$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft File: 51bZpc6aysl4NgAR96fPxDAYHVM.mft (raw, json) Hash identifier: 9VqoTI1G5dZTfdV4trDpyOna2H1/XWm04QPbnYVXJPA= Subject key identifier: BA:F9:D1:F8:91:0A:FA:83:53:25:35:A5:F5:AB:14:80:A6:63:53:98 Authority key identifier: E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53 Certificate issuer: /CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53 Certificate serial: 0F Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft Manifest number: 23 Signing time: Sat 15 Jun 2024 01:37:45 +0000 Manifest this update: Sat 15 Jun 2024 01:37:45 +0000 Manifest next update: Tue 25 Jun 2024 01:37:45 +0000 Files and hashes: 1: 51bZpc6aysl4NgAR96fPxDAYHVM.crl (hash: 0kiVH8nU53codqIWJ576If0DCeyrEAoRNCXQC2b/fQc=) 2: RuNGXfO0OqAk6acjENZp9JFZC3k.roa (hash: b1ku4j6rCIjdRb/0IeFB+U+EiGdc2/qyl5HkYfIFJCo=) 3: oxE_TFtRGVgST5hoJ2FrJtliWcI.roa (hash: 0pHMu6iiKn6FE76IV/vyH8NVqg+Gfxzn5wCCZXWcdyc=) 4: pfwUf21F6nt_pPPZdAifwOop3J0.roa (hash: AbcGx+Uw3LojVtwoEsg/hQGxISEofcCZJjivPVALLSM=) Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Jun 2024 14:09:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E756D9A5CE9ACAC978360011F7A7CFC430181D53 Validity Not Before: Jun 15 01:37:45 2024 GMT Not After : Jun 15 01:30:03 2025 GMT Subject: CN=BAF9D1F8910AFA83532535A5F5AB1480A6635398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9b:f4:45:a7:9e:65:42:6c:f1:86:07:1a:99: da:e6:a0:88:78:04:64:a8:4d:bc:b6:9c:56:92:fc: ec:5f:d4:03:4a:65:31:6e:73:0b:62:f2:a3:22:ac: c5:6a:a0:a9:2a:6d:cf:7d:d9:42:19:05:6a:8f:4c: fe:40:75:d5:51:1f:9c:4e:d4:dc:b2:01:85:35:1d: 3d:68:a4:a7:83:29:ea:a6:64:22:fc:81:f3:c5:08: 66:51:9d:46:cc:cd:8e:d4:ff:12:80:c6:8f:6a:f7: 30:d3:e1:d2:6c:20:2d:a4:2e:15:96:bf:62:73:20: 84:c6:c7:1c:a5:7d:28:94:f1:ea:a7:ab:be:0c:59: b9:2c:eb:17:81:e2:bb:f0:1d:26:9c:35:79:ad:fe: 79:65:86:2c:f2:9e:45:5b:4b:b8:fa:a3:f5:9a:43: 8a:b4:6e:09:25:e0:c9:ad:f6:a4:59:08:5a:5b:8a: 46:93:d8:0b:e2:b7:0f:52:16:e9:ee:0c:41:5f:f9: 45:de:65:ca:93:90:0f:13:96:66:b8:aa:81:5f:af: cd:8e:de:77:75:63:cd:05:29:53:22:9b:06:fe:08: a0:68:58:c9:14:fa:8e:58:72:6e:7e:7e:88:6e:2c: db:1c:37:07:d2:44:2b:ca:10:e0:2a:94:55:23:67: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F9:D1:F8:91:0A:FA:83:53:25:35:A5:F5:AB:14:80:A6:63:53:98 X509v3 Authority Key Identifier: keyid:E7:56:D9:A5:CE:9A:CA:C9:78:36:00:11:F7:A7:CF:C4:30:18:1D:53 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/51bZpc6aysl4NgAR96fPxDAYHVM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20058/51bZpc6aysl4NgAR96fPxDAYHVM.mft RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:a5:21:94:76:a2:61:4d:7a:6a:0b:0c:56:49:39:ed:39:bf: 57:53:85:0a:42:f7:55:04:dc:de:54:42:a1:5d:77:a6:9b:03: 39:e8:95:91:57:15:01:9c:ba:8b:ac:55:c5:09:8b:32:8d:33: 7e:1b:4e:11:2c:23:6b:58:81:29:f8:02:78:df:f9:5e:8b:b0: 1d:35:ca:e9:92:ec:0d:52:c0:eb:6d:2b:e1:28:58:b5:73:6b: 20:c8:4b:09:f2:78:70:e9:fc:18:74:3a:8f:95:3d:2b:15:46: 42:8a:0a:86:b3:3a:a8:df:34:bb:0e:05:ba:3d:aa:e6:1e:64: c8:db:91:12:46:1a:69:8b:25:b6:7d:ad:23:19:c5:08:b5:a5: d4:c7:9c:c9:83:63:da:5d:94:14:b1:22:a6:25:7b:9f:21:9e: 08:44:62:95:8c:ae:a0:7c:a0:56:16:d7:ae:f1:e9:a1:68:6a: 19:07:6c:87:50:27:a3:49:c2:b4:ab:94:12:f9:00:a6:7d:1f: 57:c3:35:4f:e4:dd:9c:10:49:98:00:83:80:12:41:bf:56:9c: c8:77:1b:04:fd:fa:86:74:7e:10:36:4e:d8:f9:8c:d6:a1:b3: 47:19:e2:79:ab:bc:49:78:5a:d5:35:d3:a0:96:fd:03:5d:06: 3b:f2:6f:cd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNzU2 RDlBNUNFOUFDQUM5NzgzNjAwMTFGN0E3Q0ZDNDMwMTgxRDUzMB4XDTI0MDYxNTAx Mzc0NVoXDTI1MDYxNTAxMzAwM1owMzExMC8GA1UEAxMoQkFGOUQxRjg5MTBBRkE4 MzUzMjUzNUE1RjVBQjE0ODBBNjYzNTM5ODCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAKWb9EWnnmVCbPGGBxqZ2uagiHgEZKhNvLacVpL87F/UA0plMW5z C2LyoyKsxWqgqSptz33ZQhkFao9M/kB11VEfnE7U3LIBhTUdPWikp4Mp6qZkIvyB 88UIZlGdRszNjtT/EoDGj2r3MNPh0mwgLaQuFZa/YnMghMbHHKV9KJTx6qervgxZ uSzrF4Hiu/AdJpw1ea3+eWWGLPKeRVtLuPqj9ZpDirRuCSXgya32pFkIWluKRpPY C+K3D1IW6e4MQV/5Rd5lypOQDxOWZriqgV+vzY7ed3VjzQUpUyKbBv4IoGhYyRT6 jlhybn5+iG4s2xw3B9JEK8oQ4CqUVSNnLHUCAwEAAaOCAkEwggI9MB0GA1UdDgQW BBS6+dH4kQr6g1MlNaX1qxSApmNTmDAfBgNVHSMEGDAWgBTnVtmlzprKyXg2ABH3 p8/EMBgdUzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMjAwNTgvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4REFZSFZNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNTFiWnBjNmF5c2w0TmdBUjk2ZlB4 REFZSFZNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzIwMDU4LzUxYlpwYzZheXNsNE5nQVI5NmZQeERBWUhWTS5t ZnQwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATpSGUdqJhTXpqCwxWSTntOb9XU4UKQvdVBNzeVEKhXXemmwM56JWR VxUBnLqLrFXFCYsyjTN+G04RLCNrWIEp+AJ43/lei7AdNcrpkuwNUsDrbSvhKFi1 c2sgyEsJ8nhw6fwYdDqPlT0rFUZCigqGszqo3zS7DgW6ParmHmTI25ESRhppiyW2 fa0jGcUItaXUx5zJg2PaXZQUsSKmJXufIZ4IRGKVjK6gfKBWFteu8emhaGoZB2yH UCejScK0q5QS+QCmfR9XwzVP5N2cEEmYAIOAEkG/VpzIdxsE/fqGdH4QNk7Y+YzW obNHGeJ5q7xJeFrVNdOglv0DXQY78m/N -----END CERTIFICATE-----Generated at Mon Jun 17 14:52:04 2024 by rpki-client on console-ams.rpki-client.org