxMzAwMlowMzExMC8GA1UEAxMoNDUxNzQ0REY1RkNDMDA0 OTFDQkE5RkEwQ0M3MjQ0Rjc0MTlDNDhFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBALMMNf3PXCDAejf5WvR9LX53re/zcTrwL7/xFf8H+3xfvv2PdDqK 2wOuebB6hC/bkzcs4uirvLJV9gwCi2fcZQL6n71OsbBPMhrAfaIYfziByNBbbBmk cifDnLXuTkRNiKuQyPSfwC2klUlvx9uyC7B5+mNde/AbZ6VvU+TVPcNX/XLgy/qj oijRDC4xBbsfRfPDP2uIIkolz32FrllONhUX4aGAFwOI45wTJlWvFEk+l8m5R9sm 9VJIQgPVkuICrwkaCsaqqDlyYExL2ej/ailg+5WU7Vc8UvHoCJE+oy18UglNJPmc i1v6oa7ah8TT6IQl6aJPDhrMf+12ZMsoyY0CAwEAAaOCAj8wggI7MB0GA1UdDgQW BBRFF0TfX8wASRy6n6DMckT3QZxI5TAfBgNVHSMEGDAWgBSjQAW47eZjbGGRG2up geSdnhIWzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMTIwMy9vMEFGdU8zbVkyeGhrUnRycVlIa25aNFNGczguY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9vMEFGdU8zbVkyeGhrUnRycVlIa25a NFNGczguY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMTIwMy9vMEFGdU8zbVkyeGhrUnRycVlIa25aNFNGczgubWZ0 MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAw IQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsF AAOCAQEAeqbyyIfgXSEPmh2ZazXVCWdj+04P9jL9tJngUgQ5AOWZ6ik7JchKlfKE uYIdgoqbdk1QXO9gccGwludGH4dYU1f14eyLERRBFMSbQFkmM6PPfB0NDZSH1Ee6 zXrxP257G569yki098s9owXMLTmyShPu74t30YNOSukiy/NkzqaPfMRB92fE7gE8 DjpQwjkDvsoJbssXOCUTwL0Xv9xBLr0g8oyPpzJ1Vs7YdS8PFe9/4lkBCW2eHxzt QxgM17FJkcTbM1W0FdoUUd3a2w4Zf0R5BNpghWQhPxcqY32GGEckpZI+sQPTsIzU Kke5e/TJZOhQFoJ82rGce0Z/JDWPPg== -----END CERTIFICATE-----Generated at Sat Nov 15 19:00:03 2025 by rpki-client